Last updated: 26 June 2026

This Privacy Policy explains how Patternata collects, uses, stores and protects your personal data
when you use our website, app, design studio, account features, subscriptions, digital products,
custom ordering services, communications and related services.

Patternata is operated by Creative Boutique Limited, a company registered in England and Wales.

Email: info@patternata.com
For the purposes of UK data protection law, including the UK General Data Protection Regulation
and the Data Protection Act 2018, Creative Boutique Limited is the data controller of the personal
data described in this Privacy Policy, unless stated otherwise. The ICO explains that whether an
organisation is a controller or processor affects its obligations, so this role should be made clear.
By using Patternata, you acknowledge that your personal data will be handled in accordance with this

Privacy Policy.
 

1. Personal data we collect
We may collect and use the following types of personal data. Account information. This may include:
name; email address; username; password or login credentials; account preferences; subscription
status; saved designs; account activity.

Order and transaction information
This may include: billing details; delivery address; order history; product choices; design
specifications; selected fabric, scarf size or print options; subscription plan; payment status; refund or
support history.

We do not store full payment card details ourselves. Payments are processed by third-party
payment providers.

Uploaded content and design information
When you use Patternata’s design tools, we may process: artwork uploaded by you; images, motifs or
design assets added by you; saved pattern compositions; design previews; exported files; custom
print files; file names; design settings such as scale, repeat type, layout, colours and dimensions.
Uploaded artwork may contain personal data if you include identifiable images, names, signatures,
logos or other personal information within your designs.

Communication information
If you contact us, we may collect: your name; email address; message content; support requests;
complaint details; feedback; responses to surveys or customer service communications.

Marketing information
If you subscribe to our mailing list or marketing communications, we may collect: name; email
address; marketing preferences; sign-up source; email engagement information, such as opens and
clicks where available.

Technical and usage information
When you use our website, app or digital services, we may collect: IP address; device type; browser
type; operating system; approximate location; pages visited; referral source; session information; log
data; interaction with tools and features; error reports; analytics data.

Cookie and tracking information
We may use cookies and similar technologies to operate the website, remember preferences, analyse
usage, improve performance and support marketing where permitted.

More information is set out in our Cookie Policy.

2. How we collect personal data
We may collect personal data when you: visit our website; create an account; use the Patternata
design studio; upload artwork; save or export designs; purchase a subscription; buy a digital product;
place a custom print order; sign up for emails; contact customer support; respond to surveys or
feedback requests; interact with our social media, adverts or campaigns; use cookies or similar
technologies on our website.
We may also receive data from third-party service providers, including payment processors, website
platforms, analytics providers, fulfilment partners, email marketing providers and customer support
tools.

3. How we use your personal data

We use personal data to provide and operate Patternata, including to: create and manage your
account; provide access to the design studio; save, preview, process and export designs; provide
motif libraries and digital products; manage subscriptions; process payments; fulfil orders; arrange
printing, production and delivery; provide customer support; respond to questions, complaints or
requests; send service messages; send marketing where permitted; improve our website, app, tools
and services; analyse usage and performance; prevent fraud, misuse and unauthorised access;
protect our rights, users, systems and intellectual property; comply with legal, tax, accounting and
regulatory obligations.

4. Lawful bases for processing
Under UK data protection law, we must have a lawful basis for using your personal data. The ICO
states that organisations must identify and explain their lawful basis in privacy information.  
We may rely on the following lawful bases.

Contract
We process personal data where necessary to provide services you request, including: creating and
managing your account; providing access to subscriptions; delivering digital products; processing
orders; arranging production and delivery; providing customer support; managing refunds,
cancellations or service issues.

Legitimate interests
We may process personal data where necessary for our legitimate business interests, provided those
interests are not overridden by your rights and freedoms.

This may include:
improving Patternata’s website, app and services; understanding how users interact with our design
tools; protecting our platform from misuse; preventing fraud; maintaining business records;
responding to general enquiries; protecting our intellectual property; managing customer
relationships.

Consent
We rely on consent where required, including for: optional marketing emails; certain non-essential
cookies or tracking technologies; any other activity where consent is legally required.
Where we rely on consent, you can withdraw it at any time. The ICO states that people must be told
they can withdraw consent, and that withdrawal should be as easy as giving consent.

Legal obligation
We may process personal data where necessary to comply with legal obligations, including: tax
records; accounting requirements; consumer law obligations; regulatory requests; fraud prevention
duties; responding to lawful requests from authorities.

5. Marketing communications
We may send marketing emails if you have signed up to receive them, purchased from us where soft
opt-in rules apply, or otherwise given consent where required.

Marketing emails may include: product updates; new motif collections; subscription offers; tutorials;
promotional codes; design inspiration; Patternata news.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in our emails
or contacting us at info@patternata.com

We may still send you service messages relating to your account, subscription, purchases, orders,
security, legal updates or important operational information.
 

6. Cookies and analytics
We use cookies and similar technologies to operate our website, improve performance, remember
preferences, understand usage and support marketing where permitted. Some cookies are essential
for the website to work. Others, such as analytics or marketing cookies, may require consent.
The ICO explains that organisations must tell users what cookies do and why, and that consent is
required for non-essential cookies.  Further details are provided in our Cookie Policy.

7. Uploaded artwork and saved designs
Patternata allows users to upload artwork, create designs, save projects and export files.
We process uploaded artwork and saved designs only as necessary to provide Patternata’s services,
including: displaying previews; saving your work; creating exports; preparing files for production;
fulfilling custom print orders; providing support; maintaining account functionality.

You are responsible for ensuring that uploaded artwork does not contain personal data you are not
authorised to use.

You should not upload images, names, signatures, portraits, logos, copyrighted works or other
identifiable content unless you have the right to use them.

8. Sharing personal data
We may share personal data with trusted third parties where necessary to operate Patternata.
This may include: website and app hosting providers; payment processors; subscription management
providers; email marketing platforms; analytics providers; customer support tools; printing and
fulfilment partners; delivery and courier providers; IT support providers; fraud prevention services;
professional advisers, including accountants, legal advisers and insurers; public authorities, regulators
or law enforcement where required by law.

We only share data where necessary and appropriate for the relevant purpose. Third-party service
providers must use personal data only as instructed by us or as required by law, where they act as
processors. Some third parties, such as payment providers or delivery companies, may act as
independent controllers for some processing activities.

9. International transfers
Some of our service providers may process personal data outside the United Kingdom. Where
personal data is transferred internationally, we will take steps designed to protect your personal data
in accordance with applicable data protection law. This may include using adequacy decisions,
standard contractual clauses or other appropriate safeguards where required.

10. How long we keep personal data
We keep personal data only for as long as necessary for the purposes described in this Privacy
Policy.

Retention periods may depend on: the type of data; the reason it was collected; account status;
subscription status; legal, tax and accounting requirements; dispute or complaint history; fraud
prevention needs; whether data is needed to provide ongoing services.

As a general guide: account data is kept while your account remains active; order and payment
records may be kept for tax, accounting and legal purposes; customer support records may be kept to
manage enquiries and disputes; marketing data is kept until you unsubscribe or withdraw consent;
saved designs may be retained while your account or relevant service remains active; technical logs
may be retained for security, analytics and troubleshooting for a limited period.
 

We may anonymise data so it no longer identifies you and use it for analytics, service improvement or
business reporting.

11. Data security
We take reasonable technical and organisational measures to protect personal data against
unauthorised access, loss, misuse, alteration or disclosure.

These measures may include: access controls; password protection; secure hosting; encryption
where appropriate; staff or supplier access restrictions; system monitoring; backup and recovery
processes; use of reputable service providers.

No online service can guarantee absolute security. You are responsible for keeping your login details
secure and notifying us if you suspect unauthorised use of your account.

12. Your rights
Under UK data protection law, you may have rights in relation to your personal data. These may
include: the right to be informed about how your data is used; the right of access to your personal
data; the right to correct inaccurate data; the right to request deletion of your data; the right to restrict
processing; the right to object to certain processing; the right to data portability in certain
circumstances; the right to withdraw consent where processing is based on consent; rights relating to
automated decision-making, where applicable.

The rights available may depend on the lawful basis used for processing. The ICO notes that rights
differ depending on lawful basis, so privacy information should accurately reflect this.  

To exercise your rights, contact us at:
Email: info@patternata.com
We may need to verify your identity before responding.

13. Right to object
You have the right to object to certain processing based on legitimate interests, including some
profiling or direct marketing activities.

You can object to direct marketing at any time by using the unsubscribe link in our emails or
contacting us. Where you object to other processing based on legitimate interests, we will consider
your request in accordance with applicable data protection law.

14. Children
Patternata is not intended for children under the age of 13. If we offer a version of Patternata intended
for children, such as a junior or family product, separate age-appropriate privacy information and
parental consent processes may apply. If you believe a child has provided personal data without
appropriate consent, please contact us.

15. Automated decision-making
We do not use your personal data to make decisions that produce legal or similarly significant effects
about you based solely on automated processing.

We may use automated tools for ordinary business purposes, such as fraud prevention, analytics,
design rendering, email segmentation, recommendation features or platform security.

16. Third-party links
Patternata may include links to third-party websites, platforms, social media pages, payment
providers, fulfilment partners or external services. We are not responsible for the privacy practices,
content or security of third-party websites or services.
 

You should read the privacy policies of any third-party services you use.
17. Complaints
If you have concerns about how we use your personal data, please contact us first so we can try to
resolve the issue. You also have the right to complain to the UK Information Commissioner’s Office.
The ICO is the UK regulator for data protection. Its website is: www.ico.org.uk

18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on our
website with a revised “last updated” date. If we make significant changes, we may notify users by
email, account notice or website notice where appropriate.

Continued use of Patternata after the updated Privacy Policy is posted means you acknowledge the
updated policy.