Privacy Policy
Effective Date: 10 Jan 2026
This privacy notice explains how Stitch Gothica (operated by Maxine Kirsty Sapsford, also known as ‘Scarlett’) collects, uses, and protects your data.
1. Contact Details
Website: https://stitchgothica.com
Email: Click here to email me (StitchGothica[at]gmail.com)
Address: 18 Tilton Rd, Borough Green, Kent, UK TN15 8RS
2. What Information We Collect & Why
We collect information to provide embroidery patterns, tutorials, and courses, and to manage our community and marketing:
- Contact & Account Data: Names, addresses, email details, and purchase history.
- Financial Data: Securely processed payment and transaction information (via Stripe/SendOwl).
- Marketing & Ad Performance: IP addresses, user journeys, and Unique Identifiers (specifically the Facebook Click ID / fbclid) captured via custom scripts and stored in Kajabi to measure our advertising effectiveness.
- User-Generated Content & Media: We collect and use photographs or video recordings of your embroidery work that you share with us. This is used for marketing, tutorials, testimonials, and website content (based on your consent or submission).
- Loyalty & Research: Information relating to loyalty programmes, customer compliments/complaints, and archiving for research purposes.
3. Lawful Bases for Processing
Under the UK GDPR, we rely on the following bases:
- Consent: You have given us clear permission to process your data (e.g., signing up for a free pattern or sharing a photo of your work). You can withdraw consent at any time.
- Contract: To deliver the products or services you have purchased.
- Legitimate Interests: To improve our patterns and tutorials based on customer feedback and archival research.
4. Your Data Protection Rights
You have the right to access, correct, or delete your personal information. You may also object to our use of your photos in marketing at any time. To exercise these rights, please contact us via the details in Section 1.
5. Data Processors & Sharing
We share data with trusted processors to run our business and track ad performance:
- Kajabi: Our CRM and email provider where your contact data and fbclid are securely stored.
- Meta (Facebook): We use the Meta Pixel and Conversions API (CAPI) to track ad results. This involves sharing hashed contact info and the fbclid directly from our server to Meta for accurate attribution.
- Stripe, SendOwl & Zapier: For secure payment processing, digital product delivery, and data automation.
- ManyChat: To process requests for information and free products via Instagram.
- Google (Analytics/Drive): For website traffic analysis and secure record storage.
6. Complaints
If you have concerns about our use of your data, please contact us. You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.
Privacy Policy
This privacy notice tells you what to expect us to do with your personal information.
Contact details
Stitch Gothica is operated by Maxine Kirsty Sapsford, I provide embroidery patterns, courses, and tutorials.
Who I Am
My website address is: https://stitchgothica.com. My name is Maxine Kirsty Sapsford but I’m known by the nickname ‘Scarlett’.
My email is StitchGothica’at’gmail.com
My Address is: 18 Tilton rd, borough green, Kent, UK TN15 8RS
We collect or use the following information to provide services and goods, including delivery:
- Names and contact details
- Purchase or account history
- Payment details (including card or bank information for transfers and direct debits)
- Account information
- Information relating to loyalty programmes
- Website user information (including user journeys and cookie tracking)
- Photographs or video recordings
- Information relating to compliments or complaints
We collect or use the following information for the operation of customer accounts and guarantees:
- Names and contact details
- Payment details (including card or bank information for transfers and direct debits)
- Purchase history
- Account information, including registration details
- Information used for security purposes
We collect or use the following information for service updates or marketing purposes:
- Names and contact details
- Addresses
- Marketing preferences
- Location data
- Recorded images, such as photos or videos
- Purchase or viewing history
- IP addresses
- Website and app user journey information
- Records of consent, where appropriate
We collect or use the following information for research or archiving purposes:
- Names and contact details
- Addresses
- Location data
- Recorded images, such as photos or videos
- Purchase or viewing history
- IP addresses
- Website and app user journey information
- Personal information used for administration of research
- Personal information used for the purpose of research
- Records of consent, where appropriate
We collect or use the following information to comply with legal requirements:
- Name
- Contact information
- Financial transaction information
We collect or use the following personal information for dealing with queries, complaints or claims:
- Names and contact details
- Payment details
- Account information
- Purchase or service history
- Financial transaction information
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
- Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
- Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.
- Your right to erasure – You have the right to ask us to delete your personal information. Read more about the right to erasure.
- Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.
- Your right to object to processing – You have the right to object to the processing of your personal data. Read more about the right to object to processing.
- Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.
- Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
Our lawful bases for the collection and use of your data
Our lawful bases for collecting or using personal information to provide services and goods are:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Our lawful bases for collecting or using personal information for service updates or marketing purposes are:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Our lawful bases for collecting or using personal information for research or archiving purposes are:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Our lawful bases for collecting or using personal information for legal requirements are:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
- Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:
- Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
- Directly from you
- Social media
Data processors
Kajabi – This data processor does the following activities for us: Email service provider and CRM (Customer Relationship Management)
Mailchimp – This data processor does the following activities for us: This data processor does the following activities for us: Email service provider and CRM (Customer Relationship Management)
Facebook – This data processor does the following activities for us: Provides advertising and analytics services.
Google Analytics – This data processor does the following activities for us: Analytics services.
Google Drive – This data processor does the following activities for us: Stores records.
Many chat – This data processor does the following activities for us: Processes requests for more information and free instructionals/products on instagram.
Zapier – This data processor does the following activities for us: Processes data.
Sendowl – This data processor does the following activities for us: Service provider and CRM (Customer Relationship Management)
Stripe – This data processor does the following activities for us: Payment Processor
Paypal – This data processor does the following activities for us: Payment Processor
Others we share personal information with
- Publicly on our website, social media or other marketing and information media
- Suppliers and service providers
- Other relevant third parties:
- YouTube – embedded videos
- Instagram – plugin/app
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
How We Use Your Information
- Deliver courses and digital products
- Process payments and transactions
- Send marketing communications (with your consent)
- Provide customer support
- Improve our website and services
Data Security
Cookies and Tracking Technologies
Data Retention
Your Privacy Rights
Contact Us