Privacy Policy

SketchToToy turns a child’s drawing into a personalised decorative figurine and keepsake. For the personal data described in this policy, the data controller is:

• Trade name: SketchToToy
• Legal name: — to be added —
• Chamber of Commerce (KVK): — to be added —
• VAT number: — to be added —
• Address: — to be added —
• Country: Netherlands
• Contact for privacy questions: hello@sketchtotoy.com

This is a personalised decorative figurine and keepsake. It is not designed, tested or certified as a children’s toy and is not intended for play by young children. This is a personalised decorative figurine and keepsake. It is not designed, tested or certified as a children's toy and is not intended for play by young children. Keep small or fragile items away from children under 3.

Our service must be ordered by a parent, guardian or other authorised adult. Please help us keep data to a minimum:

• The child’s name is optional. You never have to provide it.
• Please do not upload home addresses, school names, faces, birth dates or any other personal information that is not needed to make a figurine from a drawing.
• Upload a photo of the drawing only. A clear picture of a single character is all we need.

Below is every category of personal data we process, the purpose, and the legal basis under the GDPR (Article 6).

We do not sell your personal data. We share it only with the service providers needed to deliver your figurine, each acting under a data processing agreement:

• Cloud and file storage (Railway) — hosts the application, database and your uploaded files.
• AI / 3D generation provider (fal.ai) — your drawing is sent to this provider as image data so it can generate the digital preview and 3D model. This is a necessary part of the service.
• Professional designers — the assigned designer accesses your drawing and model to prepare a print-ready version.
• Print / production — the model is used to 3D print and quality-check your figurine.
• Email provider (Resend) — sends account and order emails.
• Payment (Stripe) — processes your payment securely.
• Delivery carrier (PostNL) — receives the delivery details needed to ship your parcel.

File access within our own systems is limited to you (the account owner), the designer assigned to your project and our administrators. In addition, as described above, the drawing is sent to the AI / 3D generation provider to create the model. Both facts are true at the same time, and we want you to be aware of both.

We do not use uploaded drawings or generated models to train AI systems unless the parent gives separate, explicit consent. Generating your preview is an automated step performed by our provider, but your files are not used to train models by default.

Showing a figurine in our public gallery also requires separate, optional consent. It is never bundled into our Terms, and you can withdraw it at any time by contacting us, after which we remove the item from the gallery.

Creating your preview and model involves automated image and 3D generation. This is a creative, technical step only. It is not a decision that produces legal effects for you or similarly significantly affects you, and there is no automated profiling of you. A person (our designer, and you) always reviews the result before an order proceeds.

Where a processor stores or handles personal data outside the European Economic Area (EEA), we rely on appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses (SCCs), together with additional technical and organisational measures where needed. You can ask us which providers this applies to and request more information about the safeguards in place by emailing hello@sketchtotoy.com.

• Account data — kept until you delete your account or ask us to delete it.
• Uploaded drawings and generated models — kept to deliver and support your order, and deletable on request; you can also delete projects and files yourself from your account.
• Order and invoice records — retained for the statutory tax-administration period (approximately 7 years under Dutch law), even after account deletion, because we are legally required to keep them.
• Technical and security logs — kept only for a short period needed for security and troubleshooting.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected (rectification);
• have your data erased (right to be forgotten);
• restrict processing in certain circumstances;
• object to processing based on our legitimate interests;
• data portability — receive your data in a structured, common format;
• withdraw any consent you gave (such as the optional child name, gallery publication or AI-training consent) at any time, without affecting processing done before you withdrew.

You can delete projects and files directly from your account, or contact us at hello@sketchtotoy.com to exercise any of these rights. We respond within the time limits set by the GDPR.

If you have a concern about how we handle your personal data, please contact us first at hello@sketchtotoy.com so we can try to resolve it. You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

We use appropriate technical and organisational measures to protect your data, including access controls that limit file access to the account owner, the assigned designer and administrators, hashed passwords, encrypted connections and containment checks on stored files. No system is perfectly secure, but if a personal data breach occurs that is likely to pose a risk to your rights, we will notify the Autoriteit Persoonsgegevens within 72 hours where required, and inform affected users without undue delay when the law requires it.

Today we use essential cookies only, for signing in and keeping the service secure. We do not use third-party tracking or advertising cookies. For details, see our Cookie Statement.

We may update this policy as our service evolves. The version and date are shown at the top of this page. Material changes will be communicated through the service.