Privacy policy

Last updated: December 19, 2025

This Privacy Policy describes how The Small Pattern (the “Site,” “we,” “us,” or “our”) collects, uses, and discloses your personal information when you visit, use our services, make a purchase from www.thesmallpattern.com (the “Site”), or otherwise communicate with us regarding the Site (collectively, the “Services”). For the purposes of this Privacy Policy, “you” and “your” refer to you as a user of the Services, whether you are a customer, a website visitor, or another individual whose information we have collected under this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last Updated” date, and take any other measures required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from a variety of sources as described below. The information we collect and use varies depending on how you interact with us.

In addition to the specific uses listed below, we may use the information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

Personal Information We Collect

The types of personal information we obtain about you depend on how you interact with our Site and use our Services. When we use the term “personal information,” we mean information that identifies, relates to, describes, or can be associated with you. The sections below describe the categories and specific types of personal information we collect.

Information We Collect Directly From You

Information you provide directly to us through our Services may include:

  • Contact details, including name, address, phone number, and email.

  • Order information, including name, billing address, shipping address, payment confirmation, email address, and phone number.

  • Account information, including username, password, security questions, and other information used for account security purposes.

  • Customer support information, including information you choose to provide in communications with us, such as when you submit a message through the Services.

Some features of the Services may require you to provide certain information about yourself directly. You may choose not to provide this information, but doing so may prevent you from using or accessing these features.

Information We Collect About Your Use

We may also automatically collect certain information about your interaction with the Services (“Usage Data”). To do so, we may use cookies, pixels, and similar technologies (“Cookies”). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, network connection information, your IP address, and other information related to your interaction with the Services.

Information We Obtain From Third Parties

Finally, we may obtain information about you from third parties, including vendors and service providers that may collect information on our behalf, such as:

  • Companies that support our Site and Services, such as Shopify.

  • Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process payments to fulfill your orders and provide the products or services you requested under our contract with you.

  • When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we or third parties we work with may automatically collect certain information using online tracking technologies such as pixels, web beacons, software development kits, third-party libraries, and cookies.

Any information obtained from third parties will be handled in accordance with this Privacy Policy. See also the section “Third-Party Websites and Links.”

How We Use Your Personal Information

  • Provision of Products and Services: We use your personal information to provide the Services to fulfill our contract with you, including processing your payments, fulfilling your orders, sending notifications regarding your account, purchases, returns, exchanges, or other transactions, creating, maintaining, and otherwise managing your account, organizing shipping, facilitating returns and exchanges, and other account-related features and functionalities We may also enhance your shopping experience by allowing Shopify to match your account with other Shopify services you may choose to use. In this case, Shopify will handle your information as set forth in its Privacy Policy and Consumer Privacy Policy.

  • Marketing and Advertising: We may use your personal information for marketing and promotional purposes, such as sending marketing, advertising, and promotional communications via email, text, or mail, and showing you advertisements for products or services. This may include using your personal information to better personalize the Services and advertising on our Site and other websites. If you reside in the EEA, the legal basis for this processing is our legitimate interest in selling our products under Article 6(1)(f) GDPR.

  • Security and Fraud Prevention: We use your personal information to detect, investigate, or take action regarding potential fraudulent, illegal, or harmful activity. If you choose to use the Services and register an account, you are responsible for keeping your account credentials secure. We strongly advise you not to share your username, password, or other login details with anyone. If you believe your account has been compromised, contact us immediately. If you reside in the EEA, the legal basis for this processing is our legitimate interest in keeping our website secure for you and other customers under Article 6(1)(f) GDPR.

  • Communication with You and Service Improvement: We use your personal information to provide customer support and improve our Services. This is in our legitimate interest to be responsive to you, provide effective services, and maintain our business relationship with you under Article 6(1)(f) GDPR.

Cookies

Like many websites, we use cookies on our site. For specific information about the cookies we use to manage our store with Shopify, see https://www.shopify.com/legal/cookies. We use cookies to manage and improve our Site and Services (including remembering your actions and preferences), conduct analytics, and better understand user interaction with the Services (in our legitimate interest to operate, improve, and optimize the Services). We may also allow third parties and service providers to use cookies on our Site to better personalize services, products, and advertising on our Site and other websites.

Most browsers accept cookies by default, but you can choose to set your browser to remove or reject cookies through your browser settings. Note that removing or blocking cookies may negatively impact your user experience and may cause certain Services or functionalities to malfunction or be unavailable. Additionally, blocking cookies may not completely prevent how we share information with third parties, such as our advertising partners.

How We Share Your Personal Information

In certain circumstances, we may share your personal information with third parties for contractual, legitimate, and other purposes subject to this Privacy Policy. These circumstances may include:

  • With vendors or other third parties that perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, order fulfillment, and shipping).

  • With business and marketing partners to provide services and advertise to you. Our business and marketing partners will use your information in accordance with their privacy policies.

  • When you direct, request, or otherwise consent to our disclosure of certain information to third parties, e.g., to ship products to you or through the use of social media widgets or login integrations.

  • With our affiliates or otherwise within our corporate group, in our legitimate interest in managing a successful business.

  • In connection with a business transaction, such as a merger or bankruptcy, to comply with applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

the following categories of personal and sensitive personal information about users for the purposes described above in “How We Collect and Use Your Personal Information” and “How We Share Personal Information”:


Category Recipient Categories
  • Identifiers, such as basic contact details and certain order and account information
  • Commercial information, such as order information, purchase information, and customer support information
  • Internet or other network activity, such as usage data
  • Geolocation data, such as locations determined from an IP address or other technical measures
  • Recipients: Vendors and third parties that perform services on our behalf (e.g., ISPs, payment processors, order fulfillment partners, customer support partners, and data analytics providers),
  • business and marketing partners, 
  • affiliates.

 

Recipients: Vendors and third parties that perform services on our behalf (e.g., ISPs, payment processors, order fulfillment partners, customer support partners, and data analytics providers), business and marketing partners, affiliates.

We do not use or disclose sensitive personal information without your consent or for the purpose of inferring characteristics about you.

With your consent, we share personal information for advertising and marketing purposes as follows.

Third-Party Websites and Links

Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to non-affiliated or non-controlled sites, you should review their privacy, security, and other terms and policies. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on those sites. Information provided in public or semi-public places, including information shared on third-party social networking platforms, may also be visible to other users of the Services and/or users of such third-party platforms without limitations on their use by us or a third party. Inclusion of such links by us does not imply endorsement of the content of such platforms or their owners or operators, except as disclosed on the Services.

Children’s Data

The Services are not intended for use by children, and we do not knowingly collect any personal information from children. If you are the parent or guardian of a child who has provided us with personal information, you may contact us using the contact details below to request its deletion.

As of the effective date of this Privacy Policy, we are not aware that we “share” or “sell” (as defined under applicable law) personal information of individuals under the age of 16.

Security and Retention of Your Information

Please note that no security measure is perfect or impenetrable, and we cannot guarantee “perfect security.” Additionally, all information you provide to us may not be secure during transmission. We recommend not using insecure channels to communicate sensitive or confidential information.

How long we retain your personal information depends on various factors, such as whether we need the information to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

Your Rights

Depending on where you live, you may have some or all of the rights listed below regarding your personal information. These rights are not absolute, may only apply in certain circumstances, and in some cases, we may deny your request as permitted by law.

  • Right of Access/Knowledge: You may have the right to request access to personal information we hold about you, including details about how we use and share your information.

  • Right of Deletion: You may have the right to request deletion of personal information we hold about you.

  • Right of Rectification: You may have the right to request correction of inaccurate personal information we hold about you.

  • Right to Portability: You may have the right to receive a copy of personal information we hold about you and request its transfer to third parties, in certain circumstances and with certain exceptions.

  • Right to Explicitly Opt Out of Sale, Sharing, or Targeted Advertising: You may have the right to request that we do not “sell” or “share” your personal information or opt out of processing your personal information for purposes considered “targeted advertising” as defined under applicable privacy laws. If you visit our Site with the Global Privacy Control signal enabled, depending on your location, we will automatically treat it as an explicit opt-out request for “sale” or “sharing” of information for the device and browser you are using to visit the Site.

  • Restriction of Processing: You may have the right to request that we stop or limit our processing of personal data.

  • Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw such consent.

  • Recourse: You may have the right to appeal our decision if we refuse to process your request. You can do so by responding directly to our denial.

  • Managing Communication Preferences: We may send you promotional emails, and you can opt out at any time using the unsubscribe option in our emails. If you opt out, we may still send you non-promotional emails, such as those regarding your account or orders.

You may exercise any of these rights as indicated on our Site or by contacting us using the contact information provided below.

We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to your request. In accordance with applicable law, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require proof that you have authorized them to act on your behalf, and we may require you to verify your identity directly with us. We will respond to your request in a timely manner as required by applicable law.

Complaints

If you have complaints about how we handle your personal data, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, depending on your location, you may have the right to challenge our decision by contacting us using the contact information below or filing a complaint with the local data protection authority. For the EEA, you can find a list of responsible data protection authorities here.

International Users

Please note that we may transfer, store, and process your personal information outside the country in which you reside. Your personal data may also be processed by staff, service providers, and third-party partners in these countries.

If we transfer your personal information outside of Europe, we will rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or any equivalent contract issued by the UK competent authority, as applicable, unless the data transfer is to a country determined to provide an adequate level of protection.

Contact

If you have questions about our privacy practices or this Privacy Policy, or if you wish to exercise any rights available to you, call or email us at info@thesmallpattern.com or contact us at Via Casilina 7L, Roma, RM, 00182, IT.

For the purposes of applicable data protection laws, unless otherwise explicitly stated, we are the controllers of personal data.