Skip to content
Sweety Dreamz

Privacy Policy

Last updated

This policy explains what personal data Sweety Dreamz collects, why, who we share it with and the choices you have. We collect as little as we can.

Who we are

Sweety Dreamz is the controller of your personal data. You can reach us at hello@sweetydreamz.com or through our contact form.

What we collect and why

  • Account: your email address, and your name and skill level if you add them. Used to sign you in (by email link or Google), keep your saved patterns and progress in sync, and show your orders and downloads. Legal basis: contract.
  • Orders: your name, email, the items you bought and the amount paid. Your card details and shipping address are collected by Stripe or PayPal, not by us. Used to deliver your order, send receipts and handle refunds. Legal basis: contract and legal obligations (accounting).
  • Newsletter and sign-up: your email and, if you give it, your phone number, first name, skill level and interests. Used to send you news, new patterns and offers by email and, where you gave your number, by text message. Legal basis: consent. Every email has an unsubscribe link, and you can ask us at any time to delete your number.
  • Reviews, replies and photos: the name you choose, your text, rating and photo. Published after moderation. Legal basis: consent; you can ask us to remove them at any time.
  • Contact messages: your name, email and message, used only to answer you. Legal basis: legitimate interest.
  • Analytics and marketing: pages viewed and approximate device information, only if you accept analytics or marketing cookies. Legal basis: consent. See the cookie policy.

Data kept in your browser

Your cart, saved patterns, row progress, row counters and US/UK preference are stored in your own browser (local storage). They are only sent to us if you sign in, so they can sync between your devices.

Who we share data with

We use trusted service providers who process data for us under data processing agreements:

  • Hosting and database (for example Vercel and our managed PostgreSQL provider)
  • Stripe and PayPal for payments
  • Resend for account and order emails, and Brevo for the newsletter and text messages
  • Cloudinary to store and resize community photos
  • Cloudflare Turnstile to block spam on the contact form
  • Google for "Continue with Google" sign-in and, with your consent, Google Analytics
  • With your consent only: Meta and Pinterest to measure our ads

We never sell your personal data. Some providers are outside your country; where needed, transfers use standard contractual clauses.

How long we keep it

  • Account data: until you delete your account (you can do this yourself under Account → Profile).
  • Order records: as long as the law requires for accounting (usually up to 10 years), even if you delete your account.
  • Newsletter: until you unsubscribe.
  • Contact messages: up to 2 years.

Your rights

You can ask to access, correct, delete or export your data, object to or restrict its use, and withdraw consent at any time (for cookies, use "Cookie settings" in the footer). Email us and we will reply within 30 days. You can also complain to your local data protection authority.

Children

Our site is for adults and teenagers. We do not knowingly collect data from children under 13 (or the minimum age in your country).

Changes

If we change this policy we will update the date at the top, and tell members by email if the change is significant.