Privacy Policy

Last Updated: November 30, 2025

1. Introduction

J. Perkins (Distribution) Limited trading as 4D ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website model.shop (the "Site") and tell you about your privacy rights and how the law protects you.

This privacy policy aims to give you information on how we collect and process your personal data through your use of this website, including any data you may provide when you register for an account, sign up for our newsletter, or purchase a premium listing.

2. Important Information and Who We Are

Controller

J. Perkins (Distribution) Limited is the controller and responsible for your personal data.

Company Details:

  • Trading Name: 4D / model.shop
  • Registered in England No: 01707302
  • VAT Number: GB206686160
  • Registered Office: Northdown Business Park, Ashford Road, Lenham, Kent, ME17 2DL

Contact Details:

If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us:

3. The Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

  • Identity Data: Includes first name, last name, username or similar identifier. If you use a social login (e.g., Google or LinkedIn), we receive your name and ID from that provider.
  • Contact Data: Includes billing address, delivery address, email address and telephone numbers.
  • Profile Data (Public): This is information you voluntarily submit for publication in our directory. This includes your business name, biography, portfolio images, professional history, social media links, and business contact details.
  • Financial Data: We do not store full payment card details. We store only the reference to the transaction provided by our third-party payment processors (e.g., Stripe/PayPal).
  • Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Usage Data: Includes information about how you use our website, products, and services.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

A. To Perform the Contract (Directory Services)

When you register to list your company, freelance profile, course, or event, we process your data to create, manage, and publish your directory entry.

Important Note on Public Data: By the nature of our directory services, the Profile Data you enter into your public profile fields will be made available to the general public on the internet. Please do not enter home addresses or personal phone numbers in public fields unless you are comfortable with them being publicly visible.

B. Legitimate Interests

We process your Technical and Usage data to:

  • Administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data).
  • Use data analytics to improve our website, products/services, marketing, customer relationships, and experiences.
  • Prevent fraud and spam.

C. Legal Obligation

We may process your data to comply with a legal or regulatory obligation (e.g., retaining records of payments for tax purposes).

5. Disclosures of Your Personal Data

We may share your personal data with the parties set out below for the purposes set out in Section 4:

  • Public Visitors: Any data you place in your public listing is visible to any visitor to the Site.
  • Service Providers: Third parties who provide IT and system administration services (e.g., Google Cloud Platform, email delivery services).
  • Payment Processors: Secure third-party providers who handle payment transactions.
  • Group Companies: Other brands within the J. Perkins (Distribution) Limited group, acting as joint controllers or processors.
  • Professional Advisers: Lawyers, bankers, auditors, and insurers.
  • Regulatory Bodies: HM Revenue & Customs, regulators, and other authorities based in the UK who require reporting of processing activities in certain circumstances.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

6. International Transfers

We are based in the United Kingdom. Whenever we transfer your personal data out of the UK (for example, if our cloud servers are located in the EU or US), we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
  • Where we use certain service providers, we may use specific contracts approved for use in the UK (such as the IDTA) which give personal data the same protection it has in the UK.

7. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

8. Data Retention

How long will you use my personal data for? We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Active Accounts: We retain your profile data for as long as your account is active.
  • Inactive Accounts: We reserve the right to archive or delete accounts that have been inactive for a prolonged period (e.g., 24 months) to ensure the accuracy of our directory.
  • Transaction Data: By law, we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.

9. Your Legal Rights

Under certain circumstances, you have rights under UK data protection laws (UK GDPR) in relation to your personal data. You have the right to:

  • Request access to your personal data (commonly known as a "data subject access request").
  • Request correction of the personal data that we hold about you.
  • Request erasure of your personal data.
  • Object to processing of your personal data where we are relying on a legitimate interest.
  • Request restriction of processing of your personal data.
  • Request the transfer of your personal data to you or to a third party.
  • Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us via our Contact Form. We may need to request specific information from you to help us confirm your identity.

10. Third-Party Links

This website includes links to third-party websites, plug-ins, and applications (e.g., links to a Freelancer's personal portfolio or social media). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

11. Analytics

We use Plausible Analytics to collect anonymous usage data about how visitors use our website. Plausible is a privacy-focused analytics service that:

  • Does not use cookies
  • Does not collect personal data
  • Does not track users across websites
  • Is fully compliant with GDPR, PECR, and other privacy regulations

The data collected includes: page views, referral sources, browser type, operating system, device type, and country (derived from anonymised IP addresses). This data cannot be used to identify individual users.

Because Plausible does not use cookies or collect personal data, no cookie consent is required for this analytics service.

12. Cookies

We use only strictly necessary cookies that are required for the operation of our website. These include:

  • Session Cookies: Required to keep you logged into your account.
  • Security Cookies: Used to prevent cross-site request forgery (CSRF) attacks.

These cookies are essential for the website to function and cannot be switched off. They do not store any personally identifiable information and expire when you close your browser or after a short period.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website (such as logging in) may become inaccessible or not function properly.

13. Changes to This Privacy Policy

We keep our privacy policy under regular review. This version was last updated on November 30, 2025. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.