Privacy policy

We take only as much about you as it takes to make a parcel up and get it to you. We do not sell it, do not pass it to advertisers and do not collect anything "just in case".

The terms of the order itself — payment, delivery, returns — are set out separately, on the Terms & conditions page.

When you place an order you give us your name, a phone number, an email address and a delivery address — a Nova Poshta branch inside Ukraine, or a postal address abroad. Alongside it we keep the contents of the order, the amount and how it was paid.

If you write to us on Instagram, that conversation stays there, on Instagram, under that platform's own rules.

We never hold your card details. The transfer happens inside your own bank, and none of it reaches us.

To reach you about your order, to knit the piece, to make out the shipment and to hand the parcel to the carrier. That is the whole of it.

The site and its orders live in Firebase, a Google cloud service. The database is backed up daily, and those backups hold the same details.

Nova Poshta sees the address and the phone number, because a parcel cannot be made out without them. Order confirmations go out through an email service, so your address passes through that too.

The site uses Google Analytics, which counts anonymous visits and shows which pages are read. We do not match any of it against your order.

While we are making your order and sending it — and after the parcel has arrived. You may write to us a month later: where it went, what was in it, whether it can be exchanged, what you paid. Answering means still having that order, so the record stays with us for as long as the shop is running.

An order sometimes carries a short note of our own — "agreed a discount", "the yarn ran out, waiting on the supplier". Nobody but us sees it and it appears nowhere on the site, but it is still something written about you, so we would rather say that it exists.

If you would rather we did not keep the record, write to us on Instagram and say which order it concerns. We delete it — the contact details, the address, what was bought and the note along with them.

We keep backups for one reason — to put the site back if the database is lost — and we do not read them or use them for anything else. We will not promise that every copy is gone the same minute. What we can say is that restoring from a backup brings back the site — the pieces, the texts, the settings — and never brings back a deleted order.

You can ask to see what is recorded about you, to correct a mistake in a name or an address, or to have your data deleted. Write to us on Instagram and say which order it concerns. We answer requests like this within a few working days.

One caveat: details needed for the accounting record of an order already paid for may have to be kept even after a deletion request — see the section above.

If this policy changes, the updated version appears on this page.