Privacy Policy

Last updated: 26 September 2026

1. Who is responsible for your data

The controller of your personal data is Lilianna Laudy, ul. Przy Forcie 12a/38, 02-495 Warszawa, Poland (Lilac & Lace). Contact: [email protected].

2. When you buy a pattern

• Payhip runs the checkout and delivers the file. We receive your name, email address, country, the patterns you bought and the amount paid. Card and PayPal details are processed by Stripe or PayPal; we never see them.
• Why and on what basis: to perform the contract and deliver the file (Art. 6(1)(b) GDPR), to meet tax and accounting obligations (Art. 6(1)(c) GDPR), and to handle complaints and possible claims (our legitimate interest, Art. 6(1)(f) GDPR).
• How long: order data is kept for as long as tax and accounting rules require (in Poland usually 5 years after the end of the relevant tax year), and otherwise until the period for complaints and claims has passed.
• Payhip, Stripe and PayPal also process data under their own privacy policies.
• We don't send newsletters. If that changes, we will only email you if you have agreed to it.

3. When you email us

If you write to [email protected], we use your email address and message to reply (our legitimate interest, or steps related to a contract). Messages are forwarded by Cloudflare Email Routing to our Gmail mailbox (Google). We keep correspondence as long as needed to handle your matter and any follow-up.

4. When you visit this website

• The website is hosted by Cloudflare. To deliver the site and protect it from attacks, Cloudflare processes technical data such as your IP address and browser information (our legitimate interest).
• We don't use analytics, advertising tools or cookies. Fonts and images are served from this website.
• The row counter, your filters and similar settings are saved only in your browser's local storage on your own device. We never receive this data. You can delete it by clearing this site's data in your browser.
• When you click Buy, the Payhip checkout is loaded from payhip.com. From that moment Payhip processes data, and may use cookies needed for the checkout, under its own privacy policy.

5. Recipients and transfers outside the EEA

We share data only with the service providers we need: Payhip (store and checkout), Stripe and PayPal (payments), Cloudflare (hosting and email forwarding) and Google (email). Some of them process data outside the European Economic Area, for example in the United Kingdom or the United States. These transfers rely on adequacy decisions of the European Commission (for the UK, and for US companies certified under the EU–US Data Privacy Framework) or on standard contractual clauses.

6. Your rights

• You have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing based on our legitimate interest. To use these rights, email [email protected].
• You can lodge a complaint with a data protection authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
• Giving us your data is voluntary, but we need it to sell you a pattern.
• We don't use your data for automated decision-making or profiling.

7. Changes

We update this policy when something changes. The date at the top shows the current version.