Privacy Policy

Last updated 22 October 2026

Beige Knot is a small handmade studio run by Joanna Kiraga at Unit 2C, Clubb's Yard, May Avenue, Gravesend, Kent DA11 8RH. Joanna is responsible for the personal information collected through this website (the "data controller").

We only ask for what we need to send your order, run your class and answer your questions. We never sell your information. If anything here is unclear, email [email protected] or use our contact page.

What we collect and why

• Shop orders: your name, email, delivery address, delivery choice, any gift note and what you bought, so we can make, send and support your order. Payment is taken by Stripe; we never see or store your full card details.
• Class bookings: your name, email and phone number, the class and the number of places, so we can run the class, send your confirmation and reminder, and contact you if anything changes.
• Gift vouchers: the buyer's name and email, the recipient's name, the recipient's email if you ask us to email the voucher, and your message.
• Your account: your email, name and phone number. We sign you in by emailing a one-time code, so there's no password to store.
• Contact form: your name, email and message, which go to our inbox so we can reply.
• Waitlists and "make one for me" requests: your name and email, so we can tell you when a place opens up or a piece is back.
• Newsletter: your email, only if you sign up. Every newsletter has an unsubscribe link.
• Chat assistant: the messages you type, so the assistant can answer. Please don't share card or bank details in the chat (we hide card numbers if you do).
• Website visits: our server records your IP address, the pages you ask for and your browser type, to keep the site secure and fix problems.

The law lets us use your information for these reasons: to carry out an order, booking or request you make (contract); to keep tax and accounting records (legal obligation); to keep the site safe and send a few useful service emails (legitimate interests); and, for the newsletter and analytics or advertising cookies, because you said yes (consent). You can take back your consent at any time.

Emails we send

• Order and booking confirmations, delivery or collection updates, and messages about your booking.
• A reminder the day before your class, and a thank-you the day after with care tips and an invitation to leave a review.
• If you start checking out and don't finish, one reminder email a few hours later. It has a link to stop any future reminders.
• Newsletters, only if you signed up.

Cookies and similar storage

Some cookies and browser storage are needed for the site to work, so they don't need your permission:

• a sign-in cookie when you sign in to your account or book a class;
• Stripe's cookies on the payment form, which help prevent fraud;
• Cloudflare's security cookies, which protect the site from attacks;
• storage in your browser for your basket, your cookie choice, light or dark mode, a checkout in progress and your current chat.

Others are used only if you allow them:

• Analytics: Google Analytics cookies (_ga, _ga_…) show us how people find and use the site. They last up to 2 years.
• Advertising: Google Ads cookies (_gcl_…) tell us whether an advert led to a sale. They last up to 90 days.

Until you say yes, Google may still receive a basic signal that a page was viewed, without cookies or anything that identifies you, so it can estimate visit numbers. You can change your mind at any time in Cookie settings, also linked at the bottom of every page. If you turn analytics or advertising off, we delete those cookies from your browser.

Who we share it with

We use a few trusted services to run the shop. They only use your information to provide their service to us:

• Stripe takes card payments and refunds.
• Google (Analytics and Ads) measures visits and sales, only if you allow it.
• Cloudflare delivers and protects the website and stores our encrypted backups.
• Our email provider sends order, booking and newsletter emails.
• Our AI provider writes the chat assistant's replies from the messages you type.
• The postal or courier service receives your name and address to deliver your parcel.

Some of these companies process information outside the UK, mainly in the USA. When they do, it's protected by UK-approved safeguards such as the UK–US data bridge or standard contract clauses.

How long we keep it

• Orders, class bookings and gift voucher purchases: six years, because UK tax rules require it.
• Your account: until you delete it. You can do this yourself on your account page.
• Newsletter: until you unsubscribe.
• Chat conversations: 7 days.
• Class waitlists: until the class starts.
• "Make one for me" requests: 90 days after we've dealt with them, or 12 months if a piece never comes back.
• Contact form messages: as long as we need to answer and follow up.
• Server logs: about two weeks.
• Encrypted backups: up to 90 days.

If you ask us to stop sending basket reminders, we keep your email address on a do-not-send list so we don't send you another.

Your rights

You can ask us for a copy of the information we hold about you, and ask us to correct it, delete it, limit how we use it, or send it to you in a format you can reuse. You can also object to how we use it. Email [email protected] and we'll reply within one month.

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

If we change how we use your information, we'll update this page and the date at the top.