PRIVACY POLICY

1. Who is responsible
Open+Pattern, a project of TSOM | The Structure of Magic
Hugh Clarke
Tulpenstraße 21, 91086 Aurachtal, Germany
Email: info@openpattern.io · Phone: +49 151 15386810

2. Hosting and server logs
This website is hosted by an external hosting provider, who processes data on our behalf under a data processing agreement (Art. 28 GDPR). When you visit, the server automatically records technical data (IP address, date and time, pages visited, browser and device type, referring URL). This is needed to deliver and secure the website (legal basis: Art. 6(1)(f) GDPR, legitimate interest). Log data is deleted after 14 days. If our provider processes data outside the EU, transfers are protected by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

3. Downloads and orders (WooCommerce)
When you download a pattern or place an order, we process the details you enter, such as your name, email address, billing details and the products you chose. We use this to provide the files and handle your order (Art. 6(1)(b) GDPR). Order and invoice records are kept for the periods required by German commercial and tax law (up to 10 years) (Art. 6(1)(c) GDPR). After that they are deleted.

4. Payments (PayPal, Stripe)
If you choose to pay, payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. PayPal receives the data needed to process the payment (Art. 6(1)(b) GDPR). We do not see or store your full payment details. PayPal’s privacy policy: https://www.paypal.com/de/legalhub/privacy-full
Card and other payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland, including through WooPayments (Automattic Inc.). Stripe receives the data needed to process the payment and to prevent fraud (Art. 6(1)(b) and (f) GDPR). Data may be transferred to the USA; transfers are protected by the EU–US Data Privacy Framework and/or Standard Contractual Clauses. Stripe’s privacy policy: https://stripe.com/privacy

5. Contact by email or phone
If you contact us, we process your details to answer your enquiry and, where relevant, to prepare or carry out a contract (Art. 6(1)(b) GDPR). Our email is handled by an external email provider on our behalf. We delete enquiries once they are no longer needed, unless legal retention periods apply.

6. Jetpack (Automattic)
We use Jetpack for website security, statistics and performance. Jetpack processes data such as IP addresses and page views, which may be transferred to Automattic Inc. in the USA. Legal basis: Art. 6(1)(f) GDPR. More: https://automattic.com/privacy/

7. Cookies
This website does not use cookies for advertising or tracking. Our shop uses technically necessary cookies to keep your cart and complete your order, for example woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session_. These are required for the service you request (§ 25(2) TDDDG, Art. 6(1)(b) GDPR).

8. External links
Our site links to Instagram and to tsom.design. No data is shared with Instagram unless you click the link; Instagram’s (Meta’s) privacy policy then applies.

9. Your rights
You have the right to access, rectify, erase or restrict the processing of your data, to data portability, and to object to processing (Art. 15–21 GDPR). You can also complain to a supervisory authority, for example the Bavarian Data Protection Authority (BayLDA), Ansbach.

10. Changes
We may update this policy when our website or the law changes.

Last updated: 13/10/2026