What we know about you, and why.

What we collect

When you order we receive your name, email address, delivery address, the words you chose for the card, and what you bought. That is the whole list.

We never see your card number. Payment happens on a page hosted by Stripe, and what comes back to us is a confirmation, the last details needed for the receipt, and nothing you could pay with.

Your basket and your light or dark preference are stored by your own browser and stay there. Neither reaches us until you check out.

Visitor measurement

We use Google Analytics to count visits and see which pages people actually read. It sets a cookie and tells us things like which country you arrived from, roughly, and which page you landed on. It runs on every page of this shop.

What it is never given is anything that identifies you to us. Your name, your address, the words you chose for the card and what you bought are not sent to it. We use it to answer questions like "is anyone finding the shop", not to follow a person.

If you are in the European Economic Area, it sets no cookie at all. We tell Google to treat you as not having consented, so you are counted without being stored, and there is no banner to dismiss because there is nothing to agree to.

If you would rather not be counted, any browser setting or extension that blocks Google Analytics works here, and nothing on this site behaves differently when you do. Google's own opt-out is at tools.google.com/dlpage/gaoptout.

What we do not do

Beyond the measurement above there is no advertising pixel, no session recorder and no remarketing tag. Nobody is following you from this shop to the next one. We do not sell or rent your details, and we do not send marketing email unless you have asked for it.

Who else handles your order

Three companies see part of it, each because they do a job we cannot:

• Stripe takes the payment and holds the card details we never see. They also get your email and address to check the payment is genuine.
• Our fulfillment partner makes the necklace and posts it, so they get the delivery name and address and the artwork for your card.
• Cloudflare host this site, the order records and the printed card artwork.

That means your details leave New Zealand. The workshop that makes and posts your necklace is in the United States, and the payment and hosting companies operate across several countries. There is no way to make the necklace otherwise.

The words on your card

The To and From lines are stored with your order and sent to the workshop, because they get printed. They are treated as part of the order and nothing else. We do not read them for any other purpose, and they are never used in marketing without asking you first.

How long we keep it

Order records are kept for seven years, which is what New Zealand tax law requires of business records. Card artwork is removed once the order has been delivered and the window for a remake has passed.

Your rights

Under the Privacy Act 2020 you can ask what we hold about you and have anything wrong corrected. Email [email protected] and we will answer within 20 working days, which is the limit the Act sets.

You can ask us to delete your details. We will, except for the order records tax law requires us to keep, and we will tell you exactly what is staying and why.

If you are unhappy with how we have handled it, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Contact

[email protected]. A person reads it.