The short version
The controller of your personal data is City Embroidery Ltd (trading as ProfitMuncher), 1 Craigswood Gate, Baillieston, Glasgow G69 7FD, United Kingdom. Reach our privacy contact at [email protected].
What we collect
From you
Account details (name, email, workshop name, country), billing details, and anything you choose to put in your products and storefronts.
From your customers
When your customers buy from your storefront we process their order, contact and payment information on your behalf — as a processor, under our Data Processing Agreement.
From your browser
Standard log data (IP address, browser, pages visited) and a small set of cookies — see the Cookie Notice. Our own first-party page-view counters store a hashed (one-way) form of the IP address, not the raw address.
Why we collect it — and the lawful basis
- To provide the service you've signed up for — performance of our contract
- To bill you and meet tax obligations — legal obligation (subscription billing is handled by Lemon Squeezy as merchant of record)
- To keep the service secure and investigate abuse — legitimate interests
- To understand site traffic with our own first-party counters — legitimate interests
- To measure whether our advertising works (Meta Pixel) — consent, only if you press Accept on the cookie banner
- To send the occasional newsletter — consent, opt-in, unsubscribe any time
International transfers
Most data stays in the UK and EU. Where a provider processes data in the United States (Cloudflare, Lemon Squeezy, Meta), we rely on the UK's approved transfer safeguards — the UK Addendum / International Data Transfer Agreement and, where the provider is certified, the UK–US Data Bridge.
Your rights
Under UK GDPR you can ask to see, correct, export or delete the personal data we hold about you, object to processing based on legitimate interests, and withdraw consent at any time. Email [email protected] and we'll respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
How long we keep it
We keep your data while your account exists. You can ask us to delete your account and personal data at any time via [email protected]. Billing and tax records are retained for 7 years as required by HMRC.
Email privacy@ — we respond within one month, usually much faster.