BrickArt NZ The things you love, rebuilt in brick.

Privacy policy

What this site collects when you browse, design a mosaic or ask about a commission, and what happens to it.

What we collect

Browsing this site asks you for nothing, and there is no account to make. Nothing you type is sent to us, with four exceptions: the signup box, the questions box and a design you send us for a quote, each described below, and a search that finds nothing. Searching runs entirely in your own browser against a file it has already downloaded, so what you search for stays on your device whenever we have something matching it. When a search finds nothing, we keep the words you typed. That is described under visitor measurement.

The mosaic designer works on a photo inside your own browser. The photo stays on your device, and is gone when you close the page, unless you choose to send your design to us for a quote. What sending involves is described below.

You can also ask about a commission by email. From then on we hold your email address, your name if you give it, what you write and any photos you attach.

When you order, we collect the name, delivery address and email address needed to build and send your piece, and nothing beyond them. Your card details go straight to the payment processor and never reach us.

What your browser stores

Three things, all kept on your own device, none a cookie, and none readable by us:

Visitor measurement

No outside company measures this site. There is no Google Analytics and no advertising pixel.

We count page views with Umami, which runs on a server we rent and manage ourselves rather than on an analytics company's. It records the page you opened, the site that sent you here, your browser, device and screen size, your language, and roughly where you are, down to the city. It sets no cookie and stores nothing in your browser. Your IP address is used to work out that location and to tell one visit from another, and it is not saved. Page addresses are recorded without anything after a question mark, so the words in a search are not kept this way.

We keep our own count of what goes into baskets, on our own server rather than anyone else's: which piece, which size and colour, what it costs and how many. It sets no cookie and carries nothing that says who you are. We keep it for three months and then it is gone.

When a search finds nothing, we keep the words you typed, on our own server, so we can see what people come looking for and we do not make. Searches that do find something are not kept this way. It is the words on their own, with nothing attached that says who typed them, and it is gone after three months.

Advertising and social tracking

There is none. No Meta pixel, no advertising cookie and no script from a social network, so nothing here can follow you to another site.

The email list

There is a signup box at the bottom of every page. It is the only way onto our list: giving us an address at checkout does not put you on it, and neither does buying something or writing to us about a commission.

Signing up does not subscribe you either. It records your address as waiting and sends you one email with a link in it. You are on the list only once you click that link, and if you never do, nothing further is ever sent.

We keep the date you confirmed, because that record is what proves you asked. Every email carries a one-click unsubscribe, and unsubscribing keeps the row rather than deleting it, so we have a record that you asked to stop. Ask us and we will erase that too.

The signup box runs a check that you are not a machine, handled by Cloudflare, who host this site. Almost every time it decides on its own and you see nothing at all. When it cannot tell, it shows you one box to tick. It sets no cookie, it does not follow you anywhere else, and nothing it collects goes to an advertiser. It is there because typing an address into that box makes us send an email, and without it somebody could point that at a stranger.

If you leave without paying

If you start checkout, give an email address on the payment page and then close the tab, the payment processor tells us the attempt expired. We record that, with the address and what was in the basket, so we can ask whether something went wrong. That address is used to reach you about that order and nothing else, and it is never added to a mailing list. If you never type an address, there is nothing to record.

If you sent us a design or began a commission by email and change your mind, tell us and we will delete it.

Who else handles your order

Every piece is designed and built by us in New Zealand, so no workshop elsewhere sees your photo or your details. Five other companies play a part, listed here alphabetically:

That means your details can leave New Zealand. Cloudflare, the payment processor and both email companies operate in several countries, and a piece sent overseas travels through the courier's network there.

Asking a question

The round button in the bottom corner of every page opens a box for questions about this shop. What you type there, and the earlier questions and answers in that same conversation, go to our server and to an AI model run by Cloudflare, who host this site, so it can write an answer from this shop's own pages. The answer comes from that model rather than a person, and it can be wrong.

We keep no copy of the conversation, and nothing about it is saved in your browser: it is gone when you leave the page. What we keep is a count of questions asked and of the ones it could not answer, with nothing attached that says who asked, for three months.

When it cannot answer, you can leave your question with your email address so a person can reply. We keep that question and address for 90 days and then delete them. The address is used to answer you and nothing else: it is not the email list and it is never added to it. The box runs the same check that you are not a machine as the signup box, handled by Cloudflare.

Sending a design for a quote

When your design looks right, the designer can send it to us. Pressing send uploads your photo, the mosaic preview, its size, colours and estimate, your email address, your name if you give it and anything you write. They are stored in private storage at Cloudflare, who host this site, where only we can open them. Nothing is sent until you press the button.

We use them to quote and build your mosaic, and the email address to reply to you. It is not the email list and it is never added to it. We keep all of it for 180 days and then delete it, sooner if you ask. If you go ahead with an order, the order record is kept as described below. Sending runs the same check that you are not a machine as the signup box, handled by Cloudflare.

What we do not do

We do not sell or rent anyone's details, and writing to us does not put you on the email list. A photo you send is used to quote and build your piece. We do not publish it, or a photo of the finished piece, without asking you first.

How long we keep it

Order records are kept for seven years, which is what New Zealand tax law requires, and then deleted.

Emails, and the photos attached to them, are kept while a commission is being discussed or built, and afterwards for as long as we might need to answer a question about it. Ask and we will delete them sooner, unless the email is the record of a sale, which New Zealand tax law has us keep for seven years.

Your rights

The Privacy Act 2020 lets you ask what we hold about you and have anything wrong corrected, and we will delete it on request too. Write to us and we will answer within 20 working days, which is the limit the Act sets. If you have only browsed, nothing we hold can be tied to you.

Contact

Email hello@brickart.nz about anything on this page.