Privacy Policy

Last updated: November 25, 2025

1. Who Are We?

This privacy policy applies to the services of:

ComeFigure is responsible for the processing of personal data as described in this privacy policy. We specialize in developing interactive 3D product configurators for e-commerce, training & education, and sales tools.

2. What Personal Data Do We Collect?

We process personal data because you use our services and/or because you provide this data to us directly. Below is an overview of the personal data we process:

2.1 Data You Actively Provide

Through our contact form and direct communication:

• Name, to address you personally
• Email address, for correspondence and sending quotes
• Phone number (optional), for phone contact if desired
• Company name (optional), to understand your business context
• Area of interest, which service you are interested in
• Your message/question, the content of your inquiry

2.2 Data Collected Automatically

When visiting our website, we collect the following via Google Analytics 4:

• IP address (anonymized)
• Browser type and version
• Device type (desktop, tablet, mobile)
• Pages visited and click behavior
• Time spent on the website
• Referring website (how you found us)
• Interactions with demos and forms

2.3 Business Client Data

When entering into a business agreement, we additionally process:

• Company details (name, address, registration number, tax ID)
• Contact details of key contacts
• Invoice details and payment history
• Project-related communication and files

3. Why Do We Collect This Data?

We process your personal data for the following purposes:

4. How Long Do We Retain Your Data?

We do not retain your personal data longer than strictly necessary:

• Contact form inquiries: 2 years after last contact, unless a business relationship is established
• Client data: 7 years after termination of agreement (legal retention requirement)
• Invoices and financial data: 7 years (legal retention requirement)
• Website analytics: 26 months (standard Google Analytics retention)
• Project files: 5 years after project delivery

5. Do We Share Your Data with Third Parties?

We never sell your data to third parties. We only share your personal data with third parties when necessary for the execution of our services or to comply with legal obligations:

5.1 Processors

• Google Analytics (Google LLC), website analytics (US, EU-US Data Privacy Framework)
• Hosting provider, for hosting our website and configurators
• Email service provider, for sending emails
• Accounting software, for financial administration

We have data processing agreements in place with all processors to ensure the security and confidentiality of your data.

5.2 Other Third Parties

In certain cases, we may share data with:

• Government authorities, if legally required
• Legal advisors, in the event of disputes
• Successor parties, in the event of a business acquisition (with prior notice)

6. Cookies

Our website uses cookies to improve the user experience and analyze website traffic.

6.1 Functional Cookies

These cookies are necessary for the website to function and cannot be disabled:

• Session cookies for form processing
• Preference settings (e.g., selected package)

6.2 Analytical Cookies

With your consent, we use Google Analytics to understand how visitors use our website:

• Which pages are visited
• How long visitors stay on the site
• Which demos are viewed
• Conversion tracking (form submissions)

IP addresses are anonymized, and we have a data processing agreement in place with Google.

6.3 Cookie Settings

You can adjust your cookie preferences at any time through your browser settings. Please note: disabling cookies may affect website functionality.

7. Security

We take the protection of your data seriously and have implemented appropriate technical and organizational measures:

• SSL/TLS encryption for all data traffic
• Secured servers with regular updates
• Restricted access to personal data (need-to-know basis)
• Regular backups
• Strong password policies

8. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: You can request to see what personal data we process about you
• Right to rectification: You can have incorrect data corrected
• Right to erasure: You can request the deletion of your data
• Right to restriction: You can restrict the processing of your data
• Right to data portability: You can receive your data in a standard format
• Right to object: You can object to processing based on legitimate interest
• Right to withdraw consent: You can withdraw previously given consent at any time

To exercise your rights, please contact us at hey@comefigure.com. We will respond to your request within 30 days. We may ask you for identification to process your request.

9. Complaints

Do you have a complaint about the processing of your personal data? Please contact us first so we can work together toward a solution.

If we cannot resolve it together, you have the right to file a complaint with the Dutch Data Protection Authority:

10. Changes

We may update this privacy policy from time to time. In the event of significant changes, we will inform you through our website. We recommend reviewing this privacy policy regularly.

11. Contact

Do you have questions about this privacy policy or about the processing of your personal data? Please contact us: