Privacy Notice
1. Who we are
Jumi Pattern Maker (jumipatternmaker.com) is operated by Jumi Ltd, a company registered in England and Wales (company number 17185825). Our registered office is 3 Trafalgar Court, Farnham, England, GU9 7QE.
Jumi Ltd is the controller of the personal data described in this notice. Our Data Protection Lead is Justina Ricci, who you can contact at legal@jumi.uk.
This notice explains what personal data we collect when you use Jumi Pattern Maker, why we collect it, and the rights you have over it. It is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), as amended by the Data (Use and Access) Act 2025.
2. The short version
Jumi Pattern Maker is free and does not require an account. You do not give us your name, email address or payment details to use it.
The tool runs entirely in your browser. Your artwork, uploads and saved patterns are stored on your own device and are never sent to our servers.
Because the tool is free, it is funded by advertising. The personal data we handle relates almost entirely to how ads, analytics and affiliate links work: things like your IP address, device information and cookie identifiers. You control most of this through the cookie preferences on our site.
The rest of this notice is the detail behind those three paragraphs.
3. Your designs stay on your device
This is worth stating clearly because it is unusual and it matters.
- Patterns you create are saved in your browser's local storage, on your device. They are not uploaded to us.
- Artwork you import (SVG or PNG files) is processed within your browser. It is not transmitted to our servers.
- Exports you download are generated on your device and go straight to your downloads folder.
We cannot see, access, recover or restore your designs. This has a practical consequence: if you clear your browser data or lose your device, your saved work is gone and we cannot get it back. Export anything you care about.
4. Information we collect
Because there are no accounts, the personal data we process is limited to the following.
4.1 Usage and log data
When you visit the site, our hosting infrastructure automatically records standard web log information: your IP address, browser type and version, operating system, the pages you visit, referring URLs and timestamps. We use this to keep the site running, secure and performing well.
4.2 Cookie and advertising data
With your consent, advertising and analytics cookies collect identifiers such as cookie IDs, device identifiers, approximate location (derived from IP address) and information about your interaction with ads and pages. Section 6, Section 8 and our Cookie Policy explain this in full.
4.3 Correspondence
If you email us at hello@jumi.uk or legal@jumi.uk, we receive your email address, your name if you include it, and the contents of your message, including any attachments.
We use this information to:
- respond to you and deal with your enquiry, question or complaint;
- take steps you ask us to take before entering into a contract, for example where you contact us about a partnership, licensing, advertising or business arrangement, and to enter into and perform any contract that results;
- keep records of our dealings with you, so we have an accurate history if a matter is ever revisited;
- exercise or defend legal rights and claims, for example where correspondence relates to an intellectual property notice, a dispute or a regulatory matter;
- comply with our legal obligations, such as responding to requests to exercise data protection rights.
Section 5 sets out the lawful basis for each of these.
4.4 What we do not collect
We do not collect your name, postal address, phone number, payment details, account credentials or the content of your designs. We do not build profiles that identify you personally unless you contact us.
5. How and why we use your information
| Purpose | Data used | Lawful basis (UK GDPR Article 6) |
|---|---|---|
| Operating, securing and maintaining the site | Usage and log data | Legitimate interests: running a safe, functional service |
| Showing advertising, including personalised advertising | Cookie and advertising data | Consent, collected through our cookie banner |
| Measuring how the site is used so we can improve it | Analytics data | Consent (or, where UK law permits low-risk audience measurement without consent, legitimate interests) |
| Tracking affiliate referrals so partners can attribute purchases | Affiliate cookie data | Consent |
| Responding to your enquiries, questions and complaints | Correspondence | Legitimate interests: answering people who contact us |
| Taking steps at your request before entering into a contract, and entering into and performing that contract (for example partnership, licensing or advertising arrangements) | Correspondence | Contract (Article 6(1)(b)) |
| Keeping records of our dealings with you | Correspondence | Legitimate interests: maintaining accurate business records |
| Establishing, exercising or defending legal claims (for example intellectual property notices or disputes) | Correspondence and usage data, as relevant | Legitimate interests: protecting and enforcing our legal rights |
| Complying with legal and regulatory obligations, including responding to data protection rights requests | Any of the above, as relevant | Legal obligation (Article 6(1)(c)) |
Where we rely on legitimate interests we have balanced those interests against your rights and concluded they are not overridden. You can ask us for details of that assessment.
6. Advertising
Jumi Pattern Maker is funded by advertising served through Google AdSense. This is what allows the tool to be free.
Personalised ads. If you consent to advertising cookies, Google and its certified advertising partners may use cookies and similar identifiers to show ads based on your interests and to measure ad performance. Google acts as an independent controller of this data under its own privacy policy, available at policies.google.com/privacy.
Non-personalised ads. If you decline advertising cookies, you will still see ads, but they will be contextual rather than personalised. Non-personalised ads still use limited technical data (such as approximate location derived from IP) for frequency capping and fraud prevention.
Your controls. You can change your choice at any time via Cookie Settings in the site footer, and manage Google's ad personalisation at myadcenter.google.com.
We do not sell your personal data, and we do not pass personal data to advertisers ourselves. Ad-related data flows are between your browser and the advertising services you have consented to.
7. Affiliate links
Some links on our site are affiliate links: if you click one and buy something from the partner, we may earn a commission at no extra cost to you. Affiliate networks use cookies to attribute your purchase to us. These cookies are set only with your consent and are described in our Cookie Policy. Our Affiliate & Advertising Disclosure explains how we identify affiliate links on the site.
8. Analytics
We use analytics services to understand aggregate usage of the site: which features are used, how people find us and where the tool can be improved. Analytics data is collected under the choices you make in our cookie banner and is used in aggregated form. We do not use analytics to identify individuals.
9. Who we share information with
We share personal data only with:
- Service providers that host our website and infrastructure, acting on our instructions under contract;
- Google, as our advertising and analytics provider, as described in Section 6 and Section 8;
- Affiliate networks, to the limited extent needed to attribute referrals, as described in Section 7;
- Professional advisers, regulators, courts or law enforcement, where the law requires it or we need to protect our legal rights.
We do not sell personal data to anyone.
10. International transfers
Some of our providers, including Google, process data outside the UK, including in the United States. Where personal data leaves the UK we make sure an adequate level of protection applies, through UK adequacy regulations (including the UK-US Data Bridge where applicable), the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. You can contact us for more information about the safeguards used.
11. How long we keep information
- Server logs: kept for a short rolling period for security and diagnostics, then deleted or anonymised, typically within 12 months.
- Cookie data: lifespans for each cookie are set out in our Cookie Policy. Your consent choices are refreshed at least every 12 months.
- Correspondence: kept for as long as needed to deal with your enquiry and for a reasonable period afterwards, normally no more than 24 months. Where correspondence relates to a contract, we keep it for the life of the contract plus 6 years (the limitation period for contract claims in England and Wales). Where it relates to an actual or potential legal claim or a regulatory matter, we keep it until the matter is closed and any limitation period has expired.
We keep personal data no longer than we need it for the purposes above.
12. Security
We use appropriate technical and organisational measures to protect the limited personal data we process, including encryption in transit (HTTPS), access controls and reputable hosting providers. Because your designs never reach our servers, the most privacy-sensitive material involved in using the tool never leaves your control.
13. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate data;
- Erase your data in certain circumstances;
- Restrict or object to our processing, including an absolute right to object to direct marketing;
- Data portability, for data processed by consent or contract;
- Withdraw consent at any time, without affecting processing that happened before withdrawal. For cookies, use Cookie Settings in the site footer.
To exercise any of these rights, email legal@jumi.uk. We will respond within one month. Because we hold so little data about visitors, in many cases the honest answer to an access request will be that we hold nothing we can link to you; we will tell you if that is the case.
14. Children
Jumi Pattern Maker is a general-audience design tool and is not directed at children. We do not knowingly collect personal data from children, and personalised advertising is not served to users Google identifies as under 18. If you are a parent or guardian and believe we hold a child's personal data, contact legal@jumi.uk.
15. Changes to this notice
We may update this notice from time to time. When we do, we will change the version number, Effective Date and Last Updated date above, and for significant changes we will post a notice on the site. Please check back periodically.
16. Contact us and complaints
Jumi Ltd, 3 Trafalgar Court, Farnham, England, GU9 7QE
General enquiries: hello@jumi.uk · 0330 120 2729
Data protection: Justina Ricci, Data Protection Lead, legal@jumi.uk
If you are unhappy with how we have handled your personal data, please contact us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Related: Cookie Policy · Terms of Use · Affiliate Disclosure · Copyright Policy