Bonito Día Crochet

Legal

Privacy policy

We collect the minimum we need to deliver your patterns and help you. We never sell your data.

Last updated: 24 October 2026.

Who is responsible

[LEGAL NAME — fill in before applying to Paddle], trading as Bonito Día Crochet, [REGISTERED ADDRESS, Peru — fill in], is the controller of your personal data. Privacy questions: hello@bonitodiacrochet.com.

What we collect and why

Order details from Paddle (your email, country, the pattern bought and order number) to deliver your purchase and give you library access; legal basis: performing our contract with you.

Your email address and sign-in records to send magic sign-in links. We don't use passwords; legal basis: contract.

Download records (time, IP address, browser) and the email and order number stamped into each PDF, to protect our patterns from unauthorised sharing; legal basis: our legitimate interest.

Messages you send us, to answer them; legal basis: legitimate interest.

Site usage analytics (pages viewed, device type, approximate location), to improve the shop; legal basis: legitimate interest or consent where the law requires it.

Who we share it with

Paddle, as Merchant of Record, processes your payment, tax and invoicing data under its own privacy policy. Our service providers process data on our behalf: Vercel (hosting), Neon (database), Sanity (content and pattern files), Resend (email) and PostHog (analytics). We may also share data with professional advisers, or with authorities when the law requires it.

International transfers

Our providers may process data outside your country, including in the United States and the EU. Where required, transfers are covered by Standard Contractual Clauses or an adequacy decision.

How long we keep it

Order and library records: for as long as you keep access to your patterns, plus the period tax law requires. Download records: 24 months. Support emails: 24 months after the conversation ends. Analytics: up to 12 months.

Your rights

Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict its use, and withdraw consent. EU and UK residents can complain to their data protection authority. Write to hello@bonitodiacrochet.com; we reply within one month.

Security and cookies

We use encryption in transit, access controls and signed, expiring download links. We use an essential cookie to keep you signed in to your library and an analytics cookie on the shop. We don't use advertising cookies.