Privacy Policy

Last updated: June 18, 2026

This Privacy Policy describes how Pretty Things By Katja collects, uses, stores, and shares your personal information when you visit, use our services, purchase a digital product, subscribe to our communications, submit a withdrawal request, or otherwise communicate with us through prettythingsbykatja.com.

1. Who We Are

For the purposes of applicable data-protection laws, the data controller is:

Business/legal name: Obilje Možnosti 888, Katja Simončič s.p.
Trading name: Pretty Things By Katja
Business address: Zdolska cesta 14a, 8270 Krško
Country: Slovenia
Email: info.crochetpatterns@gmail.com

You may contact us using the email address above regarding this Privacy Policy or your personal-data rights.

2. Personal Information We Collect

Depending on how you interact with our store, we may collect the following categories of personal information:

Information you provide directly

This may include:

• your name;
• billing address;
• email address;
• telephone number, when provided;
• order number and purchase details;
• account login information, if customer accounts are enabled;
• correspondence and customer-support messages;
• newsletter preferences;
• reviews, survey responses, or form submissions;
• custom-pattern instructions, photographs, or other materials you voluntarily provide;
• information included in a cancellation, return, or withdrawal request.

Please do not send sensitive personal information unless it is genuinely necessary for the service you have requested.

Order and transaction information

When you place an order, we may process information about:

• the digital products purchased;
• the date and value of the transaction;
• payment status and payment method;
• discounts used;
• refund or withdrawal status;
• access to or delivery of digital files.

Payment-card details are normally processed directly by Shopify Payments, PayPal, or another payment provider. We generally do not receive or store your complete payment-card number.

Information collected automatically

When you visit our website, we or our service providers may automatically collect information such as:

• IP address;
• browser and device type;
• operating system;
• referring website;
• pages viewed and actions taken;
• approximate location derived from your IP address;
• cookie identifiers;
• shopping-cart activity;
• information about how you interact with our store and marketing communications.

We collect some of this information through cookies, pixels, analytics tools, and similar technologies.

Information received from third parties

We may receive information from service providers that help us operate our business, including Shopify, payment providers, email-marketing providers, digital-delivery services, analytics providers, advertising platforms, and apps installed on our Shopify store.

3. How We Use Personal Information

We may use personal information to:

• process orders and payments;
• deliver purchased digital crochet patterns and other downloadable files;
• provide customer support;
• respond to questions and resolve download problems;
• create custom or personalised digital products;
• maintain customer accounts;
• identify and prevent fraud, misuse, and security incidents;
• process withdrawal, cancellation, refund, and legal-rights requests;
• maintain records required for legal, accounting, tax, and dispute-resolution purposes;
• send order, account, service, and withdrawal-request communications;
• send marketing emails where you have consented or where otherwise permitted by law;
• personalise and improve our website, products, and customer experience;
• measure website traffic and marketing performance;
• protect our intellectual property and enforce our terms;
• comply with applicable laws and lawful requests from public authorities.

We will not use personal information for materially different purposes without providing appropriate notice and, where required, obtaining consent.

4. Legal Bases for Processing

Where the GDPR or similar laws apply, we process personal information under one or more of the following legal bases:

Performance of a contract

We process information where necessary to:

• accept and fulfil your order;
• deliver digital products;
• provide requested customer support;
• create a custom product;
• manage your account;
• handle contractual withdrawal or refund requests.

Compliance with legal obligations

We may process and retain information to comply with:

• consumer-protection obligations;
• tax and accounting requirements;
• fraud-prevention and payment rules;
• legal claims and official requests;
• data-protection requirements.

Legitimate interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights. These interests may include:

• protecting our store and customers;
• preventing fraud and unauthorised sharing of digital products;
• improving our services;
• maintaining business and transaction records;
• responding to customer enquiries;
• establishing, exercising, or defending legal claims;
• measuring the performance of our store.

Consent

We rely on your consent where required, including for:

• certain marketing emails;
• non-essential cookies and tracking technologies;
• certain personalised advertising activities;
• any other processing for which consent is legally required.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Digital Products

All products currently sold through our store are digital products. No physical product is shipped.

We may process order, download, access, and delivery information to supply your purchase, provide technical assistance, prevent misuse, and determine whether a withdrawal or refund request qualifies under applicable law.

6. Withdrawal Requests

When you submit an electronic withdrawal request, we may collect:

• your name;
• email address;
• order number or order reference;
• items included in the request;
• date and time of submission;
• withdrawal-request identification number;
• communications and decisions relating to the request.

We use this information to:

• verify the order;
• acknowledge receipt of the request;
• determine whether the right of withdrawal applies;
• process any eligible refund;
• prevent misuse;
• comply with consumer-protection and record-keeping obligations;
• establish, exercise, or defend legal claims.

We use a third-party Shopify application to provide and manage the electronic withdrawal function. That provider processes relevant information on our behalf under its applicable data-processing terms.

Submitting a withdrawal request does not itself guarantee that a refund will be approved.

7. Marketing Communications

Where you have subscribed to our newsletter or otherwise agreed to receive marketing, we may use your name, email address, interests, purchase history, and engagement information to send:

• new-pattern announcements;
• special offers;
• shop updates;
• free-pattern information;
• membership or promotional content.

You may unsubscribe at any time by using the unsubscribe link contained in our emails or by contacting us.

Unsubscribing from marketing does not prevent us from sending essential transactional or service messages concerning your orders, account, digital downloads, or legal requests.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

• operate essential store functions;
• remember your preferences and cart;
• maintain security;
• process checkout;
• measure website use;
• improve store performance;
• analyse marketing;
• provide advertising, where permitted.

Where required by law, non-essential cookies are used only after you provide consent through our cookie banner. You can change your choices through the cookie-preference controls available on our website.

Blocking some cookies may affect the functionality of the store.

For more information, please see our Cookie Policy or the cookie-preference tool displayed on our website.

9. How We Share Personal Information

We do not sell personal information for money.

We may share personal information with service providers where necessary to operate our store, including:

• Shopify, which hosts and operates our online store;
• payment processors and fraud-prevention providers;
• digital-product delivery providers;
• email and newsletter providers;
• customer-support and communication services;
• website analytics providers;
• advertising and social-media platforms, where permitted;
• withdrawal-form and consumer-compliance app providers;
• professional advisers, including accountants, legal advisers, and tax professionals;
• public authorities where disclosure is required by law.

These recipients may process information only as necessary to provide their services, comply with law, protect legal rights, or perform another disclosed purpose.

Shopify requires merchants to inform customers that the store is hosted by Shopify and that Shopify processes customer data in connection with its services.

10. Shopify

Our store is hosted by Shopify.

Shopify collects and processes personal information to provide its ecommerce platform, payments, security, analytics, and related services. Depending on the services and settings enabled for our store, Shopify may also process information for additional or enhanced services.

Shopify’s own privacy documentation explains how Shopify processes personal information in its role as a platform provider.

11. International Data Transfers

Some of our service providers may process information outside Slovenia or the European Economic Area, including in countries whose data-protection laws may differ from those in your country.

Where required, international transfers are protected through lawful safeguards such as:

• European Commission adequacy decisions;
• Standard Contractual Clauses;
• other recognised contractual or legal safeguards.

You may contact us for additional information about the safeguards relevant to your personal information. GDPR privacy notices should disclose applicable international transfers and the safeguards relied upon.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to:

• fulfil orders and provide customer support;
• maintain transaction and download records;
• comply with tax, accounting, consumer-protection, and legal obligations;
• manage withdrawal and refund requests;
• prevent fraud;
• resolve disputes;
• enforce agreements;
• establish, exercise, or defend legal claims.

Retention periods vary according to the type of information and the applicable legal requirements.

For example:

• order and financial records may be retained for the period required by Slovenian tax and accounting laws;
• customer-support and withdrawal records may be retained while a request is active and for a reasonable period afterward for legal and evidential purposes;
• marketing information is retained until you unsubscribe, withdraw consent, or the information is no longer needed;
• cookie and analytics information is retained according to the settings and retention periods of the relevant service.

When information is no longer required, we will delete, anonymise, or securely dispose of it, unless continued retention is legally permitted or required.

13. Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, and destruction.

However, no internet transmission or storage system can be guaranteed to be completely secure. You are responsible for keeping any account password confidential and for notifying us if you suspect unauthorised account activity.

14. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• request access to your personal information;
• request correction of inaccurate or incomplete information;
• request deletion of your information;
• request restriction of processing;
• object to certain processing;
• receive certain information in a portable format;
• withdraw consent at any time;
• object to direct marketing;
• request information about recipients and international-transfer safeguards;
• lodge a complaint with a competent data-protection authority.

These rights are not absolute and may be subject to legal exceptions. For example, we may retain certain order information where necessary to comply with tax, accounting, legal, or fraud-prevention obligations.

We may ask for information necessary to verify your identity before responding to a request.

To exercise your rights, contact:

info.crochetpatterns@gmail.com

You also have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia or another competent supervisory authority in your country.

15. United States Privacy Rights

Residents of certain US states may have additional rights, including rights to access, correct, delete, or obtain a copy of personal information and, where applicable, opt out of certain targeted advertising, sharing, or sale activities.

We do not sell personal information for monetary payment. However, some use of advertising cookies or platform services may be treated as “sharing,” “sale,” or targeted advertising under certain US state privacy laws.

Where legally required, you may exercise an opt-out through our cookie settings or data-sharing opt-out page:

https://pretty-things-by-katja.myshopify.com/pages/ccpa-opt-out

We will not discriminate against you for exercising an applicable privacy right.

16. Children’s Privacy

Our store and services are intended for adults and are not directed to children.

We do not knowingly collect personal information directly from children below the age at which they may independently consent to data processing in their jurisdiction. If you believe a child has provided personal information to us without appropriate authorisation, please contact us so that we can review and, where required, delete it.

17. Third-Party Websites

Our website may contain links to third-party websites, platforms, or services. We are not responsible for their privacy practices. We encourage you to review the privacy policy of any third-party service you visit.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal obligations, or business practices.

The updated version will be posted on this page with a revised “Last updated” date. Where required, we will provide additional notice of material changes.

19. Contact Us

For questions, requests, or concerns about this Privacy Policy or our handling of personal information, contact:

Pretty Things By Katja
Legal business name: Obilje Možnosti 888, Katja Simončič s.p.
Address: Zdolska cesta 14a, 8270 Krško
Email: info.crochetpatterns@gmail.com
Website: prettythingsbykatja.com