Privacy policy

The data controller is mk-ceramics ApS, Sydvestvej 129 A, 2600 Glostrup, Denmark. Write to support@mkceramics.shop about anything on this page. We are not required to appoint a data protection officer and have not appointed one; email reaches the people who make these decisions.

• Order data — name, email address, telephone number, delivery address including postnummer and by, country, the items ordered, and the engraving text or artwork.
• Payment data — we receive confirmation that a payment succeeded, the amount, the method, and the last four digits of a card. We never receive or store the full card number.
• Correspondence — what you send us by email, through the contact form or the trade enquiry form, and our replies.
• Uploaded artwork — see the separate section below.
• Technical data — server logs holding IP address, timestamp and requested page, kept for security and troubleshooting.
• Local storage — your cart and your saved configuration, held in your own browser. That data stays on your device; it is not a cookie sent to us.

We do not collect date of birth, we do not build profiles, and we do not buy data about you from anyone.

We do not send marketing email unless you ask for it. If we ever introduce it, it will be on consent you have given separately, and withdrawing that consent will be one click.

Artwork you upload is treated more carefully than anything else here:

• Stored in a private bucket, never on a public URL.
• Given a random filename on receipt.
• EXIF and other embedded metadata stripped server-side before storage, including any location a camera or phone wrote into it.
• Accessed only through short-lived signed URLs.
• Used solely to produce your order — never for marketing and never to train any model.
• Deleted at the end of the retention period below.

• Uploaded artwork: 24 months after dispatch, then deleted. That covers the two-year period in which you might need a piece remade to the same mark. Ask us earlier and we delete it earlier.
• Order and invoice records: 5 years from the end of the financial year, as required by the Danish Bogføringslov.
• Correspondence: 24 months from the last message, unless it relates to a complaint, in which case it is kept until the matter is closed and the complaint period has run.
• Server logs: 90 days.
• Cart and configuration in your browser: until you clear it. It never leaves your device on its own.

We use a small number of processors, each under a data processing agreement, each limited to what they need:

• Hosting and database — to run the site and hold orders. Hosted within the EU.
• Payment provider — a PCI DSS certified provider that handles the card details you enter. They are a controller in their own right for that data.
• Email delivery — to send order confirmations and replies.
• Carrier — the name, address and telephone number needed to deliver the parcel.

We do not sell personal data, and we do not share it for anyone else’s marketing.

Our hosting and storage are within the EU. Where a processor needs to transfer data outside the EEA, that happens under an adequacy decision or the European Commission’s standard contractual clauses, with supplementary measures where required. Write to us for details of a specific transfer.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have data erased, where we have no continuing legal reason to keep it;
• restrict processing while a dispute is resolved;
• receive data you gave us in a portable, machine-readable format;
• object to processing based on our legitimate interests, including at any time to direct marketing;
• withdraw a consent you have given, without affecting what was done before you withdrew it.

Email support@mkceramics.shop. We answer within one month, and we do not charge for it.

If you think we have handled your data wrongly, tell us first — it is usually quicker. You also have the right to complain to the Danish data protection authority at any time:

The site is served over HTTPS throughout. Access to order data is restricted to the people who produce and dispatch orders. Uploaded artwork sits in private storage behind signed URLs. Card details never reach our servers.

Cookie use is set out separately in the cookie policy.