Privacy Policy
This Privacy Policy explains how HyggeAttic collects, uses, stores, and protects personal data when you visit hyggeattic.com, subscribe to the newsletter, or contact us through the website.
We aim to collect only the data we need and to use it in a transparent and privacy-conscious way.
Who We Are
HyggeAttic is the controller of the personal data described in this Privacy Policy.
Controller: HyggeAttic Location: Szczecin, Poland Contact: [email protected] or use our contact form
Personal Data We Collect
Newsletter subscription
Name
Email address
Contact form
Name
Email address
Message content
Website usage and technical data
When you use the site, limited technical and usage-related information may be processed automatically for analytics, security, and infrastructure purposes. This may include information such as page visits, general usage patterns, and technical request data needed to operate and protect the website.
How We Collect Data
We collect personal data directly from you when you enter it into our forms, such as when you subscribe to the newsletter or send a message through the contact form.
We also receive limited technical information automatically when you browse the site, including information processed through analytics and infrastructure/security services.
How We Use Personal Data
To send newsletters and related email updates.
To confirm newsletter subscriptions through a double opt-in process.
To respond to contact form messages and general inquiries.
To monitor traffic, understand general site usage, and improve the website.
To maintain website security, performance, and reliability.
Legal Bases for Processing
Newsletter
We process newsletter subscription data on the basis of your consent. You can withdraw that consent at any time by using the unsubscribe link in our emails or by contacting us.
Contact and communication
We process contact form messages and related correspondence based on our legitimate interests in responding to inquiries and managing communications, and where relevant, to take steps at your request before entering into a business relationship.
Analytics, security, and infrastructure
We process limited technical and usage data based on our legitimate interests in understanding how the site is used, improving performance, and protecting the website against abuse and technical issues.
Newsletter and Email Communications
If you subscribe to the HyggeAttic newsletter, we use your name and email address to send newsletters, updates, and related content.
We use a double opt-in process to confirm newsletter subscriptions. This means you may need to confirm your subscription by clicking a verification link sent to your email address.
Our email service provider may also provide reporting features such as email open and click data so we can understand newsletter performance and improve future emails.
You can unsubscribe at any time by clicking the unsubscribe link in any newsletter email.
Contact Forms and Messages
When you contact us through the website, we process the information you provide so we can review your message, respond to you, and keep a record of the communication where needed.
Messages submitted through the contact form are stored in our database and may also be sent through our email delivery provider so we can handle the inquiry efficiently.
For order-related support connected to Etsy purchases, we may recommend using Etsy Messages, since Etsy order details are linked directly to that system. Etsy purchases themselves are not processed through this website.
Purchases Through Etsy
HyggeAttic does not currently process purchases or checkout directly on this website. Purchases are currently handled through Etsy.
If you make a purchase on Etsy, your transaction and related order data are handled under Etsy’s own terms, privacy practices, and systems.
Analytics and Website Operation
We use privacy-focused analytics to understand general site usage, such as page visits, broad traffic patterns, and overall website performance.
We also use infrastructure and security services to host, deliver, protect, and maintain the website.
Service Providers and Recipients
We may share personal data with trusted service providers that help us operate the website and related services. Depending on the context, these may include providers for:
Website hosting, CDN, and security infrastructure
Privacy-focused website analytics
Newsletter delivery and subscription management
Transactional email delivery
Based on our current setup, these providers may include Cloudflare, Umami, MailerLite, and Resend.
International Data Transfers
Some of our service providers may process data outside the European Economic Area, including, for example, in the United States.
Where personal data is transferred internationally, we aim to use providers that offer appropriate safeguards under applicable data protection law, such as contractual protections or other recognized transfer mechanisms where applicable.
Data Retention
We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Contact form messages and related records: up to 12 months.
Analytics and technical usage data: generally up to 12 months, where applicable.
Newsletter subscription data: for as long as you remain subscribed, and for a limited period afterward where necessary to manage unsubscribe requests, suppression records, or compliance-related needs.
Your Rights
Depending on where you live and which laws apply, you may have rights in relation to your personal data, including the right to request access, correction, deletion, restriction, or objection, and in some cases the right to data portability.
If we rely on your consent, you may withdraw that consent at any time. This does not affect processing already carried out before the withdrawal.
You may also have the right to complain to your local data protection authority.
To exercise your rights or ask a privacy-related question, contact us at [email protected].
Children’s Privacy
This website is not directed to children, and we do not knowingly collect personal data from children.
Automated Decision-Making
We do not currently use your personal data for solely automated decision-making or profiling that produces legal or similarly significant effects.
Related Policies
For more information about our use of cookies and similar technologies, please read our Cookies Policy. You can also review our Terms.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website, services, or legal obligations. The latest version will always be published on this page.