Privacy policy

# Privacy Policy

**Last updated:** April 24, 2026

EverLittle 3D ("**EverLittle**," "**we**," "**us**," or "**our**"), a DBA of JDG Manufacturing LLC, operates the storefront at everlittle3d.com and related services that let expecting parents order 3D-printed keepsakes created from ultrasound scan data (collectively, the "**Services**"). The Services are hosted on Shopify.

This Privacy Policy describes what personal information we collect, how we use and disclose it, and the choices you have. Please read it carefully. By using the Services, you acknowledge that you have read and understood this Privacy Policy. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of personal information.

1. Who This Policy Applies To

The Services are used by three groups, and this Policy applies to all of them:

- **Customers / Parents.** Individuals who place orders for keepsakes, typically expecting or new parents.
- **Partner Providers / Clinics.** Ultrasound clinics and imaging centers that appear in our provider directory, receive referrals, and upload scan files to fulfill customer orders through a dedicated provider portal.
- **Visitors.** Anyone who browses everlittle3d.com without placing an order or creating an account.

Where a section applies only to one group, we say so.

2. Personal Information We Collect

"Personal information" means information that identifies or can reasonably be linked to you. We collect or process the following categories, depending on how you interact with the Services and as permitted or required by law:

- **Contact details** — name, shipping address, billing address, email address, phone number.
- **Account information** — username, password, order history, preferences, saved addresses, and (for providers) clinic profile, service offerings, and provider portal credentials.
- **Order and transaction information** — the items you view, add to cart, purchase, return, or cancel; order status; expected delivery dates; communications about your order; and referral source (including the partner clinic you selected).
- **Payment information** — card or other payment details, billing address, and transaction confirmations. Payments are processed by Shopify Payments; we do not store full card numbers on our own systems.
- **Ultrasound scan files and 3D model files** — when you or your selected clinic uploads them to fulfill your order, we receive and store ultrasound volume files (e.g., `.vol`) and 3D model files (e.g., `.stl`, `.obj`) associated with your order. These files typically depict a fetus and are linked to your order, but do not contain a medical diagnosis, medical record number, or other clinical chart data unless a clinic chooses to include it.
- **Communications with us** — information you provide when you contact customer support, respond to an email, submit the contact form, or reply to transactional messages.
- **Provider application and directory information** (providers only) — clinic name, public contact information, website, Google Business listing identifier (if linked for verification), and location, which appear on our public provider directory and map.
- **Device and usage information** — IP address, browser type, device type, referring/exit pages, pages viewed, and interactions with the Services. Shopify collects this on our behalf as part of hosting the storefront.
- **Cookies and similar technologies** — see Section 8.

Sensitive categories and children

- **Ultrasound scans.** Scans uploaded through the Services depict an unborn child and may be considered sensitive or health-adjacent under some laws. EverLittle is **not** a healthcare provider or a HIPAA-covered entity, and the Services are not designed to hold medical records. Customers should not upload clinical notes, diagnostic reports, or other protected health information; if you do, we will treat it as "personal information" under this Policy and delete it on request.
- **Children's data.** The subject depicted in a scan may be an unborn or newborn child, but the Services are contracted for, and accounts are held by, an adult parent or guardian (18+). The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16 for their own use. By placing an order, the adult account holder confirms they have the right to upload any scan or image they submit and to place the order on behalf of their household.

3. How We Collect Personal Information

We collect personal information from the following sources:

- **Directly from you** — when you create an account, place or modify an order, upload a scan or model file, apply to become a partner provider, contact us, or submit a referral.
- **From partner clinics** — when a partner clinic uploads scan or 3D model files to fulfill an order you placed, the clinic also transmits the file and any customer details (such as your name and contact details) needed to associate the file with your order.
- **Automatically from your device** — through cookies and similar technologies, and through Shopify's hosting infrastructure, when you visit or interact with the Services.
- **From service providers** — such as Shopify, our email delivery provider, our file-storage provider, and our 3D-model processing providers, when they act on our behalf (see Section 5).
- **From public sources** — for the provider directory, we may supplement a clinic's profile with publicly available information (for example, from the clinic's Google Business listing) when the clinic has requested or consented to appear in our directory.

4. How We Use Personal Information

We use personal information for the following purposes:

- **To provide the Services.** To create and maintain your account; accept and process orders; route orders to the correct partner clinic; receive, store, process, and print from your ultrasound and 3D model files; fulfill, ship, and deliver your order; handle returns, exchanges, and reprints; and provide customer support.
- **To process and prepare 3D models.** To convert or repair uploaded files so they can be manufactured (for example, fixing non-manifold geometry) and to obtain manufacturing quotes from our production partners. This may involve sharing the 3D model file — but not your identifying contact information — with the processors listed in Section 5.
- **To communicate with you.** To send transactional messages about your account and orders (order confirmations, upload confirmations, shipping updates, file-deletion notices, support replies) using our email provider.
- **For marketing, with your consent where required.** To send promotional emails about new products, seasonal offers, or clinic partnerships. You can unsubscribe at any time using the link in any marketing email. Transactional messages are not promotional and will continue even if you unsubscribe from marketing.
- **To operate the provider network.** To list partner clinics in our directory, enable clinic users to access the provider portal, match incoming referrals to clinics, and provide clinics with order information needed to fulfill their customers' orders.
- **To improve the Services.** To understand how visitors use the Services, diagnose errors, and improve the storefront, provider portal, and checkout experience.
- **For security and fraud prevention.** To authenticate accounts, detect and prevent fraudulent orders or account takeover, protect the integrity of uploaded files, and keep the Services secure.
- **To comply with law.** To comply with applicable laws, respond to lawful requests from law enforcement or regulators, enforce our terms, and protect our rights, property, and users.

5. How We Disclose Personal Information

We share personal information with the following categories of recipients, each of whom is authorized to use it only for the purposes described:

- **Shopify** hosts our storefront, manages accounts, processes payments, and provides core commerce infrastructure. Your interactions with the storefront are transmitted to Shopify. Shopify's processing of your information is also governed by Shopify's Consumer Privacy Policy at privacy.shopify.com.
- **Cloudflare (R2)** stores ultrasound scan files and 3D model files uploaded to your order. Files are transmitted over encrypted connections and are accessible only to EverLittle and authorized processors for the purpose of fulfilling your order.
- **Formware** receives 3D model files (not your contact details) to perform automated mesh repair so the model can be printed reliably.
- **Craftcloud 3D** (and other 3D-print production partners we may use) receives the processed, print-ready 3D model file and the fulfillment address required to produce and ship your keepsake. We do not share your ultrasound volume files with production partners.
- **Resend** delivers our transactional and marketing emails and receives the recipient email address and message contents for that purpose.
- **Google Maps Platform** powers address autocomplete and our provider map; addresses you type into our forms and provider directory searches may be sent to Google to return suggestions.
- **Partner clinics** that you select in connection with an order receive the information they need to upload your scan file and fulfill the order (typically your name, order number, and contact details). Clinics handle that information under their own privacy practices.
- **Shipping carriers** (e.g., USPS, UPS, FedEx) receive the name and delivery address needed to deliver your order.
- **Professional advisors and authorities** — including our lawyers, accountants, and auditors, and government authorities — where necessary to comply with law, enforce our terms, or protect our rights and the rights and safety of others.
- **Successors in a corporate transaction** — if EverLittle or its parent is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to the terms of this Policy.

We do **not** sell your personal information for money. We do not currently use cross-context behavioral advertising, third-party advertising pixels, or audience-matching services on the Services. If that ever changes, we will update this Policy, provide any legally required notice, and offer the opt-out rights described in Section 9.

6. Ultrasound and Model File Retention

Ultrasound scan files and 3D model files tied to an order are retained only as long as needed to fulfill your order and to handle reprints, returns, or support requests.

- **Default retention:** scan and model files are automatically deleted approximately **30 days** after your order is marked completed.
- **Notification:** after deletion, the order record is flagged as "files auto-deleted," and we will let you know in your order portal that the files have been removed.
- **Earlier deletion on request:** you can ask us to delete your uploaded files sooner by emailing us using the contact details in Section 12. If your order has not yet been produced, deletion may cancel production.
- **Other records:** we retain order records, invoices, tax records, and account information for as long as needed to operate the business and to comply with legal, tax, and accounting obligations.

7. Security

We use reasonable technical and organizational measures to protect personal information, including encrypted transport for file uploads, access controls for staff and provider accounts, and separation of payment data from our systems via Shopify Payments. No system is perfectly secure, and we cannot guarantee that unauthorized access will never occur. If we learn of a security incident that affects your personal information, we will notify you as required by law.

8. Cookies and Similar Technologies

The Services use cookies and similar technologies, set by Shopify and by us, to keep you signed in, remember your cart, secure the checkout, and measure basic site performance. You can control cookies through your browser settings; blocking cookies may affect your ability to use parts of the Services (including checkout).

9. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights with respect to your personal information. These rights are not absolute, and we may decline a request where permitted by law.

- **Access / Know** — request a copy of the personal information we hold about you, or a summary of how we process it.
- **Correct** — ask us to correct inaccurate personal information.
- **Delete** — ask us to delete personal information we hold about you, including uploaded scan and model files.
- **Portability** — receive a copy of certain personal information in a portable format.
- **Opt out of marketing** — unsubscribe from marketing emails using the link in any marketing message.
- **Opt out of "sale" or "sharing" for targeted advertising** — as noted in Section 5, we do not currently sell or share personal information for cross-context behavioral advertising. If that changes, you will have the right to opt out. We honor Global Privacy Control ("GPC") signals as an opt-out for the browser and device sending the signal.
- **Withdraw consent** — where we rely on your consent, you can withdraw it at any time; this does not affect the lawfulness of processing carried out before withdrawal.
- **Appeal / complain** — if we deny your request, you may appeal by contacting us at the address in Section 12. You may also lodge a complaint with your local data protection authority.

To exercise any right, contact us using the details in Section 12. We may need to verify your identity before responding, and we may need additional information to locate your records. You may use an authorized agent; we may ask the agent to show proof of authorization and may contact you to confirm. We will not discriminate against you for exercising your rights.

10. International Transfers

We are based in the United States and process personal information in the United States. If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate. For transfers from the European Economic Area, the United Kingdom, or Switzerland, we rely on recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses, or transfers to countries that have been recognized as providing an adequate level of protection.

11. Third-Party Websites and Links

The Services may link to websites operated by third parties, including partner clinics, shipping carriers, and social media platforms. Those websites have their own privacy practices, and we are not responsible for them. Please review the privacy policy of any third-party site before providing information there.

12. Contact Us

If you have questions about this Privacy Policy, want to exercise any of the rights described in Section 9, or would like to request earlier deletion of uploaded scan or model files, you can reach us at:

- **Email:** privacy@everlittle3d.com
- **Mail:** EverLittle 3D, a DBA of JDG Manufacturing LLC, 7572 Silverado Ln, La Palma, CA 90623, USA

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, the Services, or applicable law. When we do, we will post the updated Policy on this page and revise the "Last updated" date above. If the changes are material, we will provide additional notice (for example, by email or a prominent notice on the storefront) as required by law.