Privacy policy
Privacy Policy
Effective date: July 16, 2026
Ms. Flâneure, a brand of Tendril Inc. ("we," "us"), respects your privacy. This policy explains what we collect when you browse our store, buy a knitting pattern, download your files, or sign up for our emails — why we collect it, and your rights.
1. What we collect.
- Order and checkout data — your name, email address, billing address, what you purchased, when, and at what price, your order history, payment status, and your IP address. Collected when you place an order on our store.
- Download activity — when you download a purchased pattern, our delivery service logs the download together with your IP address and browser information.
- Newsletter sign-up data — your email address and the record and date of your consent, if you join our mailing list.
- Tester-program data — if you apply to test-knit for us, the information you submit in the application form.
We never see or store your full card number, PayPal password, or account credentials — payment is handled entirely by our payment providers, Toss Payments for Korean cards and local payment methods and PayPal (see §7). We collect no special-category data.
2. Why we collect it (purposes and legal bases).
- To fulfil your order — process payment status, deliver your pattern files, and provide customer support (legal basis: performance of a contract, GDPR Art. 6(1)(b)).
- To protect our patterns from piracy — the order-details stamp described in §4 (legal bases: performance of a contract and our legitimate interest in protecting our intellectual property, GDPR Art. 6(1)(f)).
- To keep transaction records the law requires — see §5 (legal basis: legal obligation, GDPR Art. 6(1)(c); Korean e-commerce law).
- To send you news of new pattern releases and tester calls — only if you opted in (legal basis: your consent, GDPR Art. 6(1)(a); withdrawable at any time). Marketing email is separate from the transactional emails that deliver your order.
3. Order email vs. marketing email. Buying a pattern does not subscribe you to our newsletter. Order confirmations and download links are transactional and go to every buyer; marketing email goes only to those who separately consented, and every marketing email carries an unsubscribe link.
4. Your order details are stamped into your pattern files (anti-piracy). Each pattern PDF you purchase is individually stamped with your name, your email address, your order number and your order date as a license mark — for example: "Licensed to {your-name} · {your-email} · order {your-order-number} · {your-order-date} · © Ms. Flâneure." This is an anti-piracy measure: it marks your copy as licensed to you personally. The stamp lives only inside the file delivered to you; we do not publish or share it, and it contains nothing beyond your own order details. Please keep this in mind if you choose to share your file — your name and email travel with it — which the pattern license does not permit in any case.
5. How long we keep it (retention).
- Marketing email data: until you withdraw consent / unsubscribe, then deleted without undue delay from our list and our processors' systems.
- Order and transaction records: Korean e-commerce law (Act on Consumer Protection in Electronic Commerce, Art. 6 and its Enforcement Decree Art. 6) requires us to retain records of contracts and order withdrawals for 5 years, payment and supply of goods for 5 years, consumer complaints and dispute handling for 3 years, and display/advertising for 6 months — we keep these for the statutory period even if you request deletion, then delete them.
- Download-delivery records (Fileflare): retained until you request deletion, subject to the statutory periods above.
6. Who processes it (processors / sub-processors). We use the following service providers, who act only on our instructions:
| Processor | Role | Data handled | Country |
| Shopify | E-commerce platform (store, cart, checkout) | Name, email, billing address, order history, payment status, IP, cookies | Canada/USA |
| Fileflare (Kestrel Commerce, LLC) | Digital pattern delivery + PDF stamping | Order name, order email, order number/ID, order date, billing address, download IP and browser | USA |
| MailerLite | Marketing email (newsletter) | Email address, consent record | Lithuania (EU) |
| Tally | Sign-up and application forms | Email address, form responses | Belgium (EU) |
| Google LLC | List storage (Google Sheets) | Email address, tester-program data | USA |
| Mailmeteor | Tester-program email delivery | Email address | France (EU) |
We do not sell or share your personal data with third parties for their own purposes. Shopify processes your data at our direction as our commerce platform; for more on how Shopify handles shopper data, see Shopify's privacy policy (https://www.shopify.com/legal/privacy/customers).
7. Payments — Toss Payments and PayPal. Korean card and local payments are processed by Toss Payments (토스페이먼츠), a licensed Korean payment gateway (PG) under the Electronic Financial Transactions Act; the payment data you enter is processed under Toss Payments' own privacy policy (https://www.tosspayments.com/privacy-policy), and we receive only your payment status and the order details it returns. International payments are processed by PayPal, which acts as an independent data controller for the payment data you provide it — PayPal, not us, determines how that data is processed under its own privacy statement. We receive only your payment status and the order details PayPal returns; we never receive your full card or account credentials. When you pay, you are also subject to PayPal's Privacy Statement: https://www.paypal.com/privacy.
8. International transfers. Your data is processed outside the Republic of Korea (and, where relevant, outside the EEA) by the providers above. We rely on each provider's data-processing agreement and standard contractual safeguards. (See the Korean version of this policy — switch languages in the header — for the PIPA overseas-transfer disclosure.)
9. Your rights. You may access, correct, delete (erase), restrict, or object to the processing of your personal data, request portability, and withdraw consent at any time — withdrawal is as easy as giving it (use the unsubscribe link in any marketing email, or contact us). Statutory retention (§5) may delay deletion of transaction records until the legal period ends. To exercise any right, email contact@msflaneure.com. You also have the right to lodge a complaint with your local data-protection supervisory authority (and, in Korea, the bodies listed in the Korean version).
10. Security. Access to your data is limited to the operator; our store, storage, and sending tools are protected by account authentication, checkout runs over encrypted connections, and our processors maintain their own technical and organizational safeguards.
11. Cookies. Our store runs on Shopify, which sets cookies: strictly necessary cookies for the cart, checkout, and your session (the store cannot function without them), and analytics cookies that help us understand store performance. Payment pages may set Toss Payments or PayPal cookies under their own policies. For the full list and details, see Shopify's cookie information at https://www.shopify.com/legal/cookies. You can control cookies through your browser settings; blocking strictly necessary cookies may break checkout.
12. Changes. We post changes here with a new effective date and keep prior versions available on request.
13. Contact. Privacy questions or rights requests: contact@msflaneure.com · #505-J83, 30 Nonhyeon-ro 10-gil, Gangnam-gu, Seoul, Republic of Korea. (Pattern support — errata, download trouble — is support@msflaneure.com; privacy matters go to contact@msflaneure.com.)