Stitch Knot Mat LLC (“we”, “us”, or “our”) operates the website www.stitchknotmat.com (the “Site”). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of Personal Information we receive from users of the Site.

1. Data Controller

For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, the data controller is:

Stitch Knot Mat LLC 1100 Melville Street, Suite 300 Vancouver, BC V6E 4A6 Canada Email: knittedblanket@stitchknotmat.com Telephone: +1 (604) 265-9084

2. Information Collection and Use

While using our Site, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. This includes, but is not limited to:

• Name and contact information.
• Shipping and billing addresses.
• Email address and telephone number.
• Transaction history and preferences.

We process this data to fulfil contractual obligations (processing orders), pursue legitimate business interests (improving our service), or comply with legal requirements.

3. Payment Processing

To ensure the security of your financial data, we do not store credit card or other payment instrument details on our servers.

All payment processing is handled by Stripe. Your personal and payment information is transmitted directly to Stripe, whose use of your personal information is governed by their Privacy Policy. Stripe adheres to the standards set by PCI-DSS as managed by the PCI Security Standards Council.

4. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Transaction Data: Retained for a period of seven (7) years to comply with statutory tax and financial audit obligations in Canada and relevant international jurisdictions.
• Customer Communication: Retained for up to two (2) years following the last point of contact to ensure continuity of service.
• Account Information: Retained until such a time as the user requests deletion, provided there are no outstanding contractual or legal obligations requiring further retention.

5. Transfer of Data

Your information, including Personal Information, may be transferred to—and maintained on—computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. As a Canadian entity, we ensure that all transfers of European or UK data are conducted under appropriate safeguards, such as Standard Contractual Clauses (SCCs), to maintain a level of protection consistent with the GDPR.

6. Your Rights

Under European and British data protection laws, you possess specific rights regarding your data, including:

• The Right of Access: To request copies of your personal data.
• The Right to Rectification: To request that we correct any information you believe is inaccurate.
• The Right to Erasure: To request that we erase your personal data, under certain conditions.
• The Right to Restrict Processing: To object to or limit the processing of your data.

To exercise these rights, please contact us via the details provided in Section 1.

7. Security

The security of your Personal Information is important to us. We employ industry-standard physical, electronic, and administrative procedures to safeguard the information we collect. However, please be advised that no method of transmission over the Internet or method of electronic storage can be considered entirely impenetrable. We strive to use commercially acceptable means to protect your Personal Information.

8. Changes to This Privacy Policy

We reserve the right to update or change our Privacy Policy at any time. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.