Knitferatu

This policy explains how I collect, use and share your personal information when you buy from Knitferatu on Etsy, message me or order a commission. It does not cover Etsy itself or other services you reach through Etsy: for those, see Etsy's Privacy Policy.

What I collect
To fulfil your order, Etsy gives me, with your authorisation, your name, email address, shipping address, the details of what you ordered and, if you provide it for delivery, your phone number. Without this information I cannot make and send your piece. I never see your card details. If you write to me, for example about a commission, I also receive what you choose to share, such as your motif, measurements or reference images.

Why I use it (legal bases)
- Contract: to knit, finish and ship your piece, send tracking, handle returns, exchanges and disputes, and answer your messages.
- Legal obligations: keeping sales records where tax rules require it, and answering lawful requests from authorities.
- Legitimate interests, where your rights do not override them: running and improving my shop, preventing fraud, and meeting my obligations under Etsy's Seller Policy and Terms of Use.
I do not send marketing messages unless you have explicitly asked for them. I do not sell your information or use it for profiling.

Who I share it with
- Etsy, as needed to serve you and to follow Etsy's policies.
- The knitting atelier in Barletta, Italy, that knits my pieces: only the details needed to make and send your order.
- Couriers and, for parcels leaving the EU, customs authorities: only what is needed to deliver your order.
- An accountant or public authorities, when the law requires it.
If my shop were ever sold or merged, your information could pass to the new owner, only as far as the law allows.

How long I keep it
Only as long as needed to complete your order and handle any return, exchange or dispute. In general I keep order information for 4 years after the order, and longer only if a legal obligation, such as tax rules, requires it.

Transfers outside the EU
I am based in the EU. Some services I use, such as email, may process information in the United States; these transfers rely on the safeguards the GDPR requires, such as the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses. If your order ships outside the EU, your delivery details travel with the parcel to the courier and customs of the destination country.

Your rights
If you live in the EU or in another country with similar laws, you have the right to access your information and receive a copy, to correct it, to have it deleted, to restrict how it is used and to receive it in a portable format. You can object to uses based on my legitimate interests, and withdraw any consent you have given at any time. Unless I have to keep your information for legal reasons, I delete it when you ask. You can also lodge a complaint with your local data protection authority.

How to contact me
For the purposes of EU data protection law, I, Marco Nicola Messina, am the controller of your personal information. You can reach me through Etsy Messages or at kvlt@knitferatu.com, and I will reply within one month. For information that Etsy holds about you, contact Etsy at etsy.com/help.