Privacy Policy

What we collect

When you buy something: your name, email address, delivery address, and what you ordered. That is what a parcel and a receipt need.

We never see your card details. Payment happens on Stripe's own checkout page. Your card number goes to Stripe and not to us, and we could not retrieve it if we wanted to. What comes back to us is a confirmation that you paid, the last four digits, and the card brand.

When you email us: your email address and whatever you write.

Visitor measurement

We use Google Analytics to count visits and see which pages people actually read. It sets a cookie and tells us roughly which country you arrived from and which page you landed on. It runs on every page of this shop.

It also follows the shape of a sale: something added to a basket, a checkout started, an order finished. So it is told which work and which size went into the basket and what the order came to. What it is never given is anything that identifies you to us: not your name and not your address. We use it to answer "is anyone finding the shop, and do baskets turn into orders", not to follow a person.

When you use the search box, the words you type are sent to Google Analytics along with how many works matched them. We read that to find what people look for and cannot find, which is how the collection gets better. It is the search term on its own, with nothing attached that says who typed it.

If you are in the European Economic Area, it sets no cookie at all. We tell Google to treat you as not having consented, so you are counted without being stored, and there is no banner to dismiss because there is nothing to agree to.

If you would rather not be counted by Google, any browser setting or extension that blocks Google Analytics works here, and nothing on this site behaves differently when you do. Google's own opt-out is at tools.google.com/dlpage/gaoptout. Our own basket count, described below, is part of this site rather than someone else's code, so a blocker does not stop it. What it records is the product and never the person.

We keep our own count of what goes into baskets, on our own server rather than anyone else's: which print, which size and frame, what it costs and how many. It sets no cookie and carries nothing that says who you are. Not your name, not your address, not your email. It covers what is bought as well as what is added, so we can see how many baskets turn into orders. We keep it for three months and then it is gone. It tells us which paintings people actually want, which is a different question from which ones they looked at.

When a search finds nothing, we also keep the words you typed, on our own server, so we can see what people come looking for and we do not sell. Searches that DO find something are not kept this way. It is the words on their own, with nothing attached that says who typed them, and it is gone after three months.

We advertise on Facebook and Instagram, and to know whether that is worth paying for we run Meta's measurement code on this shop. It sets a cookie of its own, called _fbp, and it tells Meta when a page is opened, when a painting is looked at, when one is added to a basket and when a checkout is started. Once an order is paid for, our own server tells Meta what it came to and which country it is going to.

They do learn which paintings you look at and add to a basket, in the size and frame shown on the page, along with the price. That is what the measurement is for, and pretending otherwise would be the easy thing to write here. The message we send when an order is paid for carries only the total and the country, not a list of what was in it.

Your email address and the country are scrambled before they are sent, into a string that cannot be turned back into either. Meta are not told your name, your street address or your IP address, and they never see your card details, which do not reach us either.

This is the part of the site that can follow you elsewhere. Meta may recognise you on Facebook or Instagram and show you our advertising there. That is what it is for, and it is the one thing on this site that works that way.

If you are in the European Economic Area, none of it happens. The code is never loaded, so no Meta cookie is set and nothing about your visit is sent. If an order is going to an address in the EEA, nothing is sent when it is paid for either. Not a scrambled version, not a count, nothing. We have no way for you to agree to it and no banner to ask you with, so the honest answer is not to run it.

Anywhere else, any browser setting or extension that blocks Meta works here, and nothing on this site behaves differently when you use one. Your Facebook ad settings also control what Meta does with it.

The review invitation

On the page you land on after paying, we offer you the chance to be sent a review survey by Google. Taking it is entirely your choice and nothing happens unless you opt in on that page.

To make the offer at all, that page sends Google your email address, your order reference, the country it is shipping to and the date we expect it to arrive. Nothing else goes with it: not your name, not your street address, not the words on your card and not which painting you bought. If you opt in, Google emails you later and any rating you give is about us as a shop, not about a specific painting.

If you do not opt in, Google does not email you. The offer appears only on that one page, only once, and never on any other part of this site.

If you leave without paying

The basket has an optional email box. Filling it in saves you typing your address again on the payment page, because we pass it to Stripe to fill that field in for you. Leaving it blank is fine and changes nothing about your order.

If you start paying and then leave without finishing, we are told that a basket was left behind and what it was worth. If you gave us an email address we keep it with that record. If you did not, there is nothing on it that says who you are.

Stripe gives us a link that would rebuild that basket, and it stops working after 30 days. We do not send any email about a basket left behind. If that ever changes, an address you typed into the box above is the only one we would have to send it to.

A basket left behind and the email list below are separate records. Signing up in the footer does not mean you will be emailed about a basket, and leaving a basket behind does not put you on the list.

The email list

There is a signup box in the footer of every page, and another on the page you reach after ordering. Both are optional, neither is filled in for you, and nothing on this site pops up to ask.

Typing an address into one of those boxes does not put you on the list. We store the address, which of the two boxes it came from, the time, and a one-way fingerprint of the network address it arrived from, and then we send one email asking whether you meant it. Only clicking the link in that email adds you. If you never click it, nothing is ever sent to you.

Every message from the list carries a link that takes you off it, and your email program's own unsubscribe button works as well. One click is enough, there is no form and no questions, and it works whether or not you ever confirmed. We keep the record that you asked to stop, because that is what stops you being added again by mistake.

The list is not sold, rented or shared with anyone. We keep your address for as long as you are on the list. If you leave, we keep the address on a do-not-send record rather than deleting it, because a deleted address is one that can be added again by the next person who types it into the box. Ask us and we will remove that record too.

An address you give at checkout is not on this list. That address is used to send your receipt and to tell you when your order ships, which is what you gave it to us for. It is never copied onto the list. The two are separate records and nothing moves between them.

The signup box runs a check that you are not a machine, handled by Cloudflare, who host this site. Almost every time it decides on its own and you see nothing at all. When it cannot tell, it shows you one box to tick. It sets no cookie, it does not follow you anywhere else, and nothing it collects goes to an advertiser. It is there because typing an address into that box makes us send an email, and without it somebody could point that at a stranger.

What we do not do

Beyond the measurement above there is no session recorder. Nobody is building a profile of you here.

We do not sell, rent or share your details with anyone for marketing. We do not add you to a mailing list because you bought something, and there is no way to end up on one by accident: the list described above takes an address only after you have clicked a link in an email confirming that you meant it.

Who else handles your order

Five companies, each doing one job:

• Stripe takes the payment and holds the card details we never see.
• Our fulfillment partner receives your name, delivery address and what you ordered, because they print, frame and post it. They receive nothing else.
• Cloudflare serves the pages and, like any web host, processes the request as it happens.
• Google get your email address, order reference, delivery country and expected arrival date, and only those, so they can offer you the review survey described above. They get nothing at all if you never reach the confirmation page.
• Meta are told what a paid order came to and which country it is going to, with your email address and the country scrambled first. Not your name, not your address, and not a list of what you bought. Nothing is sent at all if your order is going to the European Economic Area.

None of them is permitted to use your details for their own marketing.

How long we keep it

Order records for seven years, because tax rules in most of the countries we sell to require it. Email correspondence for two years. Nothing else is kept.

Your rights

Ask us what we hold about you and we will tell you. Ask us to correct it and we will. Ask us to delete it and we will, other than the order records we are legally required to keep for the period above.

If you are in the UK, the EU or Australia, you have these rights in law rather than by our permission, and you can complain to your national data protection authority if you think we have got it wrong.

Contact

hello@emmamickelberg.com for anything on this page.