Privacy Policy

What we collect

When you order we receive your name, email address, delivery address, and what you bought, including the design, size and color you chose. That is the whole list.

We never see your card number. Payment happens on a page hosted by Stripe, and what comes back to us is a confirmation, the last details needed for the receipt, and nothing you could pay with.

Your basket and your light or dark preference are stored by your own browser and stay there. Neither is sent to us as a basket. What does leave is the count described under visitor measurement: the product, its price and how many, with nothing attached that says who you are.

Visitor measurement

We use Google Analytics to count visits and see which designs people actually look at. It sets a cookie and tells us things like which country you arrived from, roughly, and which page you landed on. It runs on every page of this shop.

It also follows the shape of a sale: something added to a basket, a checkout started, an order finished. So it is told which design and size went into the basket and what the order came to. What it is never given is anything that identifies you to us: not your name and not your address. We use it to answer questions like "is anyone finding the shop, and do baskets turn into orders", not to follow a person.

When you use the search box, the words you type are sent to Google Analytics along with how many designs matched them. We read that to find what people look for and cannot find, which is how the range gets better. It is the search term on its own, with nothing attached that says who typed it. It is not sent to Meta.

If you are in the European Economic Area, it sets no cookie at all. We tell Google to treat you as not having consented, so you are counted without being stored, and there is no banner to dismiss because there is nothing to agree to.

We also count page views with Umami, which runs on a server we rent and manage ourselves rather than on an analytics company's. It records the page you opened, the site that sent you here, your browser, device and screen size, your language, and roughly where you are, down to the city. It sets no cookie and stores nothing in your browser. Your IP address is used to work out that location and to tell one visit from another, and it is not saved. Page addresses are recorded without anything after a question mark, so the words in a search are not kept this way.

We also keep our own count of what goes into baskets, on our own server rather than Google's: which design, on a mug or a canvas, what it costs and how many. It sets no cookie and carries nothing that says who you are. We keep it for three months and then it is gone. It tells us which designs people actually want, which is a different question from which ones they looked at.

When a search finds nothing, we also keep the words you typed, on our own server, so we can see what people come looking for and we do not sell. Searches that DO find something are not kept this way. It is the words on their own, with nothing attached that says who typed them, and it is gone after three months.

If you would rather not be counted by Google, any browser setting or extension that blocks Google Analytics works here, and nothing on this site behaves differently when you do. Google's own opt-out is at tools.google.com/dlpage/gaoptout. Our own basket count is part of this site rather than someone else's code, so a blocker does not stop it. What it records is the product and never the person.

Meta advertising

We also run the Meta pixel, which is the same idea as the paragraphs above but for Facebook and Instagram rather than for Google. It is told what went into your basket and when a checkout started, and it sets a cookie to do it.

If you are in the European Economic Area it does not load at all. Not a cookie, not a request. Google Analytics is handled differently above, because Google has a way to run a tag without storing anything and Meta does not, and we would rather leave it off than put a consent banner in front of you.

When an order completes, our own server tells Meta what it was worth. That happens after you have paid, from the order we recorded, rather than from your browser. What goes with it is a scrambled version of your email address and your country, the two Meta cookies, your browser's name, the order reference and the amount. Not your name, not your address, not what you bought, and not your IP address.

There is one difference worth stating plainly rather than burying: Meta uses this to show you our products again as an advert elsewhere, and to work out whether an advert we paid for led to a sale. Google Analytics is measurement; this is advertising.

We do not send Meta your name or your address, and the identifier it uses is its own rather than anything you give us. Blocking it changes nothing about how this shop works. Your own controls are in Meta's ad preferences, and most tracker-blocking extensions stop it outright.

The review invitation

On the page you land on after paying, we offer you the chance to be sent a review survey by Google. Taking it is entirely your choice and nothing happens unless you opt in on that page.

To make the offer at all, that page sends Google your email address, your order reference, the country it is shipping to and the date we expect it to arrive. Nothing else goes with it: not your name, not your street address, and not which product you bought. If you opt in, Google emails you later and any rating you give is about us as a shop, not about a specific product.

If you do not opt in, Google does not email you. The offer appears only on that one page, only once, and never on any other part of this site.

If you leave without paying

The basket has an optional email box. Filling it in saves you typing your address again on the payment page, because we pass it to Stripe to fill that field in for you. Leaving it blank is fine and changes nothing about your order.

If you start paying and then leave without finishing, we are told that a basket was left behind and what it was worth. If you gave us an email address we keep it with that record. If you did not, there is nothing on it that says who you are.

Stripe gives us a link that would rebuild that basket, and it stops working after 30 days. We do not send any email about a basket left behind. If that ever changes, an address you typed into the box above is the only one we would have to send it to.

A basket left behind and the email list below are separate records. Signing up in the footer does not mean you will be emailed about a basket, and leaving a basket behind does not put you on the list.

The email list

There is a signup box in the footer of every page, and another on the page you reach after ordering. Both are optional, neither is filled in for you, and nothing on this site pops up to ask.

Typing an address into one of those boxes does not put you on the list. We store the address, which of the two boxes it came from, the time, and a one-way fingerprint of the network address it arrived from, and then we send one email asking whether you meant it. Only clicking the link in that email adds you. If you never click it, nothing is ever sent to you.

Every message from the list carries a link that takes you off it, and your email program's own unsubscribe button works as well. One click is enough, there is no form and no questions, and it works whether or not you ever confirmed. We keep the record that you asked to stop, because that is what stops you being added again by mistake.

The list is not sold, rented or shared with anyone. We keep your address for as long as you are on the list. If you leave, we keep the address on a do-not-send record rather than deleting it, because a deleted address is one that can be added again by the next person who types it into the box. Ask us and we will remove that record too.

An address you give at checkout is not on this list. That address is used to send your receipt and to tell you when your order ships, which is what you gave it to us for. It is never copied onto the list. The two are separate records and nothing moves between them.

The signup box runs a check that you are not a machine, handled by Cloudflare, who host this site. Almost every time it decides on its own and you see nothing at all. When it cannot tell, it shows you one box to tick. It sets no cookie, it does not follow you anywhere else, and nothing it collects goes to an advertiser. It is there because typing an address into that box makes us send an email, and without it somebody could point that at a stranger.

Asking a question

The round button in the bottom corner of every page opens a box for questions about this shop. What you type there, and the earlier questions and answers in that same conversation, go to our server and to an AI model run by Cloudflare, who host this site, so it can write an answer from this shop's own pages. The answer comes from that model rather than a person, and it can be wrong.

We keep no copy of the conversation, and nothing about it is saved in your browser: it is gone when you leave the page. What we keep is a count of questions asked and of the ones it could not answer, with nothing attached that says who asked, for three months.

When it cannot answer, you can leave your question with your email address so a person can reply. We keep that question and address for 90 days and then delete them. The address is used to answer you and nothing else: it is not the email list and it is never added to it. The box runs the same check that you are not a machine as the signup box, handled by Cloudflare.

What we do not do

There is no session recorder: nothing here films your mouse or replays your visit. We do not sell or rent your details, and we do not send marketing email unless you have asked for it and confirmed it by clicking a link we sent you. That last promise is load bearing rather than a description of a shop that sends nothing: the list described above exists, and this sentence is what governs it.

Until 9 August 2026 this paragraph also ruled out advertising tags of any kind. The Meta pixel described above ended that, so the sentence came out rather than being left to quietly age into a false one. If you are in the European Economic Area, that pixel does not load at all, and nothing is following you from here to anywhere else.

Who else handles your order

Five companies see part of it, each because they do a job we cannot:

• Stripe takes the payment and holds the card details we never see. They also get your email and address to check the payment is genuine.
• Our fulfillment partner prints and posts the order, so they get the delivery name and address and the artwork to print.
• Cloudflare host this site and the order records.
• Google get your email address, order reference, delivery country and expected arrival date, and only those, so they can offer you the review survey described above. They get nothing at all if you never reach the confirmation page.
• Pinterest are told that an order happened, what it was worth and which country it is going to, so we can see whether the pins we post lead anywhere. Your email address and the country are scrambled first, into a string that cannot be turned back into either. They are not told your name, your address, or what you bought. Nothing is sent until an order is paid for, and nothing about browsing this site reaches them at all.

That means your details leave New Zealand. The workshop that prints and posts your printing is in the United States, and the payment and hosting companies operate across several countries. There is no way to make and ship the order otherwise.

How long we keep it

Order records are kept for seven years, which is what New Zealand tax law requires of business records. Artwork files are removed once the order has been delivered and the window for a reprint has passed.

Your rights

Under the Privacy Act 2020 you can ask what we hold about you and have anything wrong corrected. Email hello@justonelineart.com and we will answer within 20 working days, which is the limit the Act sets.

You can ask us to delete your details. We will, except for the order records tax law requires us to keep, and we will tell you exactly what is staying and why.

If you are unhappy with how we have handled it, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Contact

hello@justonelineart.com. A person reads it.