Legal
Privacy policy
What personal data we collect, why we use it, and the rights you have over it.
Last updated
This policy explains what personal data we collect when you visit this website or buy from us, why we use it, and the rights you have. We keep it as short and plain as we can.
Who is responsible
Weft Studio B.V., Weverstraat 12, 1011 AB Amsterdam, the Netherlands is the controller of your personal data. Contact: privacy@weft.studio.
What we collect and why
When you browse. Our hosting provider processes technical data such as your IP address, browser type and the pages you request, so the site can be delivered securely. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). These logs are deleted after a short period.
Your bag and preferences. Your bag, chosen currency and similar settings are saved in your own browser (local storage), not on our servers. See our Cookie policy.
When you order. We process your name, delivery and billing address, email, phone number (if given), order contents and payment status to fulfil your order and meet our tax and accounting duties. Legal basis: performance of a contract and legal obligation (Art. 6(1)(b) and (c) GDPR).
Payments. Payments are handled by our checkout and payment providers, for example Shopify or Stripe. They receive the data needed to take payment and prevent fraud and act under their own privacy policies.
Newsletter. If you subscribe, we use your email address to send you our newsletter. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time with the link in every email.
When you contact us or withdraw from a purchase. We use the details you send us to answer you and handle your request. Legal basis: contract and legitimate interest.
Exchange rates. If you view prices in another currency, your browser fetches daily reference rates from a public exchange-rate service. This request contains your IP address but no other personal data.
Instagram gallery. If our homepage shows our latest Instagram posts, the images are loaded from our feed provider (Behold). This request contains your IP address but no other personal data.
Who we share data with
We only share data with service providers who help us run the shop — hosting (Framer), checkout and payments (for example Shopify, Stripe), delivery companies, form, email and newsletter tools (for example Formspree) — and only as far as they need it. Some providers may process data outside the EU/EEA; where they do, appropriate safeguards such as the EU Standard Contractual Clauses are in place.
How long we keep it
Order and invoice data is kept for as long as tax and commercial law requires (in the Netherlands, 7 years). Other data is deleted once it is no longer needed or when you withdraw your consent.
Your rights
You have the right to access, correct, delete or restrict the processing of your data, to data portability, to object to processing based on legitimate interest, and to withdraw consent at any time. To use any of these rights, email privacy@weft.studio. You can also complain to your local data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.
Changes
We update this policy when our practices change. The date at the top shows the latest version.