Privacy policy
Last updated: 10 September 2026
General information
BERA PATTERNS S.L.L. ("BERA Patterns", "we", "us"), Calle de la Infanta Mercedes 16, 4º izquierda, 28020 Madrid, Spain, NIF B88906474, is the data controller for personal data collected through berapatterns.com (the Site). This policy explains what data we collect, why, and what rights you have over it, under the GDPR and Spain’s data protection law (LOPDGDD).
What we collect
We collect the information you would expect from an online shop that also runs courses and workshops:
- account and order data: name, email, billing address, phone number and order history;
- payment data: processed directly by our payment provider; we never store your full card details;
- course and workshop data: which courses you have bought or accessed, workshop bookings and attendance;
- your communications with us: emails, contact form messages and support requests;
- marketing preferences: whether you have opted in to our newsletter;
- technical data: IP address, browser and device information, and cookies (see below);
- images: photographs and videos taken during in-person workshops.
Why we use it and on what legal basis
We use your data to fulfil your order and deliver your patterns, course access or workshop booking; to send order confirmations and provide customer support; to meet our legal obligations around invoicing and tax records; and, where you have opted in, to send you marketing emails about new patterns, courses or workshops. We also use limited analytics data, with your consent where required, to understand how the Site is used and improve it. You can withdraw marketing consent at any time.
The legal basis for each processing operation is as follows:
- performance of the contract, to process and deliver your order, give access to courses, manage workshop bookings and provide support;
- compliance with legal obligations, for invoicing, accounting and tax obligations;
- your consent, for the newsletter and marketing emails and for non-essential cookies;
- our legitimate interest, to answer the enquiries you send us, keep the Site secure, prevent fraud and publicise our workshop activity with photographs and videos, which you can object to before the workshop begins or by writing to us afterwards.
The data we ask for in order to process an order or a booking is necessary to do so: if you do not provide it, we will not be able to complete the purchase. The rest is optional. We do not take automated decisions that produce legal effects concerning you or similarly significantly affect you.
Who we share it with
We share data with the service providers we need to run the Site and deliver what you have bought: our e-commerce and payment platform (Shopify), the payment gateways and financial institutions that collect payment for orders, our email tool (Klaviyo, if you have opted in to marketing), product review management (Judge.me), analytics and advertising providers (Google, Meta and Pinterest, if you have accepted the corresponding cookies) and our accounting and tax advisers. We do not sell your personal data.
Where a provider processes data outside the EU or the EEA, the transfer is covered by the safeguards set out in Chapter V of the GDPR, such as the standard contractual clauses approved by the European Commission or the EU-US Data Privacy Framework. You can ask us for a copy of those safeguards by writing to info@berapatterns.com.
Other situations where we may disclose your data
Beyond the providers listed above, we may also disclose your personal data to third parties:
- if we sell or buy any business or assets, in which case we will disclose your data to the prospective seller or buyer of that business or those assets;
- if BERA Patterns, or substantially all of its assets, is acquired by a third party, in which case personal data we hold about our customers will be one of the assets transferred;
- if we are under a legal duty to disclose or share your data to comply with a legal obligation, or to enforce our Terms of Service and other agreements, or to protect the rights, property or safety of BERA Patterns, our customers or others, including exchanging information with other organisations for fraud prevention purposes.
How long we keep it
We keep order and invoicing data for 6 years, as required by Article 30 of the Spanish Commercial Code for business and accounting records; this is longer than the 4-year period set by Spanish tax law, so it is the period that applies. We keep marketing data until you unsubscribe or ask us to delete it. Course access data is kept while your access is active, plus a reasonable period afterwards for support purposes.
Your rights
Under the GDPR, you can ask us to give you access to your data, correct it, delete it, restrict or object to certain processing, or provide it to you in a portable format, and you can withdraw consent at any time. To exercise any of these rights, write to info@berapatterns.com. You can also complain to the Spanish Data Protection Agency (AEPD, www.aepd.es) if you think we have handled your data incorrectly.
Cookies
We use cookies for essential site functions (cart, checkout, login), which are always active, and for analytics and marketing or retargeting, which only run with your consent. You can manage your preferences through the cookie banner shown on your first visit, through your browser settings, or by consulting the detail of each cookie in our Cookie Policy.
Children’s data
Our products are aimed at adults. We do not knowingly collect personal data from children under 14 without the consent of their parents or guardians; contact us if you believe we have and we will delete it.
Changes to this policy
We may update this policy from time to time. The version published on the Site applies; we will flag significant changes where the law requires it.
Getting in touch
BERA PATTERNS S.L.L.
Calle de la Infanta Mercedes 16, 4º izquierda, 28020 Madrid, España
NIF: B88906474
Email: info@berapatterns.com