Privacy Policy

Last updated: August 4th, 2026

The Grumpy Stitcher respects your privacy. This Privacy Policy explains what information we collect, why we collect it, how it is used and shared, and the choices you may have regarding your information.

This policy applies to visitors, customers, and account holders who use thegrumpystitcher.com.

Throughout this policy, “The Grumpy Stitcher,” “we,” “us,” and “our” refer to The Grumpy Stitcher. “You” and “your” refer to visitors, customers, and account holders.

1. Who We Are

Business: The Grumpy Stitcher
Website: thegrumpystitcher.com
Privacy contact: kat@thegrumpystitcher.com
Location: Florida, United States

We sell downloadable cross stitch patterns, assembled-to-order cross stitch kits, and related products.

2. Information We Collect

The information we collect depends on how you interact with the website.

Information you provide directly

You may provide information such as:

• Name
• Email address
• Telephone number
• Billing address
• Shipping address
• Account username and password
• Order and purchase information
• Messages sent through contact forms
• Product questions
• Reviews and ratings
• Finished project photographs
• Refund, return, and customer support information
• Any other information you choose to submit
  
  

You are not required to create an account merely to browse the website. An account may be required or encouraged when purchasing so that your order history and pattern downloads can be stored in your Downloads/Pattern Library.

Information collected automatically

When you visit or use the website, we and our service providers may automatically collect:

• Internet Protocol address
• Browser type and version
• Device type
• Operating system
• Referring website
• Pages and products viewed
• Approximate geographic location
• Date and time of access
• Shopping cart activity
• Login and account activity
• Cookie and similar technology identifiers
• Website performance and error information
  
  

We may use this information to operate the site, understand how visitors use it, remember cart contents, calculate taxes and shipping, prevent fraud, secure accounts, and improve the store.

Information collected during checkout

When you place an order, we may collect:

• Name
• Email address
• Telephone number
• Billing address
• Shipping address, when physical delivery is required
• Products ordered
• Order value
• Coupon or discount information
• Selected shipping method
• Selected payment method
• Tax information
• Transaction and payment status
• Account information, when an account is created
  
  

WooCommerce allows us to configure account creation, privacy notices, and retention of customer and order information.

3. How We Use Your Information

We use personal information when reasonably necessary to:

• Operate and maintain the website
• Create and manage customer accounts
• Process and fulfill orders
• Deliver digital pattern files
• Assemble and ship physical kits
• Process payments
• Calculate and collect applicable taxes
• Provide tracking information
• Respond to questions and support requests
• Process returns, refunds, replacements, and complaints
• Display approved reviews, ratings, questions, and finished-project photographs
• Detect fraud, spam, abuse, and security threats
• Maintain business, tax, transaction, and accounting records
• Improve our products, services, and website
• Measure site traffic and shopping activity
• Comply with legal obligations
• Establish, exercise, or defend legal claims
  
  

We do not currently operate an email newsletter or use customer email addresses for promotional mailing lists.

Transactional emails, including account, password, order, payment, download, refund, and shipping messages, are sent because they are necessary to operate your account or complete your purchase.

4. Legal Bases for Processing

Where laws such as the United Kingdom or European Union General Data Protection Regulation apply, we may process personal information on one or more of the following bases:

Contract

Processing is necessary to provide requested products or services, fulfill an order, deliver downloads, ship kits, manage an account, or respond to a request.

Legal obligation

Processing is necessary to comply with tax, accounting, consumer protection, fraud prevention, record-keeping, or other legal requirements.

Legitimate interests

Processing is reasonably necessary for legitimate business purposes, such as securing the website, preventing fraud, providing support, maintaining records, and improving the store, provided those interests are not overridden by your rights.

Consent

We may rely on your consent for certain cookies, analytics, advertising technologies, uploaded content, or other processing where consent is required. You may withdraw consent where applicable, although withdrawal does not affect processing that occurred before consent was withdrawn.

5. Customer Accounts and Pattern Libraries

When you create an account, we store information such as your:

• Name
• Email address
• Telephone number, when provided
• Billing and shipping addresses
• Order history
• Download entitlements
• Account preferences
  
  

This information helps populate future checkouts, display previous orders, and maintain access to purchased digital patterns.

Accounts and associated download access may remain available while the account is active. You may contact us to request account deletion. We may retain certain transaction information when required for taxes, accounting, fraud prevention, disputes, or other legal obligations.

You are responsible for protecting your login credentials and notifying us if you believe your account has been accessed without authorization.

6. Digital Downloads

When you purchase a digital pattern, we may record:

• The file or product purchased
• When access was granted
• Download permissions
• Download attempts or activity
• The account associated with the purchase
• Relevant IP or security information
  
  

This helps us provide and secure download access, troubleshoot delivery problems, prevent abuse, and maintain your Downloads/Pattern Library.

7. Reviews, Questions, and Uploaded Photographs

Customers may be able to submit:

• Product reviews
• Star ratings
• Product questions
• Answers or comments
• Finished project photographs
  
  

When you submit this content, we may collect the information entered in the form, along with technical information such as your IP address and browser information for moderation, security, and spam prevention.

Approved reviews, questions, display names, ratings, and photographs may be publicly visible on the website.

Please do not include private information in public submissions, such as:

• Order numbers
• Home addresses
• Telephone numbers
• Payment information
• Account passwords
• Information about another person
  
  

Uploaded photographs may contain embedded metadata, including location data. You should remove location information such as EXIF GPS data before uploading an image. Depending on how the website processes the image, visitors may be able to download or inspect publicly displayed files.

By uploading a photograph or other content, you confirm that you have the right to submit it. Use of submitted content is also governed by our Terms and Conditions.

8. Contact Forms

When you contact us through WPForms, we may collect:

• Your name
• Email address
• Order number, when supplied
• Subject and message
• Uploaded files, when permitted
• Technical and anti-spam information
  
  

We use this information to answer your message, provide customer support, investigate order issues, and maintain an appropriate record of the request.

Please do not send passwords or complete payment-card numbers through a contact form.

9. Payments

We accept payments through WooPayments and PayPal.

Depending on availability and customer eligibility, WooPayments may support payment methods such as:

• Credit and debit cards
• Apple Pay
• Google Pay
• Amazon Pay
• Cash App Pay
• Affirm
• Afterpay
• Klarna
  
  

Payment providers may receive information needed to process, authorize, secure, and support the transaction, such as:

• Name
• Email address
• Billing address
• Shipping address
• IP address
• Device and browser information
• Purchase amount
• Currency
• Order contents
• Transaction identifiers
  
  

WooPayments is built in partnership with Stripe and uses Stripe services for payment processing and fraud evaluation.

PayPal processes information according to PayPal’s own terms and privacy practices.

We generally do not receive or store your complete credit or debit card number. Official WooCommerce payment gateways may retain limited payment-token information, such as the last four digits of a card, when needed for transaction records or saved payment methods.

Available payment methods may be provided directly by the applicable payment provider and may require that provider to collect additional information or perform eligibility, identity, credit, or fraud checks.

10. Automated Taxes

We use WooCommerce’s automated tax services to help calculate applicable taxes.

To calculate or support tax obligations, information such as your:

• Billing address
• Shipping address
• IP address
• Products purchased
• Order value
• Tax location
• Transaction information

may be processed by WooCommerce, Automattic, or their applicable service providers.

Tax and transaction information may be retained as necessary to satisfy accounting, audit, and legal obligations.

11. Shipping and Order Fulfillment

Physical kit orders may be fulfilled using Pirate Ship and a selected carrier, generally USPS or UPS.

To purchase postage, create labels, provide tracking, and deliver your order, we may share:

• Recipient name
• Shipping address
• Email address or telephone number when required
• Package weight and dimensions
• Order or reference number
• Tracking information
• Customs or routing information when applicable to territories or military addresses
  
  

Shipping services necessarily receive customer and shipment information needed to calculate rates, fulfill orders, and track packages.

Pirate Ship and the selected carrier process information under their own terms and privacy policies.

12. Transactional Email

We use Brevo to deliver transactional email.

Brevo may process information needed to send and monitor messages such as:

• Your name
• Email address
• Email content
• Order or account information included in the message
• Delivery status
• Bounce information
• Technical message logs
• IP or device information associated with email interaction, where enabled
  
  

Transactional messages may include:

• Account creation and password setup
• Password resets
• Order confirmations
• Payment updates
• Download links
• Refund notices
• Customer notes
• Shipping and tracking information
  
  

We do not currently use Brevo to send a marketing newsletter.

13. Analytics

We use Google Analytics to understand how visitors use the website and to improve site performance and shopping experiences.

Google Analytics may collect information such as:

• Pages viewed
• Products viewed
• Approximate location
• Browser and device information
• Referring pages
• Time spent on the website
• Interactions with pages and store features
• Purchases and conversion activity
• Cookie or device identifiers
  
  

Google Analytics uses first-party cookies, including identifiers used to distinguish users and sessions.

We do not intentionally send complete payment card numbers or account passwords to Google Analytics.

You may be able to limit analytics cookies through our cookie controls, once available, or through browser settings and tools provided by Google.

Google Search Console may also be used to understand how the website appears in search results. Search Console generally provides website-performance and search-query reporting rather than identifying individual customers to us.

14. Pinterest

We use Pinterest for WooCommerce to connect our store with Pinterest, publish or promote product content, and measure activity associated with Pinterest.

The integration may use the Pinterest Tag, cookies, identifiers, and Pinterest’s Conversions API. Pinterest for WooCommerce supports the Conversions API for measuring Pinterest-related conversion activity.

Depending on our settings and your interaction with the website, information shared with or collected by Pinterest may include:

• Pages and products viewed
• Cart and checkout activity
• Purchase events
• Order value and currency
• Browser and device information
• IP address
• Cookie or advertising identifiers
• Hashed contact information, where configured and permitted
  
  

Pinterest may use information under its own privacy policy, including for measurement, personalization, and advertising.

Under some privacy laws, certain advertising or cross-context tracking activities may be described as “sharing” personal information even when no money is exchanged. We do not sell customer information for money.

Where required, Pinterest and similar nonessential tracking technologies should be controlled through an appropriate consent or opt-out mechanism.

15. Cookies and Similar Technologies

Cookies are small files stored on your device. We use cookies and similar technologies to operate the store and, where enabled, analyze website activity.

Essential cookies

Essential cookies may be used to:

• Remember cart contents
• Operate checkout
• Maintain login sessions
• Recognize account holders
• Remember display or account settings
• Secure forms and transactions
• Prevent fraud and abuse
• Remember privacy choices
  
  

Disabling essential cookies may prevent portions of the store from working correctly.

Analytics and measurement cookies

Google Analytics and other measurement services may use cookies to understand visits, sessions, page views, purchases, and website performance.

Advertising and social media cookies

Pinterest may use cookies, tags, and similar technologies to measure activity and connect website interactions with Pinterest services.

Managing cookies

You can control cookies through browser settings. Blocking cookies may affect the functionality of the website, including login, cart, checkout, and account features.

Where legally required, we will provide a cookie banner or consent tool allowing visitors to manage nonessential cookies. Your selection may be stored in a cookie so the website can remember it.

16. Spam Prevention and Website Security

We use Cloudflare Turnstile to help distinguish legitimate visitors from automated traffic and to protect forms, account features, and checkout processes.

Turnstile may process technical information needed to assess whether a request is legitimate. This may include:

• IP address
• Browser and device characteristics
• Website interaction information
• Security tokens
• Challenge results
  
  

We also use Hostinger and other website infrastructure providers to host, back up, monitor, and secure the website.

Hosting and security providers may process:

• IP addresses
• Server logs
• Access times
• Browser and device information
• Login attempts
• Error logs
• Backup copies
• Malware or security-event information
  
  

We use reasonable administrative and technical safeguards, but no website, storage method, or internet transmission can be guaranteed completely secure.

17. Hosting

The website is hosted by Hostinger.

Hostinger may store or process website information, databases, account records, order data, uploaded content, server logs, backups, and other information necessary to provide hosting and security services.

The location and handling of that data are governed by Hostinger’s own service terms and privacy practices.

18. Who Has Access to Your Information

Authorized administrators and shop managers may access information reasonably necessary to operate the store.

This may include:

• Orders and products purchased
• Customer contact information
• Billing and shipping details
• Download permissions
• Account information
• Reviews and questions
• Support correspondence
• Refund and return information
  
  

Access is used to fulfill orders, provide downloads, assemble and ship kits, process refunds, respond to customers, secure the site, and maintain business records.

We limit access to those who reasonably require the information for these purposes.

19. When We Share Information

We may share information with service providers that help us operate the store, including:

• WooCommerce and Automattic
• WooPayments and Stripe
• PayPal
• Payment-method providers
• Brevo
• Google Analytics
• Pinterest
• WPForms
• Cloudflare
• Hostinger
• Pirate Ship
• USPS
• UPS
• Tax-calculation providers
• Website maintenance, security, or professional-service providers
  
  

We may also disclose information:

• To comply with law, regulation, subpoena, court order, or lawful government request
• To investigate fraud, security incidents, or policy violations
• To enforce our Terms and Conditions
• To protect our rights, customers, website, or the public
• In connection with a sale, merger, restructuring, or transfer of all or part of the business
• With your consent or at your direction
  
  

Service providers may access information only as needed to perform services for us, subject to their own legal obligations and agreements.

20. Do We Sell Personal Information?

We do not sell or rent customer names, email addresses, mailing addresses, order histories, or other personal information for money.

However, analytics and advertising technologies, particularly Pinterest tracking, may be considered a “sale,” “sharing,” or use for targeted advertising under certain privacy laws, even when no money is exchanged.

Eligible visitors may have the right to opt out of such processing. You may contact us at kat@thegrumpystitcher.com regarding an opt-out request.

We recommend implementing a cookie and privacy preference tool so eligible users can control these technologies directly.

21. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this policy, including legal, tax, accounting, security, customer-service, and operational requirements.

Order records

We generally retain completed-order and transaction information for seven years for tax, accounting, audit, dispute, and business-record purposes.

This may include:

• Name
• Email address
• Billing address
• Shipping address
• Products purchased
• Payment and refund status
• Tax information
• Shipping and tracking records
• Related communications
  
  

WooCommerce advises stores to establish retention settings and explain their chosen retention periods in their privacy policies.

Customer accounts

Account information and download permissions may be retained while the account remains active so customers can access previous orders and purchased patterns.

When an account is deleted, some order or transaction records may remain when required for legal, accounting, tax, fraud-prevention, or dispute purposes.

Contact messages

Support and contact form messages may be retained for as long as reasonably necessary to address the request, document a transaction, resolve disputes, prevent abuse, or meet legal obligations.

Reviews, questions, and uploaded content

Published reviews, questions, ratings, and project photographs may remain visible until removed by us or pursuant to an approved request, subject to legal and operational requirements.

Security logs

Security, fraud prevention, and server logs may be retained for periods determined by us or our service providers based on security and operational needs.

22. Your Privacy Rights

Depending on where you live, you may have rights concerning your personal information, including the right to:

• Request access to personal information we hold about you
• Receive a copy of certain information
• Correct inaccurate or incomplete information
• Request deletion of eligible information
• Restrict or object to certain processing
• Withdraw consent
• Request portability of certain information
• Opt out of certain targeted advertising, selling, or sharing
• Appeal the denial of a privacy request where applicable
• Lodge a complaint with an appropriate privacy regulator
  
  

These rights are not absolute. We may retain or continue processing information when legally permitted or required, including for:

• Tax and accounting records
• Fraud prevention
• Security
• Contractual obligations
• Legal claims
• Consumer disputes
• Compliance with law
  
  

To make a privacy request, email kat@thegrumpystitcher.com.

Please describe your request and provide enough information for us to identify the relevant account or transaction. We may need to verify your identity before completing the request.

We will not discriminate against you for exercising an applicable privacy right.

23. International Customers

The Grumpy Stitcher is based in the United States.

When customers outside the United States purchase digital products or otherwise use the website, their information may be transferred to and processed in the United States and other countries where our service providers operate.

Those countries may have privacy laws different from those in your location. Where required, service providers may use approved safeguards for international transfers.

Customers in the European Economic Area, United Kingdom, Switzerland, Canada, and other jurisdictions may have additional rights under applicable law.

24. Children’s Privacy

The website is not intended for children under 13, and we do not knowingly collect personal information directly from children under 13.

Customers must be legally capable of entering into a purchase agreement or use the website with the involvement and permission of a parent or legal guardian.

If you believe a child under 13 has provided personal information, contact us at kat@thegrumpystitcher.com so we can review and, where appropriate, delete it.

25. Third-Party Websites and Embedded Content

The website may contain links to or embedded content from third-party websites, such as:

• Videos
• Social-media content
• Images
• Payment interfaces
• Articles
• Product or service integrations
  
  

Embedded content may behave as though you visited the third-party website directly. Those services may collect information, set cookies, or monitor your interaction under their own privacy policies.

We are not responsible for the privacy practices of independent third parties.

26. Automated Decision-Making and Fraud Screening

Payment and security providers may use automated tools to detect fraud, assess transaction risk, verify payment information, or determine eligibility for certain payment methods.

For example, WooPayments uses Stripe’s fraud-prevention systems to evaluate transactions.

These checks may result in a transaction being declined, delayed, or flagged for review.

Buy-now-pay-later providers may perform separate eligibility, identity, or credit-related assessments governed by their own policies.

27. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Website features
• Products and services
• Plugins and service providers
• Business practices
• Legal obligations
  
  

The revised policy will be posted on this page with a new “Last updated” date.

Material changes may also be communicated through the website or another appropriate method.

28. Contact Us

Questions, concerns, and privacy requests may be sent to:

The Grumpy Stitcher
Email: kat@thegrumpystitcher.com
Website: thegrumpystitcher.com