Privacy Policy

This Privacy Policy describes how and when I collect, use, and share information when you purchase an item from me, contact me, or otherwise use my services through my website (knitabitofwhimsy.com) or its related sites and services.

This Privacy Policy does not apply to the practices of third parties that I do not own or control, including WordPress (my website hosting service), Etsy (an online marketplace where I sell patterns, located at www.etsy.com), Ravelry (a marketplace where I sell patterns, located at www.Ravelry.com), or any third party services you access through those sites. You can reference the Etsy, Ravelry, and WordPress Privacy Policies at the following links to learn more about their privacy practices.

Information I Collect

I collect a variety of information from you when you visit my website, make purchases, or interact with me on social media. By accepting this Privacy Policy, you are specifically consenting to our collection of the data described below, to our use of the data, to the processing of this data, and to our sharing of the data with third party processors as needed for our legitimate business interests. The information we collect may include:

  • Personal Data: Personal Data is information that can be used to identify you specifically, including your name, shipping address, email address, telephone number or demographic information like your age, gender, or hometown.  You consent to giving me this information by providing it to me voluntarily on my website or any mobile application. You provide some of this information when you register with my  You may also provide this information by participating in various activities associated with our site, including responding to blog posts, contacting us with questions, or participating in group training. Your decision to disclose this data is entirely voluntary. You are under no obligation to provide this information, but your refusal may prevent you from accessing certain benefits from our website or from making purchases.
  • Derivative Data: Derivative data is information that our servers automatically collect about you when you access our website, such as your IP address, browser type, the dates and times that you access our website, and the specific pages you view.  If you are using a mobile application, our servers may collect information about your device name and type, your phone number, your country of origin, and other interactions with our application.
  • Social Networking Data: I may access personal information from social networking sites and apps, including Facebook, Instagram, Linkedin, Twitter, Snapchat  or other social networking sites or apps not named specifically here, which may include your name, your social network username, location, email address, age, gender, profile picture and any other public information.  If you do not want us to access this information, please go to the specific social networking site and change your privacy settings.
  • Mobile Device Data: If you use our website via a mobile device or app, I may collect information about your mobile device, including device ID, model and manufacturer, and location information.
  • Other data: On occasion, you may give us additional data in order to enter into a contest or giveaway or to participate in a survey. You will be prompted for this information and it will be clear that you are offering this kind of information in exchange for an entry into such a contest or giveaway.
Why I Need Your Information and How I Use It

Your information allows me to offer you certain products and services, including the use of my website, to fulfill my obligations to you, to customize your interaction with my company and my website, and to allow me to suggest other products and services I think might interest you. I rely on a number of legal bases to collect, use, and share your information, including:

  • as needed to provide my services, such as when I use your information to fulfil your order, to settle disputes, or to provide customer support;
  • process payments or refunds;
  • when you have provided your affirmative consent, which you may revoke at any time, such as by signing up for my mailing list;
  • contacting you about new offerings I think you will be interested in;
  • notify you of updates to our product and service offerings;
  • administer contests or giveaways;
  • compile anonymous statistical data for my own use;
  • analyze trends to improve my website and offerings
  • if necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law; and
  • as necessary for the purpose of my legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as 1) providing and improving my services. I use your information to provide the services you requested and in my legitimate interest to improve my services; 2) I use your information as necessary to comply with my obligations under the Etsy Seller Policy and Terms of Use; 3) I use your information as necessary to comply with my obligations under the Ravelry Terms of Service.
Information Sharing and Disclosure

Information about my customers is important to my business. I share your personal information for very limited reasons and in limited circumstances, as follows:

  • Administration of my website, communicating with you, taking orders for goods or services, delivery of goods and services, identifying trends, protecting the security of our company and website, and marketing additional goods and services to you.
  • Ravelry. I share information with Ravelry as necessary to provide you my services and comply with my obligations under the Ravelry Terms of Service.
  • Etsy. I share information with Etsy as necessary to provide you my services and comply with my obligations under both the Etsy Seller Policy and Etsy Terms of Use.
  • Service providers. I engage certain trusted third parties to perform functions and provide services to my shop, such as delivery companies. I will share your personal information with these third parties, but only to the extent necessary to perform these services.
  • Business transfers. If I sell or merge my business, I may disclose your information as part of that transaction, only to the extent permitted by law.
  • Compliance with laws. I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.
  •  The legal basis for our disclosure of your data is both your Consent to this Privacy Policy and our own right to protect and promote my legitimate business interests.
  • Advertisers:  I may use third party advertising companies to run and manage my ads, such as Facebook or Ravlery to produce ads that appears when you visit my Website or mobile app. These companies may use information about your visit to our website and other websites that are contained in web cookies (as described below) to offer you personalized advertisements about goods and services that might interest you. I cannot control the activities of, such other advertisers or web sites.  You should consult the respective Privacy Policies of these third-party advertisers for more detailed information on their practices as well as for instructions about how to opt-out of certain practices.
  • Other Third Parties:  We may share information with advertisers, our investors, or other third parties for the purpose of conducting general business analysis. If we do so, we will make reasonable efforts to inform you if required by law.
Tracking Technologies

Cookies, Log Files and Web Beacons: Like many other Web sites, we make use of log files. These files merely logs visitors to the site – usually a standard procedure for hosting companies and a part of hosting services’ analytics. The information inside the log files includes internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date/time stamp, referring/exit pages, and possibly the number of clicks. This information is used to analyze trends, administer the site, track user’s movement around the site, and gather demographic information. IP addresses and other such information are not linked to any information that is personally identifiable.

We also use cookies – small text files sent to us by your computer – and web beacons to store certain information. We may use cookies to authenticate your identity, to determine if you are logged onto our website, for personalization, for security, for targeted advertising, or for analysis of the performance of our website and services.  For example, cookies allow us to recommend blog posts to you based on what you have read on our site in the past. We use cookies that are not specific to your account but unique enough to allow us to analyze general trends and use, and to customize your interaction with our website.

Most browsers are set to accept cookies by default.  In addition, when you first encounter our website, you will be asked to “consent to cookies.” If you wish to disable cookies, you may do so through your individual browser options.  More detailed information about cookie management with specific web browsers can be found at the browsers’ respective websites. What Are Cookies?  By continuing to use our website and not disabling cookies on your browser, you are consenting to our use of cookies in accordance with the terms of this policy.

In addition, we may use third-party software to post advertisements on our website or mobile app to oversee marketing or email campaigns, or manage other company initiatives. These third party softwares may use cookies or similar tracking technology. We have no control over these third parties or their use of cookies.  For more information on opting out of interest-based ads, visit the Network Advertising Initiative Opt-Out Tool or Digital Advertising Alliance Opt-Out Tool.

Data Retention

I retain your personal information only for as long as necessary to provide you with my services and as described in my Privacy Policy. However, I may also be required to retain this information to comply with my legal and regulatory obligations, to resolve disputes, and to enforce my agreements. I generally keep your data for the following time period: 4 years.

Transfers of Personal Information Outside the EU

I may store and process your information through third-party hosting services in Canada and other jurisdictions. As a result, I may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction. If I am deemed to transfer information about you outside of the EU, I rely on Privacy Shield as the legal basis for the transfer, as Google Cloud is Privacy Shield certified.

Your Rights

If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. I describe these rights below:

  • Access. You may have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below.
  • Change, restrict, delete. You may also have rights to change, restrict my use of, or delete your personal information. Absent exceptional circumstances (like where I am required to store data for legal reasons) I will generally delete your personal information upon request.
  • Object. You can object to (i) my processing of some of your information based on my legitimate interests and (ii) receiving marketing messages from me after providing your express consent to receive them. In such cases, I will delete your personal information unless I have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
  • Complain. If you reside in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.
How to Contact Me

For purposes of EU data protection law, I, Sarah Devantier, am the data controller of your personal information. If you have any questions or concerns, you may contact me at Sarah@KnitaBitofWhimsy.com.