Privacy Policy
Last updated: November 10, 2026
These are our general terms. They are not legal advice. If you have a question about your own situation, ask a lawyer where you live.
This Privacy Policy explains what personal information we collect when you use https://www.3dshedplans.com (the “Site”), why we collect it, who we share it with and what choices you have. We try to collect as little as we need to sell and deliver our plans and answer your questions.
1. Who is responsible for your data
The Site is run by Netholics Media, LLC, 1603 Capitol Ave. Ste 310 A205, Cheyenne, WY 82001, USA (“we”, “us”, “our”). For visitors in the European Union, the European Economic Area or the United Kingdom, we are the “controller” of your personal data. You can reach us through the contact form.
2. What we collect
Order data
When you buy a plan, checkout runs on SendOwl. SendOwl collects your name, email address, billing country and the plan you bought, and passes order details to us. Card and PayPal payments are processed by SendOwl’s payment providers. We never see or store your full card number.
Contact form data
When you use our contact form, we collect your name, email address, the content of your message and any order details you include. The form uses Cloudflare Turnstile to block spam, which checks information about your browser and device to tell people from bots.
Email list data
If you sign up for a free plan or join our email list, we collect your email address and, if you give it, your name. We also record when you signed up and whether you open or click our emails.
Analytics and usage data
We use Google Analytics 4 to understand how people use the Site. It loads after the page has finished loading. It collects information such as the pages you visit, how long you stay, the site that referred you, your approximate location (city or region, based on your IP address), and your browser, device and operating system.
Technical data
Our hosting server and Cloudflare, our content delivery and security service, automatically process your IP address, browser type and request details so that pages load and attacks are blocked. Server logs are kept for a short time for security.
We do not ask for, and ask you not to send us, sensitive information such as health data or government ID numbers.
For our own business reports we use totals only, such as the number of orders in a day. We do not put customer names, email addresses or order numbers in those reports or in the files we use to build the Site.
3. Why we use it and our legal bases
- To process and deliver your order, send your download link and receipt, and handle refunds. Legal basis for EU/UK visitors: performance of a contract.
- To answer your messages and give support. Legal basis: our legitimate interest in helping customers, or steps you ask for before a contract.
- To send our email list, including the free plan you asked for and later emails about plans and guides. Legal basis: your consent. You can withdraw it at any time.
- To understand and improve the Site through analytics. Legal basis: our legitimate interest, or your consent where local law requires it.
- To keep the Site secure and prevent spam and fraud. Legal basis: our legitimate interest.
- To keep records required by law, such as tax and accounting records. Legal basis: legal obligation.
4. Who we share it with
We share personal information only with service providers that help us run the Site, and only for the purposes above:
- SendOwl and its payment providers: checkout, payment processing and file delivery.
- MailerLite: our email list.
- Google: Google Analytics 4 for analytics.
- Cloudflare: content delivery, security and Turnstile spam protection on the contact page.
- Our hosting provider: the server that runs the Site, the contact form (built with Contact Form 7) and its email delivery.
We may also disclose information if the law requires it, to protect our rights or the safety of others, or to a buyer if the business is sold. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
5. How long we keep it
- Order records: as long as needed for tax and accounting, usually up to 7 years.
- Contact form messages: up to 2 years after our last reply, unless they relate to an order.
- Email list data: until you unsubscribe. After that, we keep only your email address on a suppression list so we do not email you again.
- Google Analytics data: no longer than 14 months, after which Google deletes it.
6. Security
The Site uses HTTPS encryption. Access to our systems is limited to people who need it, and our providers use their own security measures. No system is completely secure, so we cannot guarantee that your information will never be accessed without permission. If a breach affects your information, we will notify you where the law requires.
7. International transfers
We are based in the United States, and some of our providers process data in the United States and other countries. If you are in the EU, EEA or UK, your data may be transferred to countries that do not have the same data protection laws as yours. Where required, these transfers rely on safeguards such as the EU Standard Contractual Clauses, the UK Addendum, or the EU-US Data Privacy Framework where the provider is certified.
8. Your rights and choices
Everyone
- Access, correction and deletion. You can ask for a copy of your personal information, ask us to correct it, or ask us to delete it. We may need to keep some order records to meet legal obligations.
- Email opt-out. You can unsubscribe at any time using the link in every email we send. Order and delivery emails are not marketing and are sent even if you unsubscribe.
- Analytics opt-out. You can block analytics cookies in your browser or install the Google Analytics opt-out browser add-on.
EU, EEA and UK visitors
Under the GDPR and UK GDPR, you also have the right to restrict or object to our processing, to data portability, and to withdraw consent at any time without affecting earlier processing. You can complain to your local data protection authority, or in the UK to the Information Commissioner’s Office. We would be glad to hear from you first.
California residents
Under the California Consumer Privacy Act, as amended by the CPRA, you have the right to know what personal information we collect, use and disclose; to request deletion; to correct inaccurate information; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information; and not to be treated differently for using these rights. In the past 12 months we collected identifiers (name, email, IP address), commercial information (plans bought), and internet activity (analytics data), from you and your device, for the purposes in section 3. We disclosed these to the service providers in section 4. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use sensitive personal information. You may use an authorized agent to make a request. Residents of other US states with privacy laws have similar rights, and we honor them the same way.
How to make a request
Send your request through the contact form and include the email address you used with us. We may need to confirm your identity before acting. We will respond within the time the law requires, usually 30 days, or 45 days for California requests. If we deny a request, you may appeal by replying to our answer.
9. Do Not Track and Global Privacy Control
There is no common standard for browser “Do Not Track” signals, so the Site does not respond to them. We do honor Global Privacy Control (GPC) signals as a request to opt out of the sale or sharing of personal information. Since we do not sell or share personal information, no further change is needed when we receive one.
10. Children
The Site is meant for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.
11. Cookies
Cookies are small files a website stores in your browser. We use as few as we can:
- Analytics cookies from Google Analytics 4 (for example _ga), set after the page loads, to count visits and see how the Site is used.
- Security cookies from Cloudflare, used to tell real visitors from bots and protect the Site, including Cloudflare Turnstile on the contact page.
- Checkout cookies from SendOwl, needed for checkout and delivery to work.
We do not use advertising cookies. You can block or delete cookies in your browser settings. If you block security or checkout cookies, some parts of the Site, such as checkout or the contact form, may not work.
12. Changes to this policy
We may update this policy when our services or the law change. We will post the new version here and update the “Last updated” date. If a change is significant, we will make it clear on the Site.
13. Contact
Questions or requests about your privacy: please use the contact form, and we will reply by email. Our postal address is Netholics Media, LLC, 1603 Capitol Ave. Ste 310 A205, Cheyenne, WY 82001, USA.