Privacy Policy

Who we are. Knitferatu, gothic knitwear knitted to order in Italy. Contact: kvlt@knitferatu.com.

What we collect. When you place an order: your name, email, phone, shipping address and the items you bought. That is it. We do not run advertising trackers, we do not sell data, and we do not profile you.

Payments. Card and wallet payments are processed entirely by Stripe. Your payment details never touch our servers. Stripe's privacy policy applies to the payment step.

Why we process your data. To knit your piece, ship it, send you the tracking, and answer your messages (contract performance, art. 6.1.b GDPR). Order records are kept as required by Italian tax law.

Newsletter. The "Join the Kvlt" newsletter uses double opt-in: we store your address only after you click the confirmation link we email you (consent, art. 6.1.a GDPR). Confirmation and welcome emails are delivered through Resend (EU region); your address is stored on Cloudflare infrastructure. Unsubscribe any time by replying to any newsletter email, and your address is deleted.

Analytics. We measure visits with a self-hosted, cookieless instance of Umami: no cookies, no cross-site tracking, IPs are not stored. The statistics are aggregate and anonymous.

Marketing tags. If we run a Pinterest tag for campaign measurement, it loads only after you accept it in the consent banner; declining stores a single preference flag in your browser and nothing else. Without your consent, no marketing tag loads.

Your rights. Access, rectification, deletion, portability, objection: write to kvlt@knitferatu.com and we will act within 30 days. You can lodge a complaint with your local data protection authority.

Cookies. This site sets no advertising or profiling cookies by default. Your cart and preferences are stored locally in your own browser and never leave it until checkout.