Privacy Policy

What we collect

• Order details: name, shipping address, email, phone, and the photo you upload for production.
• Account data: email, hashed password (or Google sign-in identifier), display name, optional birthday and preferences.
• Payment data: handled by iyzipay; we never see your card number. We retain only the transaction reference and amount.
• Analytics: anonymized page-view data via Google Analytics 4 and Tag Manager.
• Marketing cookies: Meta Pixel and Pinterest Tag for ad measurement (only with your consent).
• Email marketing: Klaviyo, only if you opt in via the popup or account preferences.

How we use it

• Produce and ship your figurine, including sending order updates.
• Provide customer support over email and WhatsApp.
• Improve the site through aggregated analytics.
• Send marketing emails — only if you opted in. You can unsubscribe at any time via the footer link or in your account preferences.

Photo handling

Reference photos uploaded with an order are stored in Firebase Storage (US-Central) and used only for production. They are deleted within 90 days of order completion or earlier on request.

Your rights

You can request access to, correction of, or deletion of your personal data at any time by emailing hi@figuristart.com. For EU/UK/CA residents, GDPR/PIPEDA rights including data portability and objection apply.

Cookies

Strictly necessary cookies (cart state, login session) are always set. Analytics and marketing cookies are loaded only after you click "Accept" on the cookie banner. You can change your choice anytime by clearing the grafizm_cookie_consent entry in your browser's local storage and reloading.

Third-party services

We rely on Firebase (Google), iyzipay (payments), Klaviyo (email), Shipentegra (fulfillment), Meta and Pinterest (ad tracking, with consent), and Google Analytics (with consent). Each runs under its own privacy policy.

Contact

Questions about this policy or your data: hi@figuristart.com.