Privacy Policy

The data controller for the personal data described in this policy is:

Julija Martinaitienė, trading as Julia Martin Ceramics
Enskild näringsidkare (sole trader), registered in Sweden
Ladugårdsmarken 412, 225 91 Lund, Sweden
Email: julia@juliaceramics.com

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection legislation.

Depending on what you do on the site, we collect:

• Shop orders — the information you enter at checkout: your name, email address, delivery address and phone number. The phone number is required so the delivery courier can reach you about your parcel.
• Pottery classes — your name, email address and phone number, and any note you add when you book. If you join the waiting list for a class, your name and email address.
• Gift vouchers — the buyer’s name and email address. If you want the voucher sent to someone else, also their name, email address and your message to them.
• Newsletter — your email address and, if you give it, your first name.
• Messages to us — whatever you send us by email or WhatsApp, such as your name, phone number and question.
• Unfinished payments — if you start to pay for an order, a class or a voucher but don’t finish, Stripe tells us the name and email address you entered and why the payment did not go through.

We never see or store your card details. Payment is handled directly by Stripe, our payment processor; if you choose to save your details for faster checkout (via Stripe Link) or pay with Klarna or PayPal, those providers may collect additional information directly from you, such as a phone number.

When you click a link in an email from us, such as an order confirmation, a gift voucher or the newsletter, the click goes through our email provider, Resend, on our own address (links.juliaceramics.com) before taking you to the page. This lets us count which links are used. We don’t track whether you open our emails.

Our hosting provider also processes technical data such as your IP address when your browser requests a page. This is needed to deliver the site and keep it secure.

The site uses the following. Google Analytics and the Meta Pixel are only switched on if you press “Accept” in the cookie banner.

• Currency cookies (functional) — remember which country and currency you’ve selected while browsing. They aren’t used to track you and are kept for up to one year.
• Google Analytics (via Google Firebase) — tells us how the site is used, such as which pages are visited, roughly where visitors come from and what device they use. It sets cookies in your browser (for up to two years).
• Meta Pixel (Facebook and Instagram) — tells Meta which pages you visit and whether you add something to your cart or buy, so we can measure and improve our advertising on Facebook and Instagram. It sets a cookie in your browser (for about three months).

Google Analytics and the Meta Pixel are not needed for the site to work, and the site works the same if you decline. Your choice is saved in your browser. You can change it at any time with “Cookie settings” at the bottom of every page, delete the cookies in your browser settings, and control the ads you see in your Facebook and Instagram settings.

• Orders, classes and gift vouchers — processing and delivering your order, booking you into a class, sending confirmations, reminders and vouchers, and handling returns, cancellations or complaints. Legal basis: GDPR Article 6(1)(b), performance of a contract.
• Payment and fraud prevention — processing payment securely. Legal basis: GDPR Article 6(1)(b), performance of a contract, and Article 6(1)(f), our legitimate interest in preventing fraud.
• Accounting and legal obligations — bookkeeping and accounting documentation. Legal basis: GDPR Article 6(1)(c), legal obligation.
• Waiting list — letting you know when a new date for a class is added, because you asked us to. Legal basis: GDPR Article 6(1)(b), steps taken at your request before a contract.
• Newsletter — sending you news about new work, classes and gift vouchers. Legal basis: GDPR Article 6(1)(a), your consent. You can unsubscribe at any time with the link in every newsletter.
• Unfinished payments — sending you one personal email to ask if we can help you finish your order or booking. Legal basis: GDPR Article 6(1)(f), our legitimate interest in helping customers.
• Understanding which email links are used — counting clicks on links in our emails, so we can improve them. Legal basis: GDPR Article 6(1)(f), our legitimate interest in improving our communication.
• Analytics and advertising — understanding how the site is used and measuring and improving our advertising (Google Analytics and the Meta Pixel). Legal basis: GDPR Article 6(1)(a), your consent, which you can withdraw at any time.

We don’t sell your data to anyone.

We share the minimum necessary data with a small number of service providers who help us run the shop and the classes:

• Stripe — payment processing (card, PayPal, Klarna).
• Google Firebase — secure storage of order, booking and voucher records.
• The delivery courier — your name, delivery address and phone number, so your parcel can be delivered.
• Resend — delivery of order, booking and voucher emails and of the newsletter, and counting clicks on links in them.
• Vercel — hosting of the website.
• Google Analytics — website statistics.
• Meta (Facebook, Instagram, WhatsApp) — advertising measurement through the Meta Pixel, and messages you send us on WhatsApp.

Some of these providers are based outside the EU/EEA (primarily the United States) and process data under their own data protection safeguards, such as Standard Contractual Clauses.

We keep order, booking, voucher and accounting records for 7 years, in accordance with the Swedish Book-keeping Act (Bokföringslagen). Your newsletter and waiting-list details are kept until you unsubscribe or ask us to delete them. Our currency cookies expire after one year, and the analytics and advertising cookies after the periods described above. Google and Meta keep the data from their tools according to their own settings.

Under the GDPR, you have the right to access, correct, or request deletion of your personal data, to object to or restrict certain processing, to withdraw a consent you have given (for example to the newsletter), and to receive your data in a portable format. To exercise any of these, contact us at julia@juliaceramics.com.

If you believe we haven’t handled your data properly, you can also lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

We may update this policy from time to time to reflect legal or operational changes. The latest version will always be available on this page.

Questions about this policy or your data? Reach us at julia@juliaceramics.com or by phone at +46 76 280 11 81.