Privacy Policy

We collect information you provide directly, information collected automatically, and information from third parties.

​

a. Information You Provide to Us:

• Personal details: Name, email address, shipping address, phone number when you create an account, place an order, sign up for workshops, or subscribe to our newsletter.

• Payment information: Billing details (processed securely by our third-party payment providers, PayPal and Square; we do not store full credit card numbers or sensitive payment details).

• Communications: Messages, feedback, or inquiries submitted via contact forms, emails, or reviews.

• Account information: Username, password, and order history if you register an account.

​

b. Information Collected Automatically:

• Usage data: IP address, browser type, device information, pages viewed, time spent on pages, and referring sites.

• Cookies and similar technologies: We use cookies, pixels, and analytics tools to improve site functionality, track preferences, and analyze traffic (e.g., remembering items in your cart).

​

c. Information from Third Parties:

• Data from payment processors (PayPal and Square), shipping providers, or analytics services (e.g., Google Analytics).

We do not knowingly collect personal information from children under 13 (or 16 in some jurisdictions). If we learn we have collected such information, we will delete it.

​

2. How We Use Your Information

​

We use your information to:

• Process and fulfill orders, including shipping tufting kits or workshop registrations.

• Communicate with you about orders, updates, newsletters, promotions, or customer support.

• Improve the Site, personalize your experience, and develop new content or products.

• Prevent fraud, ensure security, and comply with legal obligations.

• Analyze usage for marketing and site enhancements.

​

3. Sharing Your Information

​

We do not sell your personal information. We may share it with:

• Service providers: Payment processors (PayPal and Square), shipping companies, email services (e.g., Mailchimp), and hosting providers.

• Analytics tools: Google Analytics or similar for aggregated, anonymous insights.

• Legal requirements: If required by law, court order, or to protect our rights.

• Business transfers: In the event of a merger, sale, or restructuring.

​

4. Cookies and Tracking Technologies

​

We use cookies for essential functions (e.g., login, cart) and optional ones (e.g., analytics, advertising). You can manage cookies via your browser settings. For more details, see our Cookie Policy [link if separate].

​

​

5. Your Rights and Choices

​

Depending on your location, you may have rights under laws like GDPR (EU/UK), CCPA/CPRA (California), or similar:

• Access, correct, update, or delete your personal information.

• Opt out of marketing emails (use unsubscribe links).

• Request data portability or restriction of processing.

• Object to certain uses (e.g., direct marketing).

To exercise these rights, contact us at [your email address]. We will respond within the legally required timeframe (e.g., 30-45 days). California residents may also have rights regarding "sales" of data (though we do not sell data).

​

​

6. Data Security

​

We use reasonable measures (e.g., encryption, secure servers) to protect your information, but no system is 100% secure. You are responsible for keeping your

account credentials safe.

​

​

7. Data Retention

​

We retain your information as long as needed for business purposes, orders, or legal requirements (e.g., tax records). Inactive accounts may be deleted after a reasonable period.

​

​

8. International Transfers

​

If you are outside the US, your data may be transferred to and processed in the United States or other countries. We use safeguards to protect it.

​

​

9. Changes to This Policy

​

We may update this Privacy Policy. Changes will be posted here with an updated "Last Updated" date. Significant changes will be notified via email or site notice.