Privacy policy
Last updated:
This policy explains how PotteryMania collects, uses, stores, and shares personal data when you use the public website, create an account, run a studio on the platform, make a purchase, or book a class.
1. Who we are
PotteryMania is the controller for the personal data we process to operate the apparel shop, secure accounts, process orders, and run the affiliate program. For privacy, data-protection, or GDPR requests (including access, correction, deletion, and export) email [email protected]. For anything else (orders, returns, account help) email [email protected].
2. Data we collect
We collect account details, transaction information, booking information, customer support communications, technical logs, and analytics events required to operate PotteryMania safely and effectively.
- Account data: email, password (hashed), role, and profile details you provide.
- Commerce: name, contact details, addresses, order and booking history needed to fulfil purchases and classes.
- Payments: payment data is processed by Stripe and similar providers; we typically receive tokens and transaction metadata, not full card numbers.
- Usage and diagnostics: logs, device/browser data, and analytics where enabled (see section 6).
- Communications: messages you send us and email delivery metadata when we notify you about orders, bookings, or security.
3. Why we use data
- Provide, secure, and improve the platform.
- Process checkout, payouts, and customer support.
- Meet legal obligations and enforce our terms.
- Send service-related messages; marketing only where you have opted in or the law allows.
4. Legal bases
Where GDPR or similar rules apply, we rely on contractual necessity, legitimate interests, legal obligations, and consent where appropriate. For example, we process data to create accounts, complete bookings, operate checkout, detect abuse, and communicate essential service updates.
5. Sharing and subprocessors
We share data with studios when they need it to fulfil an order or booking, with payment processors such as Stripe, hosting and infrastructure providers such as Vercel, media and upload providers such as Cloudinary when enabled, email providers that deliver transactional messages, and authorities when disclosure is legally required. We do not sell personal data as a business model.
6. Cookies and analytics
We use cookies and similar technologies for authentication, session continuity, security, and preferences. We use Google Analytics (GA4) to understand traffic and how the product is used. The cookie banner controls optional marketing cookies (for example Meta Pixel) when we enable them — not the basic GA4 site measurement. Blocking essential cookies may prevent sign-in, checkout, or dashboard features from working correctly.
7. Retention
We keep personal data only for as long as needed to operate the service, comply with legal and tax obligations, resolve disputes, and maintain basic security records. Studios may remove certain customer records through the dashboard, but some transaction records must be retained for operational and compliance reasons.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, export, or object to certain uses of your data. You may also have the right to withdraw consent where processing depends on consent. Self-service data export and account anonymization controls are available in your account page.
9. International transfers
If we transfer personal data across borders, we take reasonable steps to do so using appropriate legal and operational safeguards required by applicable law.
10. Security
We use technical and organisational safeguards intended to protect personal data. No internet-based service can be guaranteed perfectly secure, so you should also use strong passwords and keep sign-in methods private.
11. Children
PotteryMania is not directed at children below the age at which parental consent is required under applicable law. If you believe personal data has been collected from a child inappropriately, contact us through support so we can review and delete it where required.
12. Changes
We may update this policy and will revise the "Last updated" date when we do. Material changes may also be communicated by email or in-product notice where appropriate.
See also Terms of service · Studio terms.