Privacy and Cookie Policy

Last updated: November 2026

1. WHO WE ARE

Carolina Maria Atelier is an independent project dedicated to creating made-to-measure crochet garments and developing and selling digital crochet patterns.

The data controller responsible for processing personal data is Carolina Maria Ferreira, who operates as a sole trader under the trade name Carolina Maria Atelier, in Portugal.

This Privacy and Cookie Policy explains how personal data is collected, used, stored and protected when people visit the website www.ateliercarolinamaria.com, contact the atelier, place orders or subscribe to the newsletter.

For any questions relating to privacy and the processing of personal data, you can contact:

Email: hello@ateliercarolinamaria.com

2. WHAT PERSONAL DATA IS COLLECTED?

The data collected depends on how you interact with Carolina Maria Atelier.

2.1. Atelier enquiries and orders

When you contact the atelier to request information, ask for a quote or order a made-to-measure garment, the following information may be collected:

- Name;

- Email address;

- Phone number;

- Postal address, when required for delivery;

- Measurements and information necessary to create the garment;

- Preferences and information relating to the order;

- Any other information you choose to provide during our communication.

This information is used to respond to enquiries, prepare quotes, develop the garments, manage orders and ensure the communication necessary to provide the service.

2.2. Digital pattern purchases

Digital crochet patterns are sold through the Etsy platform.

When you make a purchase, Etsy collects and processes the information required to manage the transaction. Carolina Maria Atelier may receive information associated with the order, such as the buyer's name or username, email address, purchased product and other information necessary to manage the order and fulfil legal and tax obligations.

Payments are processed through Etsy and its respective payment service providers. Carolina Maria Atelier does not collect or store the full payment card details used on the platform.

Your use of Etsy is subject to its own Privacy Policy and Terms of Use.

2.3. Newsletter

When you subscribe to the Carolina Maria Atelier newsletter, the following information is collected:

- Email address (required);

- Name (optional);

- Information relating to your subscription and the consent provided.

The newsletter may include the digital crochet magazine, free patterns, inspirational content, news, information about new digital patterns, special offers, discounts and other communications relating to Carolina Maria Atelier's products and atelier.

The subscriber list is managed and emails are sent through the Sender platform.

Subscription is voluntary and requires your consent. You may withdraw your consent at any time by using the unsubscribe link included in the emails or by contacting Carolina Maria Atelier directly.

When campaign tracking features are enabled, information about interactions with emails, such as opens and link clicks, may also be collected.

2.4. Forms and communications

When you use a contact form or communicate with Carolina Maria Atelier by email, WhatsApp Business or Instagram, the information you provide may be processed, including your name, email address, phone number and the content of your message.

This information is used to respond to enquiries, provide assistance and follow up on communications or orders.

2.5. Website browsing

When you use the website, technical information relating to your device, browser, IP address and use of the website pages may be collected.

The website is hosted through the Google Sites platform. Google may therefore process certain technical information and use cookies or similar technologies to provide and ensure the proper functioning of the service.

3. WHY DO WE USE YOUR PERSONAL DATA?

Personal data is processed for the following purposes:

- To respond to enquiries and contact requests;

- To prepare quotes and manage made-to-measure garment orders;

- To develop, produce and deliver ordered garments;

- To manage purchases of digital patterns made through Etsy;

- To issue invoices and comply with tax and legal obligations;

- To manage newsletter subscriptions and send the requested communications;

- To provide customer support;

- To ensure the operation and security of the website;

- To comply with legal obligations and respond to legitimate requests from competent authorities.

Your data will not be used for purposes incompatible with those for which it was collected.

4. WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?

Depending on the purpose, personal data is processed on one or more of the following legal bases established under the General Data Protection Regulation (GDPR):

- Pre-contractual measures and performance of a contract: when the data is necessary to respond to a request for a quote, manage an order or provide a service.

- Compliance with legal obligations: particularly tax and accounting obligations.

- Consent: for newsletter subscriptions and other situations where consent is required by law.

- Legitimate interests: when processing is necessary for the management, security and operation of the business, provided that these interests do not override your rights and freedoms.

Where processing is based on consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

5. EXTERNAL PLATFORMS AND DATA SHARING

To carry out its activities, Carolina Maria Atelier uses external platforms and services that may process personal data in accordance with their respective privacy policies.

These services include:

- Google Sites: the platform used to host and provide the website.

- Sender: the platform used to manage the newsletter and send email communications.

- Etsy: the platform used to sell digital patterns and manage related purchases.

- Ravelry: the platform used to display the crochet pattern catalogue and, potentially, provide free content.

- WhatsApp Business: the application used to communicate with customers and potential customers.

- Instagram: the platform used to showcase Carolina Maria Atelier's work and communicate with its community.

Data may also be shared, when necessary, with banks, payment service providers, accounting services, tax authorities or delivery service providers, within the scope of their respective functions.

Payments for atelier orders are made by bank transfer or MB WAY. Only the information strictly necessary to identify and confirm the transaction, such as the amount, date and payment reference, may be processed.

Carolina Maria Atelier does not sell personal data to third parties.

External platforms may process certain data for their own purposes, in accordance with their respective privacy policies. Your use of these platforms is also subject to their terms of use.

Some service providers may process data outside the European Economic Area. Where this occurs, such transfers must comply with the conditions and safeguards established under applicable data protection legislation.

6. HOW LONG IS YOUR DATA STORED?

Personal data is retained only for as long as necessary for the purposes for which it was collected, taking into account applicable legal obligations.

Retention periods may vary depending on the nature of the data and the relationship established:

- Orders and invoicing: for the periods required under tax and accounting legislation.

- Enquiries and communications: for the period necessary to respond to and follow up on the enquiry, and potentially longer where there is a legitimate reason or legal obligation.

- Newsletter:  until you unsubscribe or withdraw your consent. Minimal information necessary to respect your request not to receive future communications may be retained.

- Technical and browsing data: according to the retention periods defined by the platforms and technologies used.

When data is no longer necessary, it will be deleted or anonymised, where applicable.

7. WHAT ARE YOUR RIGHTS?

Under the GDPR, as a data subject, you have the right to:

- Access your personal data;

- Request the rectification of inaccurate or incomplete data;

- Request the erasure of your data, in the cases provided for by law;

- Request the restriction of processing;

- Object to certain types of processing;

- Request data portability, where applicable;

- Withdraw your consent at any time, where processing is based on that consent;

- Not be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you, under the conditions provided for by law;

- Lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados – CNPD).

To exercise your rights or clarify any questions relating to your personal data, you can contact:

hello@ateliercarolinamaria.com

You may also lodge a complaint with the Portuguese Data Protection Authority (CNPD): https://www.cnpd.pt/

8. HOW IS YOUR DATA PROTECTED?

Carolina Maria Atelier seeks to adopt appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

Access to data is limited to what is necessary for the operation of the business and the fulfilment of the purposes described in this policy.

Despite the precautions taken, no electronic transmission or storage system can guarantee absolute security.

9. COOKIES AND SIMILAR TECHNOLOGIES

Carolina Maria Atelier's website is hosted through Google Sites. The use of this platform may involve cookies and similar technologies necessary for the operation, security and provision of the website, as well as other technologies used by Google.

Cookies are small files stored on a visitor's device. They may, for example, allow certain preferences to be saved or collect information about how the website is used.

Cookies that are not strictly necessary are subject to the consent requirements established by applicable legislation.

Visitors may manage their cookie preferences through the mechanisms made available on the website, where available, and through their browser settings. Disabling certain cookies may affect some website functionalities.

For further information about Google's use of cookies and similar technologies, please refer to Google's Privacy Policy and cookie information.

This section will be updated whenever new analytics, advertising or other services that use cookies or similar technologies are integrated.

10. CHANGES TO THIS PRIVACY POLICY

Carolina Maria Atelier may update this Privacy and Cookie Policy whenever necessary, particularly as a result of changes to its activities, the services it uses or applicable legislation.

The most recent version will always be available on the website, together with its respective update date.

11. CONTACT

For any questions relating to this Privacy Policy, the use of your personal data or your rights as a data subject, you can contact:

Carolina Maria Ferreira

Email: hello@ateliercarolinamaria.com

Website: https://www.ateliercarolinamaria.com

Portugal