Privacy policy

Privacy Policy

Last updated: November 6, 2026

INTRODUCTION

Welcome to KSTN.studio.

KSTN.studio is an online store offering digital PDF sewing patterns for clothing, bags, accessories, and home decor.

We respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, and share personal information when you visit our website, purchase our digital products, create a customer account, or contact us.

Our online store is powered by Shopify, which provides the e-commerce platform used to operate our website and process online orders.

We handle personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. DATA CONTROLLER AND CONTACT INFORMATION

The data controller responsible for processing personal information in connection with our online store operates under the name:

KSTN.studio

Address: Górska 9A, 32-700 Bochnia, Małopolskie, Poland

Email: kstnstudio@gmail.com

If you have questions about this Privacy Policy or the processing of your personal information, please contact us using the email address above.

2. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with our website, we may collect and process the following categories of personal information:

Contact Information: Name, email address, billing address, and other contact details provided during checkout or communication.
Order Information: Purchased sewing patterns, order numbers, transaction details, payment status, purchase history, and digital delivery information.
Payment Information: Payment-related information processed through Shopify and the relevant payment service providers.
Customer Account Information: Account details, preferences, and settings if you create a customer account.
Communications: Information included in messages, questions, or customer support requests.
Technical Information: IP address, browser type, device information, operating system, and other technical identifiers.
Website Usage Information: Information about how visitors interact with our website, including pages viewed, shopping cart activity, and website navigation.

We collect information directly from you, automatically through your use of our website, and, where applicable, from service providers involved in operating our store.

3. HOW WE USE YOUR PERSONAL INFORMATION

We process personal information for the following purposes:

Processing Orders and Delivering Digital Products

To process payments, confirm purchases, provide access to purchased PDF sewing patterns, and send order-related communications.

Customer Support

To respond to questions about purchases, sewing patterns, sizing, printing, downloads, and other customer inquiries.

Managing Customer Accounts

To create and maintain customer accounts, manage account preferences, and provide access to order information.

Website Operations and Security

To maintain website functionality, prevent fraudulent transactions, protect customer information, and ensure the security of our online store.

Legal and Accounting Obligations

To maintain records required by applicable tax, accounting, and consumer protection laws.

Marketing and Promotional Communications

Where permitted by applicable law, we may use personal information to send newsletters, product announcements, promotional offers, and other marketing communications.

Where consent is required, we will obtain it before sending marketing communications.

You can unsubscribe from promotional emails at any time using the unsubscribe link provided in those messages.

Website Analytics and Improvement

We may process website usage information to understand how visitors use our store, improve website functionality, and enhance the shopping experience, subject to applicable privacy and cookie consent requirements.

4. LEGAL BASES FOR PROCESSING PERSONAL INFORMATION

Where GDPR applies, we rely on the following legal bases:

Performance of a Contract – Article 6(1)(b) GDPR

Processing necessary to complete purchases, provide access to digital sewing patterns, manage orders, and deliver the services requested by customers.

Compliance with Legal Obligations – Article 6(1)(c) GDPR

Processing necessary to comply with applicable tax, accounting, consumer protection, and other legal obligations.

Legitimate Interests – Article 6(1)(f) GDPR

Processing necessary for our legitimate interests in maintaining website security, preventing fraud, responding to relevant business inquiries, improving service reliability, and establishing, exercising, or defending legal claims, provided these interests are not overridden by your rights and freedoms.

Consent – Article 6(1)(a) GDPR

Processing based on your consent, including marketing communications and non-essential cookies or similar technologies where consent is required.

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. DIGITAL PRODUCTS AND ORDER DELIVERY

KSTN.studio sells digital PDF sewing patterns only.

No physical products are shipped.

When you purchase a sewing pattern, we process the personal information necessary to confirm your order, process payment, provide digital download access, and assist with any download-related questions.

Your email address may be used to deliver order confirmations, download instructions, and other communications necessary to complete your purchase.

The personal information required for checkout and digital delivery is necessary to perform the purchase contract. Without this information, we may be unable to process your order.

6. PAYMENT PROCESSING

Payments are processed through Shopify and the payment methods made available during checkout.

Payment service providers may collect and process payment-related information in accordance with their own privacy and security policies.

We receive the transaction information necessary to confirm payments, maintain order records, and fulfill purchases.

We do not require customers to provide their complete payment card details directly by email or through our contact form.

7. SHARING PERSONAL INFORMATION

We may share personal information with third-party service providers where necessary to operate our online store and provide our services.

These may include:

Shopify, our e-commerce platform provider
Payment processing providers
Digital file delivery and hosting providers
Email and customer communication services
Website analytics and marketing service providers, where used
Accounting, technical support, and professional service providers
Public authorities where disclosure is required by applicable law

We may also disclose information where necessary to protect our legal rights, investigate fraud, or comply with lawful requests.

We do not share personal information with third parties for purposes unrelated to our business without an appropriate legal basis.

8. SHOPIFY AND THIRD-PARTY SERVICES

Our website is powered by Shopify.

Shopify collects and processes personal information to provide and improve the e-commerce services used by our store, including checkout functionality, transaction processing, website security, and customer account services.

Shopify may process information on our behalf and, for certain services, for its own purposes under its applicable privacy terms.

Where Shopify's enhanced services are enabled, Shopify may also use information relating to interactions with our store and other merchants to provide and improve those services. Shopify is responsible for the processing it performs for its own purposes.

For more information about Shopify's privacy practices, please visit:

https://www.shopify.com/legal/privacy/app-users

You can also learn more about certain privacy rights relating to Shopify through the Shopify Privacy Portal:

https://privacy.shopify.com/en

Our website and product descriptions may contain links to external websites, including YouTube sewing tutorials.

When you visit external websites, their respective privacy policies and terms may apply. We encourage you to review those policies.

9. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies to support website functionality, security, and the shopping experience.

These technologies may include:

Essential Cookies

Necessary for basic website functionality, shopping cart operations, checkout, security, and customer account services.

Analytics Cookies

Used, where enabled, to understand website usage and improve performance.

Marketing and Personalization Cookies

Used, where enabled, to support relevant promotional content, advertising, and personalized shopping experiences.

Where required by applicable law, non-essential cookies and similar technologies are used only after the appropriate consent has been obtained.

You can manage or withdraw your cookie preferences through the privacy controls available on our website, where provided, and through your browser settings.

Disabling certain cookies may affect some website features.

10. DATA RETENTION

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy.

The applicable retention period depends on the category of information and the purpose for which it is processed.

Order and Transaction Records: Retained for the period required by applicable tax, accounting, and other legal obligations.
Customer Account Information: Retained while an account remains active, unless longer retention is necessary for legal or contractual reasons.
Customer Support Communications: Retained for the period reasonably necessary to respond to inquiries, resolve issues, and establish or defend legal claims.
Marketing Information: Retained for the duration of the relevant marketing relationship or until consent is withdrawn, subject to records necessary to document consent or compliance.
Technical and Analytics Information: Retained according to the applicable settings, purposes, and retention periods of the services used.

Personal information may be retained longer where necessary to comply with legal obligations, resolve disputes, or establish, exercise, or defend legal claims.

When information is no longer required, it is deleted or anonymized in accordance with applicable requirements and the capabilities of the systems used.

11. INTERNATIONAL DATA TRANSFERS

Our service providers, including Shopify and certain third-party providers, may process or store personal information outside Poland or the European Economic Area.

Where personal information is transferred to countries outside the EEA or the United Kingdom, appropriate safeguards are applied where required by applicable law.

These may include adequacy decisions, Standard Contractual Clauses approved by the European Commission, or other legally recognized transfer mechanisms.

You may contact us for further information about the safeguards applicable to the processing of your personal information.

12. YOUR PRIVACY RIGHTS

Depending on your location and applicable data protection laws, you may have the right to:

Access: Request information about the personal data we process about you.
Rectification: Request correction of inaccurate or incomplete personal information.
Erasure: Request deletion of your personal information where legally applicable.
Restriction: Request that we restrict certain processing activities.
Data Portability: Request a copy of certain personal information in a structured, commonly used, machine-readable format, where applicable.
Objection: Object to processing based on legitimate interests or to processing for direct marketing.
Withdrawal of Consent: Withdraw previously granted consent at any time.
Complaint: Lodge a complaint with the appropriate data protection supervisory authority.

These rights may be subject to legal conditions and exceptions.

For example, certain order information may need to be retained to comply with tax or accounting obligations, even if you request deletion.

To exercise your rights, please contact:

kstnstudio@gmail.com

We may request additional information where necessary to verify your identity before responding to a request.

We will respond within the time limits required by applicable law.

13. CHILDREN'S PRIVACY

Our store is not intended for children who are not legally permitted to purchase products independently.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided personal information to us inappropriately, please contact us so we can review the situation and take appropriate action.

14. DATA SECURITY

We take reasonable technical and organizational measures to protect personal information from unauthorized access, accidental loss, alteration, misuse, or disclosure.

Our store operates through Shopify, which provides security measures designed to support safe online transactions and protect customer information.

However, no online system or electronic transmission method can guarantee absolute security.

We encourage customers to protect their account credentials and avoid sharing sensitive information through unsecured communication channels.

15. PRIVACY COMPLAINTS

If you have concerns about how we collect or process personal information, please contact us at:

kstnstudio@gmail.com

We will review your inquiry and respond in accordance with applicable data protection requirements.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

In Poland, the supervisory authority is:

President of the Personal Data Protection Office (UODO)

Website: https://uodo.gov.pl

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our services, data processing activities, technologies, or applicable legal requirements.

The latest version will always be available on our website, together with the date of the most recent update.

Where required by applicable law, we will provide additional notice of significant changes.