Privacy Policy

MBB Ceramics LLC, doing business as Pawtery (“we,” “us,” or “our”), respects your privacy. This policy explains what personal information we collect when you use pawtery.art, how we use it, and the choices you have.

Information we collect

We collect information you provide directly and information generated when you use our site:

• Account information — name, email address, and phone number when you create an account or check out. Pawtery does not use passwords. You sign in with a one-time link or code sent to your email address. Each account also has a short customer ID used for referrals and order support.
• Order and fulfillment information — shipping and billing addresses, order details, product options, impression-kit choices, gift certificate codes, voucher certificate codes, discount codes, referral selections (including another customer’s ID or free-text referral notes), and payment status. We do not store full payment card numbers; Stripe processes card payments.
• Impression and customization records — information needed to link your orders to an impression on file, kit shipments, and studio production.
• Communications — messages you send through our Contact page, email replies, and support correspondence.
• Reviews — ratings, review text, display name, and optional photos you submit for products you have purchased.
• Technical information — browser type, device information, IP address, and similar data in server logs and essential cookies (see below) used to operate and secure the site.
• Advertising and measurement information — when Meta advertising tools are enabled, limited device and browsing signals (such as pages viewed, products viewed or added to cart, and purchases) may be collected through the Meta Pixel and related technologies. We may also send hashed order-related contact details (such as email, name, phone, and shipping city/state/ZIP/country when available), along with technical signals such as IP address, browser user-agent, and Meta cookie identifiers, to Meta through the Conversions API so Meta can measure ad performance.

We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, Contact us so we can delete it.

How we use information

We use personal information to:

• Process orders, payments, refunds, and gift certificate or voucher redemptions
• Ship impression kits and finished products, and provide tracking updates
• Create and fulfill custom ceramics from your impressions
• Maintain your account, order history, gift balance, vouchers, and impressions on file
• Send sign-in links and one-time codes to verify your identity and access your account
• Send transactional emails (order confirmations, shipping notices, and similar messages)
• Moderate and publish customer reviews you submit
• Operate referral, voucher, gift certificate, and discount programs shown at checkout (referral rewards may be issued as vouchers, which can expire)
• Respond to your questions and resolve problems with orders
• Protect against fraud, abuse, and security incidents, including through automated bot detection (such as Cloudflare Turnstile) on sign-in, checkout, and selected forms
• Measure and improve digital advertising (including Meta / Facebook and Instagram ads), attribute sales to ad campaigns, and build audiences for ads about Pawtery
• Comply with law and enforce our terms

We do not sell your personal information. We share certain information with Meta as described below so we can run and measure advertising; that sharing is for advertising and analytics purposes, not a sale of personal information for money.

How we share information

We share information only as needed to run the business, with service providers and advertising partners that process data for us, including:

• Stripe — payment processing and sales tax calculation
• Shippo (and shipping carriers such as USPS, UPS, or FedEx) — shipping rates, label purchase, tracking, and delivery
• Cloudflare Turnstile — bot and abuse protection on sign-in, checkout, and selected forms. When you interact with a Turnstile widget, Cloudflare may process limited technical signals (such as IP address, browser user-agent, TLS fingerprint, and site key) to verify that a request is likely from a human. Cloudflare processes this data on our behalf to protect the site. For more detail, see Cloudflare’s Turnstile Privacy Addendum and Privacy Policy. Privacy questions about Turnstile data processed to protect our site should be directed to us (see Questions); Cloudflare’s addendum also describes how to contact Cloudflare directly about its own processing.
• Meta Platforms, Inc. (Facebook / Instagram) — when our Meta Pixel and/or Conversions API are enabled, Meta may receive information about your browser activity on our site (for example, page views, product views, add-to-cart, checkout, and purchase events) and hashed contact details associated with an order (such as email, name, phone, and address components when available). Meta uses this information to provide advertising and measurement services to us and may also use it according to Meta’s own policies. See Meta’s Privacy Policy and About the Meta Pixel.
• Hosting provider — our website is hosted on a virtual private server (VPS); our hosting provider stores site data and serves pages to visitors
• Email delivery provider — sending transactional emails you request as part of an order or account

These providers and partners are authorized to use your information to perform services for us (and, for Meta, as described in Meta’s policies for advertising tools). We may also disclose information if required by law, to protect our rights or safety, or in connection with a business transfer (such as a merger or sale of assets).

Cookies and similar technologies

We use essential cookies and similar technologies to operate the site—for example, to keep you signed in, remember your cart, and protect sensitive forms from automated abuse.

When Turnstile is enabled, Cloudflare Turnstile may set strictly necessary cookies or use similar client-side signals to detect bots. Cloudflare describes these as necessary for bot detection and site security, not for advertising or profiling. See Cloudflare’s Turnstile Privacy Addendum and Cookie Policy for more information.

When Meta advertising tools are enabled, we also use the Meta Pixel and related cookies or pixels from Meta Platforms. These technologies help us understand which ads lead people to our site, measure purchases and other shop events, and show more relevant ads about Pawtery on Meta’s platforms (such as Facebook and Instagram). You can learn more in Meta’s cookie and advertising documentation, and you can often limit ad personalization through Meta’s ad settings or your browser or device controls.

You can control cookies through your browser settings. Disabling essential cookies may prevent checkout and account features from working. Blocking advertising cookies may limit our ability to measure ads and show personalized promotions, but you can still browse and shop.

Bot protection (Cloudflare Turnstile)

On some pages—such as sign-in, checkout, and our contact form—we use Cloudflare Turnstile to reduce automated abuse. Turnstile may run in the background or show a short security check before you can continue.

What Cloudflare may process: limited technical signals such as IP address, browser user-agent, TLS fingerprint, and information about the site key and page origin. Cloudflare states it does not use these signals to directly identify you.

Why we use it: to protect Pawtery and our customers from bots, fraud, and abuse. Our lawful basis for this processing (where applicable privacy law requires one) is our legitimate interest in securing the website and processing orders.

Who to contact: For requests about personal data we control through Turnstile (for example, access or deletion under privacy law), Contact us. Cloudflare’s Turnstile Privacy Addendum explains Cloudflare’s separate processing and how to reach Cloudflare’s Data Protection Officer.

Data retention

We retain order, account, and impression records as long as needed to fulfill orders, maintain impressions on file for reorders, meet legal and tax obligations, and resolve disputes. You may Contact us to request access to or correction of account information. Deletion requests are handled consistent with our need to retain order and tax records and stored impressions; we will explain any limits when you contact us.

Security

We use reasonable administrative, technical, and organizational measures to protect personal information. Because you sign in through email rather than a password, keep your email account secure and do not share sign-in links or codes with anyone. No website or payment system is completely secure.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information we hold about you, or to opt out of certain processing. California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what categories of information we collect and to request deletion, subject to exceptions. You may also have the right to opt out of certain sharing of personal information for cross-context behavioral advertising; Contact us to make a request.

To exercise these rights, Contact us. We may need to verify your identity before responding.

Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page shows when it was last revised. Material changes will be posted on this page.

Questions

For privacy questions or requests, Contact us.