Last updated: August 8, 2026
This Privacy Notice for Yarn Bits Shop LLC ("we," "us," or "our") describes how and why we collect, use, and share your personal information when you interact with our services, including when you:
- Visit our website at yarnbitsshop.com
- Join the Stash Buster Collective membership, or buy one of our pocket products, through our ThriveCart checkout
- Use the PatternTrack app
- Engage with us in other ways, including marketing emails or the Collective community
If you have questions after reading this notice, email us at help@yarnbitsshop.com.
Summary
What do we collect? Mainly what you give us directly — your email, name, and (if you make a purchase) billing details — plus basic site-usage data from analytics tools. See Section 1.
Do we collect sensitive information? No (race, health, religion, etc. — none of that).
Do we collect information from third parties? No.
Do we sell your information? No, never.
How do we keep it safe? Reasonable technical and organizational measures — see Section 7 for the full statement, including the honest caveat that no system is 100% secure.
What are your rights? Depending on where you live, you may have rights to access, correct, or delete your data — see Sections 9 and 11.
Table of contents
- What information do we collect?
- How do we process your information?
- What legal bases do we rely on?
- When and with whom do we share your information?
- Do we use cookies and other tracking technologies?
- How long do we keep your information?
- How do we keep your information safe?
- Do we collect information from minors?
- What are your privacy rights?
- Controls for Do-Not-Track features
- Do United States residents have specific privacy rights?
- Do we make updates to this notice?
- How can you contact us about this notice?
- How can you review, update, or delete your data?
1. What information do we collect?
Personal information you disclose to us
We collect personal information you voluntarily provide when you join the Stash Buster Collective, buy a pocket product, sign up for our email list, create a PatternTrack account, or contact us. Depending on how you interact with us, this may include:
- email address and name
- billing address (collected by our checkout provider, not stored by us beyond your order record)
- username and password, for your PatternTrack account only
We do not process sensitive information (racial or ethnic origin, religious beliefs, health data, and similar categories).
Payment data. We collect only the minimum data necessary to process your payment. All payment data is handled and stored by our payment processors, Stripe and PayPal — we never see or store your card number. Their privacy policies: stripe.com/privacy and paypal.com/…/privacy-full.
All personal information you provide to us must be true, complete, and accurate, and you agree to notify us of any changes.
Information automatically collected
Some information — such as your IP address, browser, and device characteristics — is collected automatically when you visit our site. This doesn’t reveal your specific identity, but may include:
- Log and usage data — IP address, browser type, device information, and activity like pages viewed, recorded automatically by our server and analytics tools for security and troubleshooting.
- Device data — general information about the device used to access the site (browser type, operating system, and similar technical details).
See Section 5 for the specific cookies and analytics tools we use.
2. How do we process your information?
We process your information to run the business: to provide and administer our Services, manage your Stash Buster Collective membership and PatternTrack access, communicate with you, prevent fraud, and comply with the law. We only process your information when we have a valid reason to, and we may process it for other purposes only with your consent.
3. What legal bases do we rely on to process your information?
If you are located in the EU or UK, this section applies to you. The GDPR and UK GDPR require us to explain our legal bases for processing personal information:
- Consent. We process your information where you’ve given us permission for a specific purpose, and you can withdraw that consent at any time.
- Legal obligations. We may process your information where necessary to comply with the law, such as tax and accounting requirements.
4. When and with whom do we share your personal information?
We don’t sell your information. We share it only in these situations:
- Service providers. The vendors who help us run the business each receive only what they need to do their job: ThriveCart (checkout, membership, and the Collective community/Learn area), Stripe and PayPal (payment processing), Klaviyo (our email platform), and Supabase (the database behind the PatternTrack app).
- The Collective community. If you join the Stash Buster Collective, your profile and posts in our community (hosted on ThriveCart Learn/Academy) are visible to other members.
- Business transfers. We may share or transfer information in connection with a merger, sale of company assets, financing, or acquisition of all or part of the business.
5. Do we use cookies and other tracking technologies?
This site sets no cookies of its own. We use Google Analytics and WordPress.com (Jetpack) stats to understand how visitors use the site — these set cookies and collect usage data such as your IP address, browser, and pages visited.
We may also use advertising pixels — such as the Meta (Facebook) Pixel or Google Ads tracking — on our sales pages to measure how our ads are performing and to show our ads to people who’ve visited our site elsewhere online. To opt out: Meta’s ad settings at facebook.com/adpreferences/ad_settings, and Google’s at adssettings.google.com.
A cookie consent banner (Termly) lets you choose which of these cookies to allow the first time you visit.
To opt out of Google Analytics specifically, visit tools.google.com/dlpage/gaoptout. Google’s privacy policy: policies.google.com/privacy. Automattic’s (Jetpack): automattic.com/privacy.
6. How long do we keep your information?
We keep your information only as long as necessary for the purpose it was collected:
- Stash Buster Collective members — for as long as your membership is active, plus whatever period we’re required to keep purchase records for tax and accounting.
- Email list — until you unsubscribe.
- PatternTrack — for as long as your account exists.
When we no longer have a legitimate business need to process your information, we delete or anonymize it, or, where that isn’t possible (e.g. backup archives), we securely isolate it until deletion is possible.
7. How do we keep your information safe?
We use reasonable technical and organizational security measures to protect your personal information. However, no method of transmission over the internet or electronic storage is 100% secure, so we can’t guarantee that hackers or other unauthorized parties will never be able to defeat our security. Use of our Services is at your own risk.
8. Do we collect information from minors?
We do not knowingly collect data from or market to anyone under 18. By using our Services, you represent that you’re at least 18, or that you’re a parent/guardian consenting on a minor’s behalf. If we learn we’ve collected information from someone under 18, we’ll delete it — contact us at help@yarnbitsshop.com if you believe this has happened.
9. What are your privacy rights?
Depending on where you live, you may have rights under applicable data protection law — for example, the GDPR if you’re in the EU or UK, or state privacy laws if you’re in the US (see Section 11). These commonly include the right to access, correct, or delete your personal information, restrict or object to processing, and — where applicable — data portability.
To exercise any of these, email help@yarnbitsshop.com or use our data subject access request form. We’ll respond in accordance with applicable law.
Withdrawing consent. Where we rely on your consent, you can withdraw it at any time using the contact details above — this won’t affect the lawfulness of processing that already happened.
Opting out of marketing. Unsubscribe any time via the link in any email we send, or by emailing us. If we ever send text messages, reply STOP to opt out at any time — we won’t share your phone number or opt-in data with third parties for their own marketing. We may still send non-marketing messages related to your account or a request you’ve made.
If you’re in the UK and unhappy with how we’ve handled your information, you can complain to us directly first, or to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, helpline 0303 123 1113. We’ll acknowledge a complaint within 30 days, investigate without unjustified delay, and keep you informed of the outcome. If you’re in the EEA, UK, or Switzerland, you also have the right to complain to your own data protection authority.
10. Controls for Do-Not-Track features
There’s currently no uniform standard for Do-Not-Track (DNT) browser signals, so we don’t respond to them. We do recognize and honor Global Privacy Control (GPC) signals — if your browser sends one, we treat it as a valid opt-out request under applicable state privacy laws (including the CCPA) and apply it automatically. Learn more: globalprivacycontrol.org.
11. Do United States residents have specific privacy rights?
If you’re a resident of a US state with its own consumer privacy law — for example California, Colorado, Connecticut, and others as more states pass them — you may have rights to access, correct, delete, or obtain a copy of the personal information we have about you, and to opt out of certain processing, including targeted advertising and the sale of data (we don’t sell data; if we run ads on our sales pages, this is your opt-out — see Section 5).
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, email address, mailing/billing address | Yes |
| Commercial information | Purchase history and transaction records from your SBC membership or pocket-product purchases | Yes |
| Internet or network activity | Pages viewed and site-usage data, via Google Analytics and Jetpack stats | Yes |
| Protected classifications (race, gender, age, etc.) | — | No |
| Biometric information | — | No |
| Geolocation data | — | No |
| Audio, video, or sensory information | — | No |
| Professional or employment information | — | No |
| Education information | — | No |
| Inferences or profiling | — | No |
| Sensitive personal information | — | No |
Retention: Identifiers are kept as long as you have an active relationship with us; commercial information for as long as required for tax and accounting records; network-activity data per our analytics providers’ own retention windows.
We have not sold or shared personal information with third parties for a business or commercial purpose in the preceding twelve months, and we don’t intend to.
How to exercise your rights: email help@yarnbitsshop.com or use our data subject access request form. We’ll verify your identity before acting on a request, and honor GPC opt-out signals automatically. Under some state laws, you can designate an authorized agent to submit a request on your behalf, with proof of authorization. If we decline a request, you may appeal by emailing us, and we’ll explain our decision in writing.
12. Do we make updates to this notice?
Yes — if this notice changes, the updated version goes up on this page with a new “Last updated” date. We encourage you to check back periodically.
13. How can you contact us about this notice?
Email us at help@yarnbitsshop.com, or write to:
Yarn Bits Shop LLC
1900 S Clinton Ave
Unit 18132 Ste 25
Rochester, NY 14618
United States
14. How can you review, update, or delete the data we collect from you?
You may have the right to request access to, correction of, or deletion of your personal information, depending on the laws that apply to you. To make a request, email help@yarnbitsshop.com or submit a data subject access request.