Privacy Policy

Privacy Policy

Last updated: May 2026

This Privacy Policy describes how Stitching Studio (“we”, “us” or “our”) collects, uses, and protects the personal information you provide when you visit stitching.studio, contact us through our website, call us, or come to our studio for a fitting.

1. Information we collect

We collect only what is needed to respond to your inquiry and serve you:

  • Contact details— name, email address, and (if you provide it) phone number, supplied through the “Book a fitting” modal or the /contact form.
  • Request details — the service you selected and any message you wrote describing the garment, timeline, or other notes.
  • Technical metadata — IP address (stored as a salted SHA-256 hash only for rate-limit forensics), browser user-agent, a Google reCAPTCHA v3 score, and the timestamp of the submission.
  • Analytics data— anonymized usage signals via Google Analytics 4 (pages visited, approximate location, device class). You can opt out at any time using a browser extension such as Google’s official opt-out add-on.

2. How we use your information

We use the information you provide for the following purposes:

  • To respond to your inquiry and schedule fittings or alterations.
  • To prepare quotes and follow up about pending projects.
  • To protect the contact form from spam and abuse.
  • To improve the website’s structure and content based on aggregated usage patterns.
  • To comply with applicable legal obligations.

3. How we share information

We do not sell or rent your personal information. Limited disclosures occur only to trusted service providers strictly for the purposes above:

  • Hosting & infrastructure — Hetzner (EU) and Cloudflare (network edge).
  • Email and messaging — Telegram Bot API delivers contact form notifications to the studio team.
  • Anti-spam — Google reCAPTCHA v3 for bot detection.
  • Analytics — Google Analytics 4 (anonymized).
  • Legal compliance — when required to comply with a valid court order, subpoena, or law enforcement request.

4. Data retention

Contact form submissions are retained for up to 24 months unless a project is still active, in which case they are kept for the life of the engagement plus one year. Analytics data follows Google’s default 14-month retention. You can request deletion at any time using the contact details below.

5. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your information (subject to legal retention rules).
  • Object to or restrict certain processing.
  • Withdraw consent for marketing communications.
  • Lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at the address below.

6. Cookies

We use a small number of strictly necessary cookies for session security and CSRF protection, plus optional analytics cookies via Google Analytics 4. You can disable cookies in your browser, but some functionality (such as the contact form’s spam protection) may stop working.

7. Children’s privacy

Our services are not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with information, contact us and we will delete it promptly.

8. Security

We use TLS in transit, hashed IP addresses, restricted-access infrastructure, and a least-privilege admin layer to protect your data. No method of transmission is 100% secure; we recommend not sending highly sensitive information through the contact form.

9. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent revision.

10. Contact us

Questions or requests about this policy? Reach out by phone, email, or in person: