Privacy policy

I keep as little data as I can get away with. This page explains exactly what I hold and why.

What I collect

• Your email address, when you buy a pattern, create an account, or subscribe to the newsletter.
• Account details you give me at sign-up — first and last name, and optionally your country, knitting level and how you found me. Name and email are needed to run your account and support your purchases; the optional fields help me write patterns and emails that are actually relevant. You can leave the optional ones blank.
• Marketing consent — whether you ticked the marketing box, and when. Marketing email only goes to people who opted in, and every one has an unsubscribe link.
• Order records — what you bought, when, and how much you paid. Card details never touch this site; the payment processor handles them.
• Download records — which pattern, which version, and when, so I can spot a leaked file and support you when something goes wrong.
• Analytics, only if you accept cookies. See the cookie policy.

What I never do

• Sell or rent your data.
• Send you marketing you didn't ask for.
• Store your payment card details.

Watermarking

Pattern PDFs carry your email address in the footer. It's there so a shared file can be traced back to the account that downloaded it. It is not shared with anyone else.

How long I keep things

Order and entitlement records are kept for as long as you have access to the pattern, plus the period tax law requires. Newsletter subscriptions last until you unsubscribe. Download logs are pruned after two years.

Legal basis (GDPR / UK GDPR)

I process your account and order data to perform our contract (delivering the patterns you bought), keep tax records because the law requires it, and send marketing email only on your consent. Consent can be withdrawn at any time by unsubscribing or emailing me — that doesn't affect anything processed before you withdrew it.

Your rights

You can ask for a copy of your data, ask me to correct it, or ask me to delete it. Deleting your account removes your library access too, which is worth knowing before you ask. Email zachsumano@gmail.com and I'll act within 30 days.

Processors

I use third parties for hosting and the database, payment processing, and transactional email. Each of them sees only what they need to do their job.