The Right Accessories Can Turn Simple Outfits into Thoughtfully Styled Looks.

1. Data Controller Information

The Data Controller responsible for the collection, processing, and use of personal data on this website in accordance with the General Data Protection Regulation (GDPR) and relevant national data protection laws is:

2. Collection and Processing of Personal Data

When visiting www.stitchandmood.com or placing an order for apparel accessories (including belts, headwear, and scarves), personal information is collected solely to fulfill contractual obligations, process transactions, and maintain customer support services.

Data collected may include:

  • Full name and contact details (email address, telephone number)
  • Billing and shipping addresses
  • Order history and transaction records
  • Technical log data (IP address, browser type, and access timestamps necessary for secure website access)

Legal basis for processing: Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(c) GDPR (compliance with legal obligations).

3. Payment Processing Services

All financial transactions on www.stitchandmood.com are processed securely via our external payment processing partner, Stripe (Stripe Payments Europe, Ltd.).

When completing a purchase, transaction-related payment information (such as payment card details, transaction amounts, and billing addresses) is transmitted directly to Stripe for payment verification, fraud detection, and transaction processing. www.stitchandmood.com does not store full payment card numbers on its servers. Stripe acts as a data processor and independent controller for payment verification under strict European security and regulatory standards.

Legal basis for payment data transfer: Article 6(1)(b) GDPR (contractual performance).

4. Data Retention Period

Personal data collected for contractual purposes is stored only for as long as necessary to fulfill the specific purpose for which it was gathered, or as required by statutory retention obligations under German commercial and tax regulations (Handelsgesetzbuch – HGB and Abgabenordnung – AO).

  • Transaction and Accounting Data: In compliance with statutory retention requirements under German commercial and tax laws, commercial correspondence, order documentation, and invoices are retained for up to ten (10) years.
  • Customer Support Records: General inquiries and correspondence are retained for up to three (3) years following resolution, coinciding with standard statutory limitation periods.
  • Technical Logs: Server log files collected for security and operational integrity are deleted automatically after standard technical retention limits expire.

Upon the expiration of applicable statutory retention mandates, stored personal data is routinely deleted or irreversibly anonymised.

5. Data Rights under European Union Law

Under the General Data Protection Regulation (GDPR), users within the European Union possess statutory rights regarding their stored personal data, including:

  • Right of Access (Article 15 GDPR): The right to request confirmation regarding the processing of personal data and access to stored records.
  • Right to Rectification (Article 16 GDPR): The right to request immediate correction of inaccurate or incomplete personal records.
  • Right to Erasure (Article 17 GDPR): The right to request the deletion of personal data when statutory retention conditions permit.
  • Right to Restriction of Processing (Article 18 GDPR): The right to limit data processing under specific statutory circumstances.
  • Right to Data Portability (Article 20 GDPR): The right to receive personal data in a structured, commonly used, and machine-readable format.
  • Right to Object (Article 21 GDPR): The right to object to data processing based on legitimate interests.
  • Right to Lodge a Complaint: The right to file a formal complaint with a competent supervisory authority within the relevant jurisdiction.

To exercise any of these rights, please contact our support representative via email at support@stitchandmood.com.

6. Data Security Measures

www.stitchandmood.com employs technical and organisational security measures to safeguard processed personal data against unauthorised access, alteration, loss, or disclosure. System security protocols are regularly reviewed and updated to maintain data protection standards across operational infrastructure.