Privacy policy
Version of 8 October 2026
1. Controller
Orange Frog Studio, 's-Gravelandseweg 397, 3125 BJ Schiedam, the Netherlands · Chamber of Commerce (KvK) 64597237 · hello@orangefrogstudio.nl
2. What data, why and for how long
| When | What data | Purpose and legal basis (GDPR) | How long |
|---|---|---|---|
| You upload a model in the configurator | 3D file, technical session ID | price calculation and preview — steps prior to entering into a contract (Art. 6(1)(b)) | 30 days if the model does not end up in a paid order |
| You place an order | name, email, phone (optional), company, Chamber of Commerce and VAT number (optional), delivery address (when shipping), notes, order contents including files, language, payment status and method | performance of the contract (b); tax record-keeping obligation (c) | unpaid: 30 days; paid: 7 years (tax obligation), after which personal data is anonymised; model files: 12 months after the order is completed |
| You send the contact form | topic and answers from the form, name, email, company and phone (optional), message, language | replying and preparing a quote (b), correspondence (f) | 24 months |
| You use the website | IP address and browser type in session data; IP address in a technical log if the form is rejected as spam | operation of the website and protection against abuse (f) | session data — until the session expires; technical log — 14 days |
We send emails about your order and your enquiry (confirmations, status updates, tracking link). We do not send newsletters or advertising.
3. Cookies
We only use cookies that are necessary for the website to work:
- orange-frog-studio-session — session (cart, order); expires after 2 hours of inactivity,
- XSRF-TOKEN — form security.
We do not use analytics or marketing cookies and no trackers from other companies. Fonts and scripts are served from our own server. That is why we do not ask for cookie consent.
4. Who we share data with
- Mollie B.V. (payments) — we pass on the amount and order number; you enter your payment details directly with Mollie, which processes them under its own privacy policy.
- PostNL / DHL (only when shipping) — name and delivery address, as far as needed for delivery.
The website, email and data run on our own servers in the Netherlands. We do not transfer data outside the European Economic Area, do not sell it and do not share it for marketing.
5. Security
The connection to the website is encrypted (HTTPS). Uploaded 3D files are not public — only the session that uploaded them can see them and, after an order, our admin panel, which only authorised studio staff can access.
6. Automated decisions
The price of a print is calculated automatically from the model and options — this is a calculation, not a decision about you. We do not profile users.
7. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. We cannot delete data of paid orders before the statutory retention period ends. Email hello@orangefrogstudio.nl — we will reply within one month. You can also lodge a complaint with the Dutch Data Protection Authority, Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
8. Changes
We announce significant changes on this page. The version with the date at the top applies.