Privacy Policy

Last updated: 19 July 2026

1. Who We Are

This Privacy Policy explains how Elmika Ltd, trading as JustKnit, collects, uses, stores and protects your personal information when you visit, create an account, contact us or make a purchase from:

Data Controller

Elmika Ltd
Trading as JustKnit
United Kingdom

Email: info@justknit.co.uk

Elmika Ltd is the data controller responsible for the personal information processed through the JustKnit website.

If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the details above.

2. What Information We Collect

The personal information we collect depends on how you use our website.

Information You Provide to Us

We may collect:

  • your name;
  • billing address;
  • delivery address;
  • email address;
  • telephone number;
  • order details;
  • account information;
  • marketing preferences;
  • product reviews;
  • messages sent through our contact form or by email;
  • information you provide when requesting customer support.

Information Collected Automatically

When you visit or browse our website, we may collect:

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • pages visited;
  • products viewed;
  • time spent on the website;
  • referring website or advertising source;
  • approximate geographical location;
  • website interactions;
  • cookie and consent preferences;
  • other technical and usage information.

3. How We Collect Your Information

We may collect personal information when you:

  • visit or browse our website;
  • create a customer account;
  • place or pay for an order;
  • subscribe to our newsletter;
  • contact us through a form or by email;
  • submit a product review;
  • manage your cookie preferences;
  • interact with our advertisements;
  • request a refund, return or customer support.

We may also receive limited information from payment providers, delivery companies, analytics services and advertising platforms where necessary to provide our services.

4. How We Use Your Information

We may use your personal information to:

  • process and fulfil your orders;
  • process payments and refunds;
  • arrange delivery;
  • provide order confirmations and delivery updates;
  • manage your customer account;
  • respond to enquiries;
  • provide customer support;
  • process returns, refunds and complaints;
  • prevent fraud and unauthorised transactions;
  • protect the security of our website;
  • calculate taxes and delivery charges;
  • maintain accounting and business records;
  • comply with legal and regulatory obligations;
  • improve our website, product pages and checkout process;
  • analyse website performance;
  • measure the effectiveness of advertising;
  • send marketing emails where you have given consent;
  • maintain a record of your cookie and marketing preferences.

We do not sell or rent your personal information to third parties for their own marketing purposes.

5. Legal Basis for Processing

Under the UK GDPR, we rely on one or more of the following lawful bases.

Performance of a Contract

We process personal information where necessary to:

  • process your order;
  • receive payment;
  • deliver products;
  • manage your customer account;
  • provide customer support;
  • process returns and refunds.

Legal Obligation

We may process and retain information where required to comply with:

  • UK tax legislation;
  • accounting requirements;
  • consumer protection law;
  • fraud prevention obligations;
  • lawful requests from public authorities.

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided that those interests are not overridden by your rights.

This may include:

  • improving our website and services;
  • protecting the website against fraud and misuse;
  • maintaining business records;
  • responding to customer enquiries;
  • understanding general website performance;
  • establishing, exercising or defending legal claims.

Consent

We rely on your consent where required for:

  • non-essential cookies;
  • analytics cookies;
  • marketing cookies;
  • email marketing;
  • certain advertising and tracking technologies.

You may withdraw your consent at any time.

6. Customer Accounts

If you create a customer account, we may store:

  • your name;
  • email address;
  • billing and delivery addresses;
  • telephone number;
  • order history;
  • saved preferences;
  • account login information.

Passwords are stored securely in encrypted or hashed form and are not visible to JustKnit staff.

You are responsible for keeping your account login details confidential.

You may ask us to update or delete your account by contacting:

info@justknit.co.uk

Some order and transaction records may still need to be retained after account deletion where required by law.

7. WooCommerce and Online Orders

Our online shop is powered by WooCommerce.

When you browse products, create an account or place an order, WooCommerce may process information necessary to:

  • display products;
  • maintain your shopping basket;
  • process your order;
  • manage your customer account;
  • calculate taxes;
  • calculate delivery charges;
  • arrange shipping;
  • process returns and refunds;
  • maintain legal and accounting records.

This information may include:

  • name;
  • billing and delivery addresses;
  • email address;
  • telephone number;
  • IP address;
  • order history;
  • products purchased;
  • account details;
  • transaction information.

8. Payments

Payments are processed securely by trusted third-party payment providers.

Depending on the payment method selected, your information may be processed by:

  • WooPayments;
  • Stripe;
  • PayPal.

Payment providers may process:

  • your name;
  • billing address;
  • payment details;
  • transaction value;
  • device and technical information;
  • fraud-prevention information.

JustKnit does not store or have direct access to your complete payment card details.

Payment providers process information in accordance with their own privacy policies and security requirements.

9. Shipping and Order Fulfilment

To fulfil and deliver your order, we may share necessary information with trusted delivery partners, including Royal Mail and other delivery companies where applicable.

Shared information may include:

  • your name;
  • delivery address;
  • email address, where required;
  • telephone number, where required;
  • order reference;
  • parcel and tracking information.

Delivery providers use this information to transport your order, provide tracking updates and resolve delivery issues.

10. Contact Forms and Customer Correspondence

When you contact us through our website, by email or through another communication channel, we may collect:

  • your name;
  • email address;
  • order number;
  • telephone number;
  • details of your enquiry;
  • copies of correspondence;
  • any documents or images you send to us.

We use this information to respond to your enquiry, provide customer support and maintain appropriate business records.

11. Product Reviews

If you submit a product review, we may publish:

  • your first name or chosen display name;
  • your product rating;
  • the content of your review;
  • images you voluntarily submit.

Please do not include sensitive personal information in a review.

We may remove or decline reviews that are unlawful, abusive, misleading, irrelevant or contain personal information that should not be published.

12. Email Marketing

If you subscribe to our newsletter, we may use MailPoet to send:

  • information about new products;
  • special offers;
  • promotions;
  • product updates;
  • knitting and craft inspiration;
  • other JustKnit news.

We rely on your consent for email marketing.

You may unsubscribe at any time by:

Withdrawing your marketing consent will not affect service emails relating to your orders, payments, deliveries or account.

13. Cookies and Similar Technologies

JustKnit uses cookies and similar technologies to:

  • ensure the website operates correctly;
  • keep your shopping basket active;
  • remember your preferences;
  • maintain secure login sessions;
  • process orders;
  • protect against fraud;
  • understand website usage;
  • improve website performance;
  • measure advertising effectiveness;
  • remember your cookie choices.

Cookies are small text files stored on your device when you visit a website.

We use the following categories of cookies.

Strictly Necessary Cookies

These cookies are essential for the operation of the website and cannot normally be disabled through our cookie banner.

They may be used to:

  • keep products in your shopping basket;
  • remember your login session;
  • process orders securely;
  • protect against fraud;
  • maintain website security;
  • remember your cookie preferences.

Preference Cookies

Preference cookies remember choices you make, such as:

  • website settings;
  • display preferences;
  • language or currency preferences, where applicable;
  • previously selected options.

Analytics Cookies

With your consent, analytics cookies help us understand how visitors use our website.

They may collect information about:

  • pages visited;
  • products viewed;
  • time spent on the website;
  • navigation between pages;
  • browser and device information;
  • approximate location;
  • referring websites;
  • interactions with product and checkout pages.

We use this information to improve:

  • navigation;
  • product pages;
  • website speed;
  • checkout experience;
  • overall website performance.

Marketing Cookies

With your consent, marketing cookies may be used to:

  • measure advertising performance;
  • record advertisement clicks;
  • measure purchases and conversions;
  • understand activity after an advertisement is clicked;
  • help display more relevant advertisements.

These cookies may be set or used by advertising partners, including Google.

Managing Cookie Preferences

You can accept, reject, change or withdraw your cookie preferences at any time using the Cookie Settings option available on our website.

For more detailed information about the cookies used on the website, including their purpose and duration, please see our Cookie Policy.

14. Google Analytics 4

We use Google Analytics 4, also known as GA4, to understand how visitors interact with our website.

Depending on your consent choices, Google Analytics may process information including:

  • pages visited;
  • products viewed;
  • approximate geographical location;
  • browser and device information;
  • referring sources;
  • website interactions;
  • purchases and other conversion events.

Where consent is required, Google Analytics is activated or configured according to the preferences selected through our cookie banner.

Information collected through Google Analytics helps us improve the website, understand customer journeys and assess website performance.

Google may process information on servers located outside the United Kingdom.

More information about how Google processes personal information is available in the Google Privacy Policy.

15. Google Ads and Conversion Tracking

We use Google Ads to advertise JustKnit products and measure the effectiveness of our advertising campaigns.

Where you consent to marketing cookies, Google may process information relating to:

  • advertisement clicks;
  • products viewed;
  • purchases;
  • conversion events;
  • website activity following an advertisement click;
  • device and browser information.

This information helps us understand which advertisements lead to website visits and purchases.

We do not use Google Ads information to make decisions that produce legal or similarly significant effects about individual customers.

16. Google Consent Mode

Our website uses Google Consent Mode to communicate your cookie preferences to Google services.

Consent Mode adjusts the behaviour of Google tags according to whether you have accepted or rejected analytics and marketing cookies.

Depending on the website configuration and the consent choices you make, Google services may operate with restricted functionality when consent has not been provided.

You can change or withdraw your choices at any time through our Cookie Settings.

17. Website Hosting

Our website is hosted by Krystal Hosting.

As part of providing hosting and technical services, the hosting provider may process technical information required for:

  • website availability;
  • server operation;
  • website security;
  • backups;
  • error logging;
  • server monitoring;
  • malware detection;
  • protection against unauthorised access.

The hosting provider processes this information only as necessary to provide and secure its services.

18. Third-Party Services

We use trusted third-party providers to operate our website and deliver our services.

These may include:

Provider or servicePurpose
WordPressWebsite content management
WooCommerceOnline shop, customer accounts and order processing
Krystal HostingWebsite hosting, backups and server security
WooPaymentsPayment processing
StripePayment processing and fraud prevention
PayPalPayment processing
Google Analytics 4Website analytics
Google AdsAdvertising and conversion measurement
Google Consent ModeCommunicating cookie consent choices
MailPoetNewsletter and email marketing
Royal MailDelivery and order fulfilment
ComplianzCookie banner and consent management
Really Simple SecurityWebsite security and monitoring

These providers may process personal information only as necessary to provide their services, comply with legal obligations and maintain security.

Some providers act as our data processors, while others may act as independent data controllers for certain processing activities.

19. International Transfers

Some third-party providers may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place.

These safeguards may include:

  • UK adequacy regulations;
  • the UK International Data Transfer Agreement;
  • the UK Addendum to approved Standard Contractual Clauses;
  • other transfer mechanisms permitted under UK data protection law.

20. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Typical retention periods are:

Type of informationTypical retention period
Orders and transaction recordsUp to 6 years after the end of the relevant accounting period, or longer where legally required
Customer accountUntil the account is deleted or no longer reasonably required
Customer service correspondenceNormally up to 24 months, unless longer retention is required
Returns, refunds and complaintsAs long as necessary to resolve the matter and maintain appropriate records
Newsletter subscriptionUntil consent is withdrawn or the subscription becomes inactive
Marketing suppression recordAs long as necessary to ensure that an unsubscribe request is respected
Cookie consent preferencesAccording to the duration specified in the Cookie Policy
Security and server logsFor a limited period appropriate to security and operational requirements
Product reviewsUntil removed by us or withdrawn where applicable

We may retain information for longer where necessary to comply with legal obligations, resolve disputes, prevent fraud or establish and defend legal claims.

21. Fraud Prevention and Website Security

We may process personal and technical information to:

  • detect suspicious transactions;
  • prevent unauthorised purchases;
  • verify payment risk;
  • protect customer accounts;
  • detect malicious website activity;
  • prevent spam and abuse;
  • investigate security incidents;
  • protect our legal rights.

Where necessary, information may be shared with payment providers, fraud-prevention services, professional advisers, regulators or law-enforcement authorities.

22. Security

We use appropriate technical and organisational measures to protect personal information against:

  • unauthorised access;
  • accidental loss;
  • misuse;
  • alteration;
  • destruction;
  • unlawful disclosure.

These measures may include:

  • SSL/TLS encryption;
  • secure website hosting;
  • restricted administrative access;
  • strong authentication procedures;
  • security monitoring;
  • malware protection;
  • firewalls;
  • regular software and plugin updates;
  • backups;
  • payment processing through specialist providers.

No internet transmission or electronic storage system can be guaranteed to be completely secure. However, we take reasonable steps to reduce the risk of unauthorised access or misuse.

23. Automated Decision-Making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

Payment and fraud-prevention providers may carry out automated risk assessments to identify potentially fraudulent or unauthorised transactions.

24. Your Rights

Under UK data protection law, you may have the right to:

  • request access to your personal information;
  • request correction of inaccurate or incomplete information;
  • request deletion of your information;
  • request restriction of processing;
  • object to certain processing;
  • withdraw consent at any time;
  • request a copy of certain information in a portable format;
  • complain to the Information Commissioner’s Office.

These rights are not absolute and may be subject to legal exceptions.

For example, we may need to retain order and transaction information to comply with tax, accounting or legal requirements.

25. Exercising Your Rights

To exercise your data protection rights, please contact:

info@justknit.co.uk

Please provide sufficient information to help us identify you and understand your request.

We may ask for reasonable proof of identity before providing personal information or acting on a request.

We will normally respond within one calendar month. In certain circumstances, the response period may be extended where permitted by law.

There is normally no fee for exercising your rights. However, a reasonable fee may be charged, or a request may be refused, where it is manifestly unfounded or excessive.

26. Complaints

If you are concerned about how we use your personal information, please contact us first so that we have an opportunity to investigate and resolve the matter.

You also have the right to complain to the UK data protection regulator:

Information Commissioner’s Office

Website: https://ico.org.uk

Telephone: 0303 123 1113

You may contact the ICO at any time, although the ICO will usually expect you to raise your concern with us first.

27. Children’s Privacy

Our website is intended primarily for adults purchasing knitting, crochet, embroidery and craft products.

We do not knowingly collect personal information directly from children under the age of 13.

If you believe that a child has provided personal information to us without appropriate permission, please contact us so that we can review and, where appropriate, delete the information.

28. External Links

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy, security or content of external websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

29. Changes to Our Business

If Elmika Ltd or the JustKnit business is sold, merged, reorganised or transferred, personal information may be transferred as part of that transaction.

Any transfer will be handled in accordance with applicable data protection law.

30. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to our services;
  • changes to the technologies we use;
  • changes to third-party providers;
  • changes to legal or regulatory requirements;
  • improvements to how we explain our processing activities.

The latest version will always be published on this page.

The date shown at the top of the policy indicates when it was last updated.

31. Contact Us

If you have questions about this Privacy Policy, your personal information or your data protection rights, please contact:

Elmika Ltd
Trading as JustKnit
United Kingdom

Email: info@justknit.co.uk
Website: https://justknit.co.uk