We ask you to send us photographs of people, children, pets and, sometimes, pets that have died. That is more sensitive than most online shopping, so this policy is more specific than most.
This document describes what our system actually does. It has not yet been reviewed by counsel in every country we ship to; if you are reading this before launch, that review is a prerequisite.
What we collect
We collect only what an order needs. There is no account, no password, and no profile.
- The photographs you upload.
- Your email address, so we can send your preview and your order updates.
- Your shipping address, once you pay.
- The configuration of your order — product, size, style, options, and anything you type into the notes.
- Which page you arrived from, in a form that does not identify you.
What we do not collect
We do not collect payment card details. Payment is handled entirely by Stripe and card numbers never reach our systems.
We do not send your email address, your photographs, or anything else that identifies you to our analytics tools.
We do not store your IP address in readable form. Where we need it for abuse prevention, we store a one-way hash.
Who sees your photographs
The people sculpting and making your piece, and no one else. Where a studio partner does the physical production, they receive what they need to make your piece and nothing more.
Photographs are held in private storage that is not reachable from the public internet. Access is granted through links that expire within minutes and are issued only to your own order portal and to our production staff.
Consent is separate for each purpose
We never bundle permissions together. Making your order requires two permissions. Everything else is optional, defaults to off, and declining it changes nothing about your order or your price.
- Processing your photos to make your figurine — required.
- Sharing them with the studio partners who make it — required.
- Showing your finished piece in our gallery — optional, off by default.
- Marketing email — optional, off by default.
- Using your photos to improve our modelling tools — optional, off by default.
How long we keep things
Deletion is automatic and runs on a schedule, not on request only.
- Photos on an order you never paid for: deleted after seven days.
- Photos sent for a free photo check: deleted after thirty days.
- Photos on a completed order: deleted ninety days after delivery, unless you ask us to keep them for a future order.
- Your order record itself, minus the photos, is kept for as long as tax and accounting law requires.
- If you withdraw gallery consent, the public images come down immediately.
Your rights
You can ask us for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Reply to any email we have sent you and it reaches a person.
Deleting an in-progress order means we cannot finish it, so we will confirm that with you before acting.
Where your data is
Our servers and storage run on Cloudflare's network. Email is sent through Resend. Payment is processed by Stripe. Each of these processes data on our behalf under contract.