Privacy Policy

What we collect

We collect the information needed to fulfil your order: your name, email address, shipping address, order contents, and the reference photographs you upload. Payment is handled by PayPal, so we receive a transaction reference and a confirmation of payment, never your card number.

Your photographs

Uploaded photos are used solely to produce your figurine. They are stored on encrypted storage, accessible only to the sculptor assigned to your order and to production supervisors, and deleted 180 days after delivery unless you ask us to keep them for a reorder.

We never publish, sell or share your photos. We will not use them in marketing without asking you first and getting an explicit yes — a purchase is not consent.

Cookies

We use strictly necessary cookies to keep your cart and session working. Analytics cookies, where enabled, are anonymised and can be declined without affecting your ability to order.

Your rights

You can request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it, by emailing support@custom-figure.com. We respond within 30 days. If you are in the EU or UK, GDPR rights apply in full; if you are in California, CCPA rights apply in full.

Where your data is processed

CustomFigure operates from Shenzhen, China. Your order details and the photographs you upload are processed and stored on servers in China by the team that makes your figurine.

If you are in the EU, the UK or another region with data transfer rules, this means your data leaves that region. By uploading photos and placing an order you consent to that transfer. We apply the same protections described in this policy wherever your data sits, and we will delete it on request.

Data sharing

We share the minimum necessary data with our shipping carriers (name and delivery address) and with PayPal (order total and reference). We do not sell personal information to anyone, for any purpose.