Last updated: January 2026

At EmbArtCreations.com, your privacy is very important to us. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and relevant regulations in the United States and other jurisdictions. Please read this Privacy Policy carefully. It may be updated from time to time, so we encourage you to review it periodically. 

1. Website Information & Data Controller

This Privacy Policy applies to the website operating at: https://www.embartcreations.com

The operator of the Website and the Data Controller within the meaning of GDPR is: EmbArtCreations based in Poland.
Contact email address: info@embartcreations.com

The Operator is the Administrator (Controller) of your personal data with regard to data voluntarily provided through the Website.

2. Scope of Services

EmbArtCreations.com allows users worldwide to:

  • purchase digitized embroidery designs and related products,

  • subscribe to newsletters and promotional communications,

  • contact us via forms or email,

  • receive information about offers, discounts, and updates.

The information we collect is used to fulfill purchases, provide services, and improve user experience.

3. Personal Data We Collect

We may collect the following categories of personal data:

  • name and surname,

  • email address,

  • billing information (where required),

  • information provided in contact forms,

  • technical data such as IP address (in anonymized form), browser type, device information,

  • usage data related to interactions with the Website.

Providing personal data is voluntary but may be necessary to use certain services (e.g. completing a purchase or receiving a newsletter).

4. Purposes and Legal Bases of Processing (GDPR Art. 6)

Personal data is processed for the following purposes and legal bases:

  • Performance of a contract (Art. 6(1)(b) GDPR)
    – processing orders, delivering digital products, handling payments and customer service.

  • Legal obligations (Art. 6(1)(c) GDPR)
    – accounting, tax, and record-keeping obligations where applicable.

  • Legitimate interests of the Controller (Art. 6(1)(f) GDPR)
    – website analytics, security, improvement of services, and statistical analysis.

  • Consent (Art. 6(1)(a) GDPR)
    – newsletters, marketing communications, cookies requiring consent.

Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Newsletters & Marketing Communications

We offer newsletters and promotional emails to users who have given their consent. These communications may include information about new products, offers, or updates.

You may unsubscribe at any time by clicking the “Unsubscribe” link included in each email or by contacting us directly.

6. Cookies and Similar Technologies

The Website uses cookies and similar technologies to ensure proper functionality, improve user experience, and analyze traffic.

Cookies may include:

  • essential cookies (necessary for website operation),

  • analytical cookies (e.g. Google Analytics),

  • marketing or preference cookies (where applicable).

Users may manage or withdraw cookie consent at any time through their browser settings or the cookie consent mechanism available on the Website.

7. Analytics & Marketing Tools

The Operator uses Google Analytics (Google LLC, USA) to analyze website traffic and usage patterns.

  • IP anonymization is enabled.

  • Only anonymized and aggregated data is processed.

  • Data is used solely to improve the Website and its functionality. 

8. Hosting & Data Storage

The Website is hosted and technically maintained on servers operated by: home.pl

Personal data is processed only by trusted service providers acting as data processors under data processing agreements.

9. Data Security Measures

The Operator applies appropriate technical and organizational measures to protect personal data, including:

  • SSL/TLS encryption for data transmission,

  • encrypted databases,

  • restricted access to personal data,

  • protection against unauthorized access, loss, or misuse of data.

10. Data Retention Period

Personal data is stored only for as long as necessary to achieve the purposes for which it was collected, including:

  • order and billing data – as required by applicable laws,

  • newsletter data – until consent is withdrawn,

  • analytical data – for a limited period in anonymized form.

11. User Rights (GDPR)

Users, particularly those located in the European Union, have the right to:

  • access their personal data,

  • rectify inaccurate or incomplete data,

  • request deletion of personal data (“right to be forgotten”),

  • restrict processing,

  • data portability,

  • object to processing,

  • withdraw consent at any time,

  • lodge a complaint with a supervisory authority.

Requests regarding personal data may be submitted via email: info@embartcreations.com

12. Automated Decision-Making & Profiling

The Website does not use automated decision-making or profiling that produces legal or similarly significant effects on users.

13. International Users

EmbArtCreations.com operates globally. By using the Website, you acknowledge that your data may be processed in accordance with this Privacy Policy and applicable international data protection standards.

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy. Any changes will be published on this page with an updated revision date.