What this site stores about you

One thing stays in your browser

If you confirm on arrival that you're 18 or over, your own browser remembers it, so the question doesn't come back on every page. It isn't a cookie: it sits in your browser’s storage and is never sent to us.

If you clear this site’s data in your browser, it's gone and the question returns. We can't see how you answered.

A basket is one cookie

When you add something to your basket, this site sets one cookie: damax_mandje. It holds only a number, so that on your next click the site knows which basket is yours. No name, no address, and nothing about what you look at.

The basket can't work without this cookie, which is why we don't ask for consent. It's only sent to this site, can't be read by scripts on the page, and disappears after 30 days, or after one day once you enter your details at checkout. The contents of your basket are kept by our checkout system and deleted there once the basket has gone unused for just over a month.

When you check out

If you check out, you give us your name, address and email address and, if you like, your phone number and a note with your order. These are kept with the order in our checkout system, so that we can make the piece, send it and email you about it. The site also emails us a notification of the order with the same details, at our own address. Two weeks after your order has shipped or been collected, we also send a link to your email address so you can review the piece. We don't use your details for anything else.

If you choose the Netherlands, the site looks up the street and town for your postcode and house number with PDOK, the Dutch government's map service. That request goes through our server, so PDOK only receives the postcode and house number, not your IP address or anything else about you.

If you live outside the European Union, you request a quote instead of checking out. For that you give us the same details: your name, address and email address and, if you like, your phone number. These are kept with the request in our own database, together with your basket and your note, so that we can prepare the quote and email you. The site also emails the request to our own address, and you get an email confirming we've received it. We don't use your details for anything else.

The order also records how you arrived on the site: the first page, the site that referred you, and a campaign code if the link had one. The site only remembers this while the page is open, without a cookie, and it's only sent along when you check out.

You pay with Mollie, a Dutch payment service. We give Mollie the amount and a number for your order; you enter your bank or card details on Mollie's own page, and we never see them.

After you pay, the site sets one more cookie: damax_bestelling, which holds the number our checkout system uses for your order. It lets the confirmation page show what you ordered and where it's going, and it's also set when you later look up an order with your order code and email address. It's only sent to this site, can't be read by scripts on the page, and disappears after one day.

Visits are counted, without cookies

To see how many people visit and which pages they read, the site uses Umami: a counter that sets no cookies and stores nothing in your browser. For each visit it records the page, where you came from, your browser, operating system, type of device, screen size and language, how quickly the page loaded and responded, and, from your IP address, your country, region and city. It doesn't keep your IP address itself.

Umami runs on umami.ef-it.nl, not at Google or an advertising company. There's no profile that follows you from site to site, which is why we don't ask for permission. There are no advertising scripts here, and no social media buttons tracking you.

It also counts what happens on the site: a piece being added to the basket (which piece, which version, whether a size was entered, and whether it came from a section such as “Often bought together”, and which piece that section was shown with), which of those sections you saw, changing an option on a piece, which country you order to, which pieces, and whether that means checking out or a quote, the first step of checkout, the step to the payment page (with delivery or collection), a paid order (with the amount and which pieces it included) or a payment that didn't go through, an error message (which one, and on a form which fields, never what you typed), starting and sending a contact message (and which piece it was about, or whether it was about a made-to-measure piece, never what it says), sending a quote request (which pieces were in it, not what you wrote), a click on a button or an email or phone link (which one, and which piece, section or photo shoot it belonged to), which photos you enlarge, which frequently asked question or explanation you open, a click on a link to another site (only which site), switching language, and how far down a page you scroll (a quarter, half, three quarters or to the bottom). Never an order number, name, address, email address or size. If you arrive through a link with a campaign code, from a newsletter or an advertisement for example, it records that code too. A link to the review form has its key removed before it's counted.

Everything comes from this domain

The fonts, photographs and scripts come from this domain, including the counter’s script. The counts are sent to this domain too, and our server passes them on to Umami at umami.ef-it.nl, with your IP address so it can tell the country. Nothing is requested from Google, a font service or an ad network, not even in the background.

That isn't just our intention, it's enforced: the site sends a rule that stops your browser loading anything from another host.

Your language is your choice

The site never picks a language or country for you based on your IP address. The language is part of the page address, and you choose it yourself.

Only when you open the bare address, without a language in it, do we pick one: the language your browser already sends with every request. If that isn't Dutch, English or German, we use English. On arrival we tell you the language was chosen this way, with the other languages right below. No cookie is set, and the site doesn't remember it.

If you write a review

We keep what you fill in: the number of hearts and the text, with the month you wrote it and the language of the link you used. Your name and email address aren't stored with it, not even in our database.

On the site, your review appears with “verified buyer” and the month. It isn't translated and isn't passed on to any other company: it stays in our own database.

If you write to us

When you use the form on the contact page, we keep what you fill in: your message, your email address, and your name if you give it. If you came from a product page, the piece is attached with the options you chose there. We use this to reply to you. It's kept in our own database, and the site emails it to our own address. You get an email confirming we've received it, with the start of your message, without links.

The message also records how you arrived on the site: the first page, the site that referred you, and a campaign code if the link had one. The site only remembers this while the page is open, without a cookie, and it's only sent along with your message.

To protect the form against automated abuse, the site counts how many messages arrive from one IP address within an hour. That count exists only in the server's memory, not in a database, and is gone after an hour.

If you'd rather email or call us, we have what you send: your message and the address or number it came from. There are no customer accounts.

A check by Cloudflare on two forms

The contact page and the quote request form have a spam check: Turnstile, by Cloudflare. Only on those two pages does the site load a script from challenges.cloudflare.com for it.

For this, Cloudflare receives data from your browser, including your IP address. When you send the form, we ask Cloudflare whether the check passed, and include your IP address. All we get back is yes or no.