Legal

Privacy policy

1. Data controller

The controller of the personal data collected through this website is:

Owner: María Cecilia Losada Palazzo
Tax ID (NIF): 48189386Q
Address: C/ Joan Maragall 52, 1º 2º, 08810 Sant Pere de Ribes, Barcelona, Spain
Email: [email protected]
Website: cecilodesigns.com
Trade name: CeciLo Designs

This Privacy Policy explains what personal data we may collect, what we use it for, how long we may keep it, who we may share it with and what rights you have over it.


2. What personal data we may collect

Depending on how you use CeciLo Designs, we may process different categories of data.

Identification and contact data

For example:

  • First and last name.
  • Email address.
  • Telephone number, when necessary.
  • Postal address and shipping details.
  • Country of residence.

Data related to purchases and invoicing

For example:

  • Products purchased.
  • Order number and history.
  • Information needed for invoicing.
  • Payment status.
  • Returns or incidents related to a purchase.

Full bank card details are not stored directly by CeciLo Designs when payment is processed through external providers such as Stripe, PayPal or Mercado Pago.

Data related to your account

When you create an account we may process information related to:

  • Login details.
  • Order history.
  • Patterns and files purchased.
  • Courses and workshops purchased.
  • Progress or access to training content when the platform has this feature.

Data provided through forms

When you contact CeciLo Designs we may process the data you voluntarily provide to handle your enquiry.

Data related to the newsletter and commercial communications

If you subscribe to the newsletter we may process:

  • Name, when you provide it.
  • Email address.
  • Language.
  • Forms through which you subscribed.
  • Segments or tags associated with your interests, purchases or interaction with CeciLo Designs.

Technical and browsing data

Depending on the tools finally used on the website, certain technical data may be collected, such as:

  • IP address.
  • Device type.
  • Browser.
  • Operating system.
  • Pages visited.
  • Origin of the visit.
  • Interaction with the website.
  • Information obtained through cookies or similar technologies.

The specific use of these technologies is detailed in the Cookie Policy.


3. What we use your data for

Your data may be processed for the following purposes.

Managing your purchases

We will use the data needed to:

  • Process orders.
  • Manage payments.
  • Deliver digital products.
  • Prepare and ship physical products.
  • Issue invoices.
  • Manage returns.
  • Resolve incidents related to a purchase.

The main legal basis for this processing is the performance of the sales contract concluded with you and compliance with the legal obligations arising from that relationship.

Managing courses and workshops

When you purchase a training we may use your data to:

  • Create and maintain your access.
  • Identify the content purchased.
  • Provide access to videos, documents and materials.
  • Manage live workshops.
  • Send necessary communications related to the training.

The legal basis is the performance of the corresponding contract.

Creating and managing your account

If you create an account on CeciLo Designs we will use your data to give you access to your private area and to the products and content associated with it.

Handling enquiries

When you write to us through a form or email we will use the data provided to reply to your enquiry and carry out the necessary follow-up.

The legal basis may be your consent, the application of pre-contractual measures or our legitimate interest in properly handling communications related to our activity, as the case may be.

Sending the newsletter and commercial communications

If you voluntarily subscribe, we may send you:

  • Newsletter.
  • CeciLo Designs news.
  • New patterns.
  • Courses and workshops.
  • Events.
  • Launches.
  • Promotions.
  • Other content related to knitting, crochet, design and CeciLo Designs’ activity.

The legal basis will be your consent.

You can unsubscribe at any time using the link included in the emails.

Segmentation of communications

We may organise subscribers into different segments to send more relevant communications.

This segmentation may be based, among other criteria, on:

  • Language.
  • Form used to sign up.
  • Products purchased.
  • Courses or workshops purchased.
  • Stated interests.
  • Interaction with certain campaigns.

This information will be used to adapt communications and avoid, for example, sending content that does not match the recipient’s language or interests.


4. Flodesk and FuseWP

CeciLo Designs uses or may use Flodesk as an email marketing platform and FuseWP to connect certain actions carried out on the website with the corresponding segments within the email marketing platform.

This may allow, for example, a person to be automatically added to certain segments according to:

  • The form through which they sign up.
  • Their language.
  • A product purchased.
  • A course or workshop purchased.
  • Other actions configured within the website.

Sending commercial communications will require the corresponding legal basis and, where necessary, the prior consent of the person concerned.


5. Payment providers

To process purchases, the following providers may be used:

  • Stripe.
  • PayPal.
  • Mercado Pago.

When you select one of these payment methods, certain data needed to process the transaction will be processed by the corresponding provider in accordance with its own privacy policies and conditions.

CeciLo Designs does not directly store the full bank card details processed by these providers.


6. Other technology providers

To provide our services we may use providers acting as data processors or, where applicable, as independent controllers.

These may include providers of:

  • Hosting and servers.
  • Web development and maintenance.
  • Email marketing.
  • Payment systems.
  • Logistics and transport.
  • Invoicing and administrative management.
  • Videoconferencing.
  • Video and multimedia content.
  • Web analytics.
  • Digital advertising.
  • Security and fraud prevention.
  • Cookie management.

They will only have access to the data needed to provide the corresponding services.

The final list of analytics, advertising, video and cookie tools must match the services actually installed and active when the website is published.


7. Disclosure of data

Your personal data will not be sold to third parties.

It may be disclosed, when necessary, to:

  • Technology providers needed to provide the service.
  • Transport and logistics companies to deliver physical orders.
  • Payment providers.
  • Tax, accounting or legal advisers when necessary.
  • Public administrations, authorities or courts when there is a legal obligation.

8. International data transfers

Some technology providers used by CeciLo Designs may be established outside the European Economic Area or process data from third countries.

When international transfers of personal data take place, they will be carried out in accordance with the mechanisms provided by the General Data Protection Regulation, such as European Commission adequacy decisions, standard contractual clauses or other legally recognised safeguards.

The specific information will depend on the providers active at any given time.


9. How long we keep your data

Personal data will be kept for the time needed to fulfil the purpose for which it was collected.

Purchases and invoicing

Data related to purchases, payments and invoicing will be kept for the periods required by tax, accounting, commercial and other applicable legislation.

User account

Data related to your account will be kept while it remains active and afterwards for the periods needed to address possible legal liabilities.

Courses and digital products

The information needed to provide access to digital products may be kept while you have a right of access to that content and afterwards for the legally necessary periods.

Newsletter

Data used for commercial communications will be kept while you maintain your consent.

When you unsubscribe we will stop sending you those communications, without prejudice to keeping the minimum information needed to prove the unsubscription or the consent previously given where there is an obligation or legitimate interest to do so.

Enquiries

Data provided through enquiries will be kept for the time needed to handle them and afterwards for the period needed to manage possible liabilities.


10. Your rights

Data protection legislation gives you several rights over your personal data.

You can request:

  • Access: to know what personal data we process about you.
  • Rectification: to correct inaccurate or incomplete data.
  • Erasure: to request the deletion of your data where applicable.
  • Objection: to object to certain processing.
  • Restriction: to request that the processing of your data be restricted in certain circumstances.
  • Portability: to receive certain data in a structured format and transmit it to another controller where legally applicable.

When processing is based on your consent, you can withdraw it at any time.

Withdrawing consent does not affect the lawfulness of the processing carried out before its withdrawal.

To exercise these rights you can write to:

[email protected]

In certain cases we may request additional information to verify your identity before processing the request.


11. Right to lodge a complaint

If you consider that the processing of your personal data does not comply with current legislation, you have the right to lodge a complaint with the competent data protection authority.

In Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD).


12. Data security

CeciLo Designs will adopt reasonable and appropriate technical and organisational measures to protect personal data against:

  • Loss.
  • Alteration.
  • Unauthorised access.
  • Disclosure.
  • Destruction.
  • Unlawful processing.

However, no system connected to the Internet can guarantee absolute security.


13. Minors’ data

CeciLo Designs’ products and services are not specifically aimed at minors.

When it is necessary to obtain consent for the processing of minors’ personal data, the rules established by current legislation will apply.


14. Third-party links and services

The website may contain links or embedded content from external platforms.

When you access an external service, the processing carried out directly by that provider will also be subject to its own Privacy Policy.


15. Changes to this Privacy Policy

This Privacy Policy may be updated to adapt it to:

  • Legislative changes.
  • New services.
  • New technology providers.
  • Changes in CeciLo Designs’ features.
  • New processing of personal data.

The version published on the website will be the one in force at any given time.

Last updated: October 11, 2026