Legal Information

Pattern Obsession Privacy Policy

Your privacy matters to us. Learn how we protect and handle your personal information when you use our free crochet patterns and join our community.

Last updated: January 01, 2026
πŸ“‹

Quick Summary

Pattern Obsession respects your privacy and is committed to protecting your personal data. We collect minimal personal information when you subscribe to our newsletter or contact us about our free crochet patterns. We use cookies for functionality and analytics, and may display advertisements through our partner Mediavine. You have full control over your data and can request its deletion at any time.

βš–οΈ

Data Controller Information

Pattern Obsession acts as the Data Controller for all personal data collected through this website. This means we determine the purposes and means of processing your personal data and are responsible for its protection and lawful processing under the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Company Details

Company Name: Pattern Obsession
Website: https://patternobsession.com
Business Location: Morocco
Server Location: United States (Hostinger)
Privacy Contact: privacy@patternobsession.com
Data Protection Officer: dpo@patternobsession.com
πŸ”

Information We Collect

Personal Information

  • Email Address: When you subscribe to our newsletter for free crochet patterns or contact us
  • Name: If you provide it when subscribing or commenting on our crochet tutorials
  • Crochet Preferences: To personalize free pattern recommendations and tutorials
  • Contact Information: When you reach out through our contact forms for pattern support

Automatically Collected Information

  • Usage Data: Pages visited, time spent, patterns viewed, and user preferences
  • Device Information: Browser type, operating system, screen resolution for optimal display
  • IP Address: For analytics and security purposes only
  • Cookies: For site functionality and user experience improvement
🀝

Third Party Data Sharing

We share your personal data with the following third parties. For each third party, we specify their role, the data shared, the purpose, and the legal basis:

Email Service Provider - Internal PHP System

Service Provider: Internal PHP mail system (hosted on our server)

Role: We act as sole Data Controller

Data Shared: Email address, name (if provided), subscription preferences, email engagement data

Purpose: To send newsletters and manage email subscriptions for free crochet patterns and tutorials

Legal Basis: Consent (Article 6(1)(a) GDPR) and Contractual Necessity (Article 6(1)(b) GDPR)

Storage Location: Hostinger servers (United States)

Note: Email data is stored securely on our own servers and not shared with third-party email service providers

Web Hosting Provider - Hostinger

Service Provider: Hostinger International Ltd.

Role: Data Processor

Data Shared: All data stored on our website servers including user data, IP addresses, website logs, and email data

Purpose: To host our website and ensure its availability, performance, and data storage

Legal Basis: Legitimate Interests (Article 6(1)(f) GDPR) - necessary for website operation

Data Processing Agreement: Yes, Hostinger complies with GDPR requirements

Location: United States with appropriate safeguards for international data transfers

Privacy Policy: Hostinger Privacy Policy

Security: Industry-standard encryption, firewalls, and security monitoring

Analytics Provider - Google Analytics

Service Provider: Google LLC

Role: Independent Data Controller

Data Shared: IP address (anonymized), device information, browsing behavior, page views, session duration

Purpose: To analyze website traffic, understand user behavior, and improve our free crochet pattern content

Legal Basis: Consent (Article 6(1)(a) GDPR) and Legitimate Interests (Article 6(1)(f) GDPR)

Privacy Policy: Google Privacy Policy

Opt-Out: Google Analytics Opt-out Browser Add-on

Location: USA - Google complies with EU-US Data Privacy Framework

Advertising Partner - Mediavine

Service Provider: Mediavine, Inc.

Role: Independent Data Controller

Data Shared: IP address, operating system type and version, device type, language, web browser type, email (in hashed form), cookie data

Purpose: To display personalized and interest-based advertisements to support our free content

Legal Basis: Consent (Article 6(1)(a) GDPR) for personalized advertising, Legitimate Interests (Article 6(1)(f) GDPR) for non-personalized advertising

Privacy Policy: Mediavine Privacy Policy

Ad Partners: Mediavine Ad Partners List

Location: USA

Note: See detailed Mediavine section below for complete information

Legal and Professional Advisors

Recipients: Accountants, lawyers, auditors, and other professional advisors

Role: Data Processors (under professional confidentiality obligations)

Data Shared: Only data necessary for specific professional services

Purpose: Legal compliance, financial reporting, business advisory services

Legal Basis: Legal Obligation (Article 6(1)(c) GDPR) and Legitimate Interests (Article 6(1)(f) GDPR)

Law Enforcement and Regulatory Bodies

Recipients: Government agencies, courts, regulators when legally required

Data Shared: Only data specifically requested or required by law

Purpose: Compliance with legal obligations, court orders, or regulatory requirements

Legal Basis: Legal Obligation (Article 6(1)(c) GDPR)

International Data Transfers

Our website is hosted on servers located in the United States (via Hostinger). When you use our website from the European Economic Area (EEA), Morocco, or other regions, your personal data is transferred to the United States. We ensure appropriate safeguards are in place for these transfers, including:

  • Standard Contractual Clauses (SCCs): EU-approved contractual terms ensuring GDPR-level protection with our hosting provider
  • Data Privacy Framework: For US companies certified under the EU-US Data Privacy Framework (Google, Mediavine)
  • Adequacy Decisions: Countries deemed by the EU Commission to provide adequate data protection
  • Additional Safeguards: Technical and organizational measures including encryption, access controls, and regular security audits
  • Hosting Security: Hostinger implements industry-standard security measures and complies with international data protection standards

Your Rights: You have the right to obtain information about the safeguards in place for international transfers. Contact us at privacy@patternobsession.com for more details.

πŸͺ

Cookie Usage

Managing Cookies

You can control and manage cookies in several ways:

  • Cookie Consent Banner: Manage your preferences when you first visit our site
  • Browser Settings: Most browsers allow you to refuse or delete cookies
  • Opt-Out Links: Use industry opt-out tools provided below
  • Cookie Information: Visit All About Cookies for detailed guidance

Note: Disabling certain cookies may affect website functionality and your user experience.

πŸ“Ί

Mediavine Programmatic Advertising (Ver 1.1)

The Website works with Mediavine to manage third-party interest-based advertising appearing on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a "device") by the web server so that a website can remember some information about your browsing activity on the Website.

First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, "Tags") may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser's cache. The "help" feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser's cache. For more information about cookies and how to disable them, you can consult the information at All About Cookies.

Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site. In the event you opt-out, you will still see non-personalized advertisements on the Website.

The Website collects the following data using a cookie when serving personalized ads:

  • IP Address
  • Operating System type
  • Operating System version
  • Device Type
  • Language of the website
  • Web browser type
  • Email (in hashed form)

Mediavine Partners (companies listed below with whom Mediavine shares data) may also use this data to link to other end user information the partner has independently collected to deliver targeted advertisements. Mediavine Partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and link that data to data collected from Mediavine publishers in order to provide interest-based advertising across your online experience, including devices, browsers and apps. This data includes usage data, cookie information, device information, information about interactions between users and advertisements and websites, geolocation data, traffic data, and information about a visitor's referral source to a particular website. Mediavine Partners may also create unique IDs to create audience segments, which are used to provide targeted advertising.

If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit National Advertising Initiative opt out page. You may also visit Digital Advertising Alliance website and Network Advertising Initiative website to learn more information about interest-based advertising. You may download the AppChoices app at Digital Advertising Alliance's AppChoices app to opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.

For specific information about Mediavine Partners, the data each collects and their data collection and privacy policies, please visit Mediavine Partners.

πŸ“±

How We Use Your Information

We use your personal data for the following purposes, each with its corresponding legal basis:

  • Newsletter Delivery: Sending weekly free crochet patterns and tutorial updates
    Legal Basis: Consent (Article 6(1)(a) GDPR)
  • Content Personalization: Recommending crochet patterns based on your interests and skill level
    Legal Basis: Legitimate Interests (Article 6(1)(f) GDPR)
  • Website Improvement: Analyzing usage patterns to enhance user experience with our free patterns
    Legal Basis: Legitimate Interests (Article 6(1)(f) GDPR)
  • Customer Support: Responding to your questions about crochet patterns and techniques
    Legal Basis: Contractual Necessity (Article 6(1)(b) GDPR)
  • Community Building: Connecting you with other crocheters and sharing project inspiration
    Legal Basis: Legitimate Interests (Article 6(1)(f) GDPR)
  • Legal Compliance: Meeting regulatory requirements and protecting our rights
    Legal Basis: Legal Obligation (Article 6(1)(c) GDPR)
  • Security and Fraud Prevention: Protecting our website and users from malicious activities
    Legal Basis: Legitimate Interests (Article 6(1)(f) GDPR)
  • Marketing Communications: Sending promotional content about new patterns and features
    Legal Basis: Consent (Article 6(1)(a) GDPR) - you can opt-out anytime
πŸ”’

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

πŸ” Encryption

All data transmission is secured with SSL/TLS encryption to protect your personal information during transit. Data at rest is also encrypted where appropriate.

πŸ‘₯ Access Controls

Limited access to personal information on a need-to-know basis within our team. Multi-factor authentication and role-based access controls are implemented.

πŸ” Regular Audits

Ongoing security assessments, vulnerability scanning, and improvements to protect user data. Regular review of third-party processors' security measures.

πŸ’Ύ Secure Storage

Data stored on secure servers with industry-standard protections, regular backups, and disaster recovery procedures.

πŸ›‘οΈ Security Policies

Comprehensive data protection policies and procedures. Regular staff training on data protection and security best practices.

⚠️ Breach Notification

In the event of a data breach, we will notify affected users and relevant supervisory authorities within 72 hours as required by GDPR.

🌍

Your Rights Under GDPR & CCPA

Under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you have the following rights regarding your personal data:

You Have the Right To:

πŸ“‹ Right of Access (Article 15 GDPR)

Request a copy of all personal data we hold about you, including information about how we process it.

Response Time: Within 30 days

✏️ Right to Rectification (Article 16 GDPR)

Correct any inaccurate or incomplete personal information we hold about you.

Response Time: Within 30 days

πŸ—‘οΈ Right to Erasure (Article 17 GDPR)

Request deletion of your personal data ("right to be forgotten"), subject to certain legal obligations that may require retention.

Response Time: Within 30 days

πŸ“€ Right to Data Portability (Article 20 GDPR)

Receive your data in a structured, commonly used, and machine-readable format (CSV or JSON).

Response Time: Within 30 days

🚫 Right to Restriction (Article 18 GDPR)

Limit how we process your personal information in certain circumstances.

Response Time: Within 30 days

⚠️ Right to Object (Article 21 GDPR)

Object to processing based on legitimate interests or for direct marketing purposes.

Response Time: Immediate for marketing; within 30 days for other objections

πŸ€– Automated Decision-Making (Article 22 GDPR)

Not be subject to decisions based solely on automated processing that produce legal or significant effects.

Note: We do not currently use automated decision-making

πŸ”™ Right to Withdraw Consent (Article 7(3) GDPR)

Withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

How: Click unsubscribe in emails or contact us

πŸ“’ Right to Lodge a Complaint

File a complaint with your local data protection supervisory authority if you believe your rights have been violated.

See: Supervisory Authority section below

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

  • Email: privacy@patternobsession.com
  • Subject Line: "Data Subject Rights Request"
  • Include: Your full name, email address, and specific right you wish to exercise
  • Verification: We may ask for identification to verify your identity before processing your request

No Fee: Exercising your rights is free of charge, unless requests are manifestly unfounded or excessive.

πŸ›οΈ

Supervisory Authority

If you believe we have not handled your personal data in accordance with GDPR or other applicable data protection laws, you have the right to lodge a complaint with a supervisory authority.

European Union Residents

You can contact your local data protection authority in your EU member state. A list of EU data protection authorities can be found at:

European Data Protection Board - List of Supervisory Authorities

Morocco Residents

Residents of Morocco can contact the Moroccan data protection authority:

Authority Name: Commission Nationale de contrôle de la protection des Données à Caractère Personnel (CNDP)
Address: Avenue Annakhil, Hay Riad, Rabat 10100, Morocco
Email: contact@cndp.ma
Phone: +212 537 57 73 16

United States Residents (California)

California residents can contact the California Attorney General:

Office: California Attorney General's Office
Phone: (916) 210-7580

Other Jurisdictions

If you are located outside the EU, Morocco, or California, please contact your local data protection authority or consumer protection agency for guidance on filing a complaint.

Important: We encourage you to contact us first at privacy@patternobsession.com so we can address your concerns directly before lodging a formal complaint with a supervisory authority.

πŸ‘Ά

Children's Privacy

Pattern Obsession is intended for users of all ages who enjoy crochet and want to access free patterns and tutorials. We do not knowingly collect personal information from children under 13 without verifiable parental consent, in accordance with the Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and believe we have inadvertently collected personal information from your child under 13, please contact us immediately at privacy@patternobsession.com. We will promptly delete such information from our records.

For EU residents: In accordance with GDPR Article 8, we do not process personal data of children under 16 without parental consent, except where member states have provided a lower age (not below 13).

πŸ”„

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

  • Newsletter Subscriptions: Until you unsubscribe or request deletion
    Legal Basis: Consent - retained while consent is valid
  • Contact Inquiries: Up to 2 years from last contact for customer service purposes
    Legal Basis: Legitimate interests in customer service
  • Analytics Data: Aggregated and anonymized data retained for up to 26 months (Google Analytics default)
    Legal Basis: Legitimate interests in website improvement
  • Transaction Records: Up to 7 years as required by tax and accounting laws
    Legal Basis: Legal obligation
  • Legal Claims: As long as necessary to establish, exercise, or defend legal claims
    Legal Basis: Legal obligation and legitimate interests
  • Account Data: Until account deletion is requested, then within 30 days (except where legal retention is required)
    Legal Basis: Various, depending on data type

Data Deletion: After the retention period expires, personal data is securely deleted or anonymized so it can no longer identify you.

πŸ“ž

Contact Information

For any privacy-related questions, to exercise your rights, or if you have concerns about how we handle your personal data, please contact us:

πŸ“§ Privacy Team Email: privacy@patternobsession.com
πŸ“§ Data Protection Officer: dpo@patternobsession.com
πŸ“ Business Location: Morocco
🌐 Website: https://patternobsession.com
⏰ Response Time: We respond to all privacy requests within 30 days as required by GDPR
πŸ†” Identity Verification: For security, we may request proof of identity before processing data subject requests
πŸ“

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other operational needs. When we make changes, we will:

  • Update the "Last Updated" date at the top of this policy
  • Notify subscribers via email if changes materially affect how we handle their personal data
  • Provide a prominent notice on our website for 30 days for significant changes
  • For substantial changes requiring new consent, we will obtain your explicit consent before applying the changes to your data
  • Maintain an archive of previous versions of this policy upon request

Your Continued Use: By continuing to use our website after changes are posted, you accept the updated Privacy Policy. If you do not agree with any changes, please discontinue use and contact us to delete your personal data.

Version History: Current version dated January 01, 2026. Previous versions available upon request to privacy@patternobsession.com.

🧢

Questions About Our Privacy Practices?

We're committed to transparency and protecting your privacy while you enjoy our free crochet patterns and tutorials. If you have any questions about this policy, our data practices, how to exercise your rights, or concerns about data protection, don't hesitate to reach out to our privacy team. We're here to help!

Commitment to Privacy: Your trust is important to us. We continuously review and improve our privacy practices to ensure your personal data is protected in accordance with the highest standards of data protection law.