Privacy policy

Who is responsible

Lempi Knits runs this shop and decides how the data described here is used. If you have a question about your data, or want it deleted, get in touch at laura@lempiknits.com. We answer within 30 days, as the GDPR requires.

What we collect

Nothing to browse. You do not need an account to look at patterns. There are no customer logins on this site.

When you buy a pattern we receive your email address and the order details from our payment provider, so the download links can be sent to you. Card details are handled entirely by the payment provider and never reach our servers. When a pattern is free there is no payment provider involved: you give us the address yourself, and we use it for the same thing.

Aggregate visit counts. We keep daily totals of how many times each page was opened, which country the request came from and which site referred it. These are counters only — no names, no IP addresses, nothing that identifies you. If you accept analytics cookies we also count visits and how often a pattern is viewed, added to the basket and bought.

See the cookie policy for the details.

If — and only if — you tick the box in the basket asking to hear about new patterns, we keep your email address and the language you were reading the shop in on a separate list, so we can write to you when a pattern is published. That is a different question from buying, with its own answer: buying a pattern never puts you on the list. Ask us and we will take you off it.

Your basket is stored in your own browser. It never reaches us until you go through checkout.

Why we may use it

Order data is processed to perform the contract you entered when buying a pattern, and kept as long as bookkeeping law requires. Aggregate visit counts are kept because we have a legitimate interest in knowing whether the shop works. Anything stored on your device beyond what is strictly necessary happens only with your consent, which you can withdraw at any time.

Who else sees it

We use a small number of service providers, each only for what it says here: Cloudflare (hosting the site and storing the pattern files), Google Firebase (the pattern catalogue), Stripe (checkout and payment) and Resend (sending your download email). They act on our instructions. We never sell your data or use it for advertising.

Your rights

You can ask for a copy of your data, ask for it to be corrected or deleted, object to how we use it, or withdraw consent. If you think we have handled your data badly, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).