Privacy Policy

1. Who we are

Stitch Habits is a crochet blog and shop selling both digital products (instant-download PDF crochet patterns) and physical products (handmade and crochet-related items). Stitch Habits is the data controller responsible for your personal information.

If you have any questions about this policy or how we handle your data, contact us at support@stitchhabits.com.

2. Information we collect

We collect the following categories of personal information:

a. Information you give us

• Contact & account details — your name and email address when you place an order, download a free pattern, join our email list, or contact us.
• Order & shipping details — for physical products, the shipping address, recipient name, and phone number you provide so we can deliver your order.
• Payment information — when you pay, your payment details (e.g. card number) are collected and processed directly by our payment provider (see §6). We do not see or store your full card number.
• Communications — the content of messages you send us, including support requests and pattern questions.
• Optional information — anything else you choose to share, such as reviews, survey responses, or social tags.

b. Information we collect automatically

• Device & usage data — such as your IP address, browser type, device type, pages viewed, and the date/time of your visit, collected through standard server logs.
• Local storage — your shopping cart and your most recent order confirmation are saved in your browser's local storage on your own device so your cart persists between visits (see §7).

c. Information from third parties

• Payment providers — our processor (PayPal) confirms your payment and may share your name, email, shipping address, and transaction status so we can fulfil your order.

We do not currently use third-party analytics, advertising, or email-marketing platforms. If we add any in future, we will update this policy and, where required, ask for your consent first.

3. How we use your information

We use your personal information to:

• Process and deliver your orders, including sending digital PDF download links and shipping physical products;
• Provide the free patterns and printables you request;
• Create and manage your access to purchased downloads;
• Respond to your questions, requests, and support enquiries;
• Send you order confirmations, shipping updates, and other service messages;
• Send you marketing emails about new patterns and shop updates, where you have opted in (you can unsubscribe at any time);
• Operate, maintain, secure, and improve the Site;
• Detect, prevent, and address fraud, abuse, and technical issues; and
• Comply with our legal obligations (for example, tax and accounting records).

4. Legal bases for processing (EU/UK visitors)

If you are in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

• Performance of a contract — to process and deliver the orders you place with us.
• Consent — to send you marketing emails and to set any non-essential cookies. You may withdraw consent at any time.
• Legitimate interests — to secure and improve the Site, prevent fraud, and run our business, where these interests are not overridden by your rights.
• Legal obligation — to keep records we are required by law to retain.

5. Digital and physical orders

Digital products (PDF patterns)

When you buy or download a digital pattern, we use your email address to deliver the download link and a copy of the file, and to give you continued access. Because digital patterns are delivered electronically, we do not need a shipping address for them.

Physical products

When you order a physical item, we collect the shipping address and contact details needed to fulfil and deliver it. We share this information with shipping and fulfilment partners (such as postal carriers) solely to deliver your order. We currently ship worldwide.

6. Payments

We process payments through PayPal. When you check out, your payment information is collected and processed directly by PayPal under its own privacy policy; we receive only confirmation of payment and the details needed to fulfil your order (such as your name, email, and, for physical items, your shipping address). We do not store your full card or bank details on our servers.

You can review PayPal's privacy practices at paypal.com/legalhub/privacy.

7. Cookies and local storage

A cookie is a small text file stored on your device; local storage is a similar browser technology. We keep our use minimal:

• Essential local storage — we store your shopping cart and your latest order confirmation in your browser's local storage so your cart persists as you browse. This data stays on your device and is not sent to us for marketing.
• Payment cookies — when you check out, PayPal may set its own cookies to process the transaction securely and prevent fraud.

We do not currently use analytics, advertising, or tracking cookies. You can clear or block cookies and local storage through your browser settings, though some features (like your saved cart) may not work as intended if you do.

8. How we share your information

We do not sell your personal information. We share it only with:

• Service providers — companies that help us run the business, such as our payment processor (PayPal), hosting provider, and shipping/fulfilment partners, who may only use your data to provide services to us.
• Legal and safety reasons — where required by law, court order, or to protect our rights, users, or the public, or to detect and prevent fraud.
• Business transfers — in connection with a merger, acquisition, or sale of assets, in which case we will notify you of any change in how your data is handled.

9. Data retention

We keep your personal information only for as long as necessary for the purposes described in this policy — for example, to fulfil your order, provide ongoing access to your purchased downloads, and comply with legal, tax, and accounting requirements. Order and transaction records are typically retained for the period required by applicable law. When information is no longer needed, we delete or anonymise it.

10. International data transfers

We and our service providers may process your information in countries other than your own, including outside the EEA or the UK, where data protection laws may differ. Where we transfer personal data internationally, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) or another lawful transfer mechanism.

11. How we protect your information

We use reasonable technical and organisational measures to protect your personal information, including serving the Site over encrypted (HTTPS) connections and limiting access to data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to address any incident promptly.

12. Your rights (EU/EEA and UK)

If you are in the EEA or the UK, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your data (the “right to be forgotten”);
• Restrict or object to our processing of your data;
• Data portability — receive your data in a portable format;
• Withdraw consent at any time, where processing is based on consent; and
• Lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office, ico.org.uk).

To exercise any of these rights, email us at support@stitchhabits.com. We will respond within the timeframe required by law.

13. Your rights (California residents)

If you are a California resident, the CCPA/CPRA gives you the right to:

• Know what personal information we collect, use, and disclose;
• Request access to and deletion of your personal information;
• Correct inaccurate personal information;
• Opt out of the “sale” or “sharing” of personal information; and
• Not be discriminated against for exercising your rights.

We do not sell or share your personal information as those terms are defined under California law, and we have not done so in the preceding 12 months. To exercise your rights, contact us at support@stitchhabits.com. You may use an authorised agent to submit a request on your behalf.

14. Your rights (Canada)

If you are in Canada, under PIPEDA and applicable provincial laws you may request access to the personal information we hold about you, ask us to correct it, and withdraw your consent to our use of it (subject to legal or contractual restrictions). You may also contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) with a complaint. To make a request, email us at support@stitchhabits.com.

15. Email and marketing

We send marketing emails (such as new-pattern announcements and shop updates) only to people who have opted in — for example, by requesting a free pattern or joining our list. Every marketing email includes an unsubscribe link, and you can opt out at any time. We will still send you essential service messages, such as order confirmations and shipping updates, which are not marketing.

16. Children's privacy

The Site is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

17. Third-party links

The Site may link to third-party websites and services (such as social media or PayPal). We are not responsible for their privacy practices, and we encourage you to review their privacy policies before providing them with your information.

18. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page and, where changes are significant, provide a more prominent notice. Your continued use of the Site after an update means you accept the revised policy.

19. Contact us

If you have questions, requests, or complaints about this policy or your personal information, contact us at: