Privacy

What we collect

When you place an order, we collect what's needed to fulfill it: your name, email address, shipping address, and the order's contents/amount. If you contact us, we keep that correspondence to answer you and for our own records.

Order pages and receipts stay private

Your order confirmation page and PDF receipt are reachable only via a private, unguessable link — no account or login is required, the same way a courier's or payment provider's own hosted tracking page works. These pages are excluded from analytics, are not indexed by search engines, are never cached publicly, and don't leak their address via the browser's referrer header when you click away from them.

Who else sees your data (processors)

Analytics and advertising measurement

We use Vercel's built-in Web Analytics to see which pages are visited, in an aggregated way that sets no cookies and cannot identify you individually. It is not loaded at all on order, checkout, login or account pages.

We also record our own aggregated counts of page views, product/category views, add-to-cart actions, checkout steps reached and clicks on our Etsy link — so we can see which pieces get looked at, whether the checkout process is working, and whether visitors are choosing to buy on Etsy instead of here. This never identifies you: we do not set an analytics cookie or any other visitor identifier, and we never store your IP address — only the two-letter country your connection is coming from (read once from a routing header, never geolocated further). These records cannot be linked to your name, email, order, or any browsing session, and are never combined into an individual visit or journey. Our legal basis is our legitimate interest in understanding and improving the shop; this data is separate from, and never joined to, your order record. Pages that show your personal order/account data (checkout, order confirmation, receipts, login, account, admin) are excluded from this as well as from Vercel’s own analytics. If you are signed in as the shop owner, your own browsing is excluded so it cannot skew these counts.

Single-visit journeys. Where journey measurement is switched on for a site, we record the journey of one visit: the pages you open in order, the links and buttons you use to move between them, roughly how long each page was actually in the foreground and in use, which products and variants you looked at, and which steps of buying you reached. We do this to understand how people navigate, which pieces hold attention, and where buying becomes difficult.

A journey is deliberately built so that it cannot become a record of you. It uses a random identifier, kept only for the browser tab you are using and never placed in a cookie, which disappears when you close that tab or after 30 minutes of inactivity. It contains no name, email address, IP address, account reference or order reference. We make no attempt to recognise a returning visitor, and separate visits are never linked: if you come back later, that is a new, unconnected record. Pages that show your personal order or account data stay excluded, apart from coarse signals such as “reached checkout” or “a purchase was confirmed”, which carry no detail about you or what you bought. Times are estimates of active use, never an exact reading time, and the last page we see is a probable exit, not proof of where you left. Individual journeys are deleted within 90 days.

If you arrived from one of our advertisements, the campaign, ad group, creative and matched keyword from that advertisement’s own link are recorded with the journey. The matched keyword is a keyword in our advertising account, not the words you typed into Google. If you then place an order, campaign information from that link — including Google’s click identifier, where the link carried one — is stored with your order so we can tell which advertising actually leads to sales. That information stays with us; it is not sent to Google or to anyone else.

Our legal basis for single-visit journeys is our legitimate interest in measuring and improving this storefront, using a design that keeps the impact on your privacy low. It is not a claim that this data falls outside privacy law. You can object at any time using the control below: journeys stop being recorded in this browser, and the journey of the visit you are making is deleted.

Google Ads. We advertise through Google Ads, but our website currently does not load Google’s advertising measurement tag, set Google advertising cookies, or send browsing or purchase events to Google for website conversion measurement. Campaign and matched-keyword information that Google includes in an advertisement’s landing link may be recorded by us, as described above. This can change: if we enable Google’s advertising measurement again, we will update this notice and ask for your consent before any optional advertising storage or browser measurement is switched on.

Single-visit journeys are currently recorded for this browser.

Reviews

If you've bought something from us, we may invite you — a while after your order ships — to leave a review through a private, single-use link tied to that specific order, and we may send you one reminder if you haven't responded. No account or login is required, and no incentive is ever offered for a review. You control what's shown: a display name or initial you choose (never your full name), a star rating, optional text, and up to three optional photos.

Every published review comes from a verified purchase. A submitted review is published immediately — there is no waiting period. We may afterwards hide or reject it for one of a fixed set of reasons — abusive language, illegal content, someone else's personal data, spam, content unrelated to the purchase, or a duplicate — recorded internally for audit. We do not, and cannot, hide or reject a review just because it's negative; positive and negative ratings follow exactly the same rule.

If you attach photos, they are published publicly alongside your review, and anyone who can see the review can see them. Before publishing, each photo is converted to a web format and its embedded metadata — including any location your camera recorded — is stripped; the original file you selected is processed and then deleted, never published and never kept. Please don't include other people, documents, or anything you wouldn't want shown publicly. Erasing your review, below, removes its photos with it.

You can ask us to completely erase your review at any time — pending, published, or rejected — by contacting hello@nesceramics.com; we'll send a confirmation link to the email on your order before anything is deleted, so only you can trigger it. Erasing a review deletes it and its data entirely (no anonymised copy is kept) and immediately updates any rating shown publicly. This is separate from, and does not affect, our independent retention of the underlying order record (kept for tax/accounting and dispute purposes, as described above) or a permanent record that you should not be invited to review again, which we keep so we can honour that request for future orders too.

Retention

Order records are kept for as long as required for tax/accounting purposes and to handle any warranty, return, or dispute. Contact messages are kept for as long as reasonably needed to resolve them. The detailed analytics records described above are kept for 90 days; the daily summaries they roll up into (which no longer carry individual event detail) are kept for 25 months, so we can compare a year of activity with the year before it.

Your rights

Under EU/Dutch data protection law you can ask to see, correct, or delete the personal data we hold about you, or object to how it's used — subject to what we're legally required to keep (e.g. for tax records). Contact hello@nesceramics.com to ask.

Seller

NES Ceramics
Pieter Wantelaan 30
2015 EB Haarlem
Netherlands
Chamber of Commerce (KvK): 73741590
VAT (BTW): NL002427971B09
hello@nesceramics.com

See also our Terms & Conditions.