1. Who We Are & Data Controller

This Privacy Policy applies to PAKNITS (“we”, “us”, “our”), the data controller responsible for your personal information collected through this website.

For any privacy-related questions or to exercise your rights, contact us at support@paknits.com.

2. Data We Collect

We collect only what is necessary to operate our business and serve you:

• Identity & contact data: Name, email address, phone number, and shipping address — collected when you place an order or submit a contact message.
• Order data: Products ordered, quantities, order value, order status, and delivery information.
• Payment data: Payment card details are collected and processed exclusively by Paddle (our Merchant of Record). We never receive or store your full card number, CVV, or raw payment credentials.
• Contact & enquiry data: Your name, email, and message when you submit our contact form.
• Technical data: IP address, browser type and version, device type, pages visited, and referring URLs — collected automatically via server logs.
• Session & preference data: Shopping cart contents, selected country/currency, and session state stored in encrypted server-side session cookies.

3. How We Use Your Data

We use your personal information to:

• Process, fulfil, and ship your orders and send order confirmations and delivery updates.
• Respond to contact form messages and customer service enquiries.
• Detect and prevent fraud and unauthorised access.
• Comply with legal and regulatory obligations (e.g. tax records, consumer law).
• Improve our website and product offering based on aggregated, anonymised usage data.
• Send marketing emails about new collections or offers — only with your explicit consent. You may unsubscribe at any time.

Legal bases: Contract performance — to fulfil your order. Legal obligation — tax, accounting, and consumer law compliance. Legitimate interests — fraud prevention, security, and site improvement. Consent — marketing communications only.

4. Cookies

We use strictly necessary cookies to:

• Keep your shopping cart and session active.
• Remember your preferences (e.g. selected country/currency).

We do not use third-party advertising, tracking, or analytics cookies. Disabling cookies via your browser may break the cart and checkout functionality.

5. Paddle — Payment Processing & Independent Data Controller

All card payments are processed by Paddle (Paddle.com Market Ltd., registered in England & Wales No. 08172659; Paddle Payments Ltd.; or Paddle.com Inc. — depending on your location), who act as the Merchant of Record for all transactions. Paddle is an independent data controller for the personal data they collect in connection with payment processing.

When you complete a purchase, your payment information is transmitted directly to Paddle's secure servers. PAKNITS does not receive or store your card details at any point.

Paddle's handling of your data is governed by Paddle's Privacy Policy. For questions about a charge from Paddle, visit paddle.com/about/why-has-paddle-charged-me.

6. Third Parties We Share Data With

We do not sell your personal data. We share it only with these categories of trusted third parties, strictly for the stated purposes:

• Paddle — payment processing and Merchant of Record services.
• Shipping & logistics providers — your name and delivery address are shared with the courier responsible for your delivery.
• Cloud infrastructure (Google Firebase / Google Cloud) — our website, database, and file storage run on Google's infrastructure. Data is stored in compliance with GDPR via Google's data processing agreements.
• Law enforcement or regulators — only where required by law, court order, or to protect rights and safety.

All third-party processors are bound by data processing agreements and required to handle your data in accordance with applicable privacy laws.

7. Data Retention

• Order data is retained for a minimum of 7 years to comply with tax and accounting obligations.
• Contact form messages are retained for up to 3 years after last contact.
• Technical/log data is retained for up to 12 months.
• Marketing consent records are kept until you withdraw consent.

After these periods, data is securely deleted or anonymised.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure — including encrypted HTTPS connections, access controls, and secure cloud infrastructure.

No online system is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.

9. Your Rights

Under GDPR and applicable data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure (“right to be forgotten”) — ask us to delete your data, subject to legal retention requirements.
• Restriction — ask us to limit how we process your data in certain circumstances.
• Portability — receive your data in a structured, commonly used, machine-readable format.
• Object — object to processing based on legitimate interests, or to direct marketing at any time.
• Withdraw consent — withdraw marketing consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at support@paknits.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority (e.g. the ICO in the UK, or your national supervisory authority in the EU).

10. Children

This website is not directed at anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently done so, please contact us and we will delete it promptly.

11. International Transfers

Your data may be processed by our service providers (including Paddle and Google Firebase) in countries outside your own. Where data is transferred outside the UK or European Economic Area, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses approved by the relevant authority — to maintain equivalent levels of protection.

12. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date. We recommend reviewing this page periodically. Continued use of the site after changes constitutes acceptance of the updated policy.

13. Contact

PAKNITS
Email: support@paknits.com