Last updated: 3 November 2026
This Privacy Policy explains what personal data Wood Burning Patterns (“we”, “us”, “our”) collects when you visit woodburningpatterns.com, join our newsletter or buy a digital product from us, how we use that data, who we share it with, how long we keep it and what rights you have. We keep the data we collect to the minimum we need to run the site, send the emails you asked for and deliver what you bought.
1. Who is responsible for your data
The data controller is Wood Burning Patterns, operated from Serbia. For any privacy question or request, write to admin@woodburningpatterns.com.
2. Data we collect
When you browse the site
Our web server records technical information such as your IP address, browser type, device type, the pages you request, the referring page and the time of the request. These server logs are used for security, troubleshooting and protecting the site against abuse. We also use privacy-friendly analytics to count visits and see which pages are popular. Details about cookies and analytics are in our Cookie Policy.
When you join the newsletter
If you sign up for our newsletter or a free pattern download, we collect your email address, the first name if you provide it, the date and source of your sign-up, your consent record (including the IP address and time of confirmation) and your subscription status. When you receive our emails, we may record whether an email was delivered, opened or clicked, so we can measure what readers find useful and keep our list healthy.
When you buy a product
Purchases are processed by Gumroad (see section 4). We receive the information needed to deliver your order and support you: your name, email address, country, the product you bought, the price paid and the order reference. We never see or store your full card number, card security code or bank login details.
When you contact us
If you email us, we keep your email address, your message and our reply so we can answer you and follow up if needed.
3. Why we use your data and our legal bases
- Sending the newsletter and free downloads, based on your consent. You can withdraw consent at any time with the unsubscribe link in every email.
- Delivering products and order support, because it is necessary to perform our contract with you.
- Keeping accounting and tax records, because the law requires it.
- Protecting the site and preventing fraud, spam and abuse, based on our legitimate interest in keeping the site and our email sending safe and reliable.
- Understanding how the site is used, based on our legitimate interest, or on your consent where cookies that need consent are involved.
- Answering your messages, based on our legitimate interest in replying to people who contact us.
We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
4. Payments through Gumroad
Our digital products are sold through Gumroad, Inc., which handles checkout and payment processing and may act as the merchant of record for your purchase. Your payment details are entered on Gumroad’s checkout and processed by Gumroad and its payment partners under Gumroad’s Privacy Policy. Gumroad may also handle sales tax or VAT on our behalf.
What you will see on your card statement: because Gumroad processes the payment, the charge on your card or bank statement will usually show a Gumroad reference (for example “GUMRD.COM” followed by our store or product name) rather than “Wood Burning Patterns”. If you see a charge you do not recognise, please email us with the date and amount before contacting your bank, and we will help you identify it.
5. Email marketing with Mautic and Amazon SES
We manage our newsletter list with Mautic, an open-source email marketing platform that we host on our own server. Your subscriber details are stored in that system and are not handed to a third-party marketing company.
Emails are delivered through Amazon Simple Email Service (Amazon SES), operated by Amazon Web Services. Amazon SES processes your email address and the message content in order to deliver it, and returns delivery, bounce and complaint notifications to us (through Amazon SNS) so we can stop sending to addresses that bounce or report our emails as unwanted. Amazon Web Services acts as our processor under its data processing terms.
Our emails may contain a small tracking pixel and tracked links that tell us whether an email was opened and which links were clicked. You can block this by turning off automatic image loading in your email program.
6. Other service providers
- Hosting: the website and our email system run on servers we rent from Vultr Holdings, LLC.
- Spam protection: if we enable forms, Akismet (Automattic Inc.) may check submissions for spam.
- Analytics: as described in the Cookie Policy.
- Professional advisers and authorities: accountants, lawyers, payment providers or public authorities where this is necessary for legal, tax or fraud prevention purposes.
Some of these providers are based in, or process data in, countries outside Serbia, the European Economic Area and the United Kingdom, including the United States. Where that happens, transfers rely on adequacy decisions, the European Commission’s Standard Contractual Clauses or other safeguards recognised by law.
7. Affiliate links
Some posts may contain affiliate links to tools and supplies. If you click one and buy something, we may earn a small commission at no extra cost to you. When you click such a link you leave our site, and the retailer may set its own cookies and collect data under its own privacy policy. We do not receive your name or payment details from those purchases.
8. How long we keep your data
- Active subscribers: for as long as you remain subscribed and keep engaging with our emails.
- Unsubscribed and inactive subscribers: if you unsubscribe, or if you have not opened or clicked any of our emails for a long period, your subscriber profile is kept for a maximum of one year and then deleted from our system. You can ask us to delete it sooner at any time.
- Suppression records: after deletion we may keep a minimal record (your email address, or a non-reversible fingerprint of it, with the reason and date) so that our system never emails you again by accident, for example if your address is imported or entered again. This record is used only for that purpose.
- Bounces and complaints: addresses that hard-bounce or mark our emails as spam are added to a suppression list and kept there for as long as we send email, to protect our sender reputation and to respect your choice.
- Purchase records: kept for as long as tax and accounting laws require, which can be several years.
- Fraud, disputes and legal claims: where there is a chargeback, suspected fraud, a complaint, a misuse of our products or a legal claim, we may keep the related records until the matter is closed and any limitation period has passed.
- Emails you send us: usually up to two years after the conversation ends, unless they relate to an order or a dispute.
- Server logs: normally deleted or rotated within 30 days, unless needed to investigate a security incident.
- Backups: deleted data may remain in encrypted backups for a short time until those backups are overwritten in the normal cycle.
9. Your rights
Depending on where you live, including under the Serbian Law on Personal Data Protection, the EU GDPR, the UK GDPR and US state privacy laws, you can ask us to:
- tell you what personal data we hold about you and give you a copy of it;
- correct data that is wrong or incomplete;
- delete your data;
- restrict or object to certain uses of your data, including direct marketing;
- send your data to you or another provider in a portable format;
- withdraw your consent at any time, without affecting what was done before.
To use any of these rights, email admin@woodburningpatterns.com. We may ask you to confirm the request from the email address concerned so we know it comes from you. We reply within one month. Some data may have to be kept even after a deletion request, as described in section 8, but only for the stated purposes.
If you think we have handled your data unlawfully, you can complain to a data protection authority. In Serbia this is the Commissioner for Information of Public Importance and Personal Data Protection. In the EU or UK, you can contact the authority in the country where you live. We would appreciate the chance to sort out your concern first.
10. Security
The site is served over HTTPS, access to our systems is limited and protected with strong credentials, and software is kept up to date. No system is perfectly secure, so if we ever become aware of a breach that puts your data at risk, we will act quickly and notify you and the authorities where the law requires it.
11. Children
This site is intended for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us their data, please contact us and we will delete it.
12. AI tools
We use AI tools, including OpenAI services accessed through the AI Engine plugin on our server, to help write articles and create images and patterns. These tools are used by us to produce content. We do not send visitors’ or subscribers’ personal data to AI services, and we do not use AI to make decisions about you. If we ever add an AI feature that visitors interact with directly, such as a chat assistant, we will update this policy before it goes live. See our Disclaimer for how AI-assisted content is labelled.
13. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows the latest version. If a change is significant, we will tell newsletter subscribers by email.