Privacy policy

What this site collects when you browse, design a mosaic or ask about a commission, and what happens to it.

What we collect

Browsing this site asks you for nothing, and there is no account to make. Nothing you type is sent to us, with one exception. Searching runs entirely in your own browser against a file it has already downloaded, so what you search for stays on your device whenever we have something matching it. When a search finds nothing, we keep the words you typed. That is described under visitor measurement.

The mosaic designer works on a photo inside your own browser. The photo is never uploaded to us or to anyone else, and it is gone when you close the page.

You ask about a commission by email. The designer can open a message for you that already lists the size, colours and estimate of your design, and nothing leaves your device until you press send in your own email program. From then on we hold your email address, your name if you give it, what you write and any photos you attach.

When you order, we collect the name, delivery address and email address needed to build and send your piece, and nothing beyond them. Your card details go straight to the payment processor and never reach us.

What your browser stores

Three things, all kept on your own device, none a cookie, and none readable by us:

• Your basket. Which pieces, sizes and colours you have added, so the basket survives a page reload. The basket itself never leaves your browser. What does leave is the count described under visitor measurement, which is the piece and never the person.
• Your light or dark preference, so the site opens the way you left it.
• The last thing you searched for, only until you close the tab, so the same search is not counted twice.

Visitor measurement

No outside company measures this site. There is no Google Analytics and no advertising pixel.

We count page views with Umami, which runs on a server we rent and manage ourselves rather than on an analytics company's. It records the page you opened, the site that sent you here, your browser, device and screen size, your language, and roughly where you are, down to the city. It sets no cookie and stores nothing in your browser. Your IP address is used to work out that location and to tell one visit from another, and it is not saved. Page addresses are recorded without anything after a question mark, so the words in a search are not kept this way.

We keep our own count of what goes into baskets, on our own server rather than anyone else's: which piece, which size and colour, what it costs and how many. It sets no cookie and carries nothing that says who you are. We keep it for three months and then it is gone.

When a search finds nothing, we keep the words you typed, on our own server, so we can see what people come looking for and we do not make. Searches that do find something are not kept this way. It is the words on their own, with nothing attached that says who typed them, and it is gone after three months.

Advertising and social tracking

There is none. No Meta pixel, no advertising cookie and no script from a social network, so nothing here can follow you to another site.

If you leave without paying

If you start checkout, give an email address on the payment page and then close the tab, the payment processor tells us the attempt expired. We record that, with the address and what was in the basket, so we can ask whether something went wrong. That address is used to reach you about that order and nothing else, and it is never added to a mailing list. If you never type an address, there is nothing to record.

If you began a commission by email and change your mind, tell us and we will delete the thread.

Who else handles your order

Every piece is designed and built by us in New Zealand, so no workshop elsewhere sees your photo or your details. Four other companies play a part, listed here alphabetically:

• A courier delivers the finished piece, and receives the name and delivery address needed to do it.
• A payment processor takes the payment and handles the card details, which never reach us.
• Cloudflare host this website and the server that keeps our order records.
• The company that hosts our email holds the messages you send us.

That means your details can leave New Zealand. Cloudflare, the payment processor and our email host operate in several countries, and a piece sent overseas travels through the courier's network there.

What we do not do

We do not sell or rent anyone's details, and writing to us does not put you on a mailing list. A photo you send is used to quote and build your piece. We do not publish it, or a photo of the finished piece, without asking you first.

How long we keep it

Order records are kept for seven years, which is what New Zealand tax law requires, and then deleted.

Emails, and the photos attached to them, are kept while a commission is being discussed or built, and afterwards for as long as we might need to answer a question about it. Ask and we will delete them sooner, unless the email is the record of a sale, which New Zealand tax law has us keep for seven years.

Your rights

The Privacy Act 2020 lets you ask what we hold about you and have anything wrong corrected, and we will delete it on request too. Write to us and we will answer within 20 working days, which is the limit the Act sets. If you have only browsed, nothing we hold can be tied to you.

Contact

Email hello@brickart.nz about anything on this page.