Privacy policy

ThimbleKit is a workshop book for makers who work to order: tailors, shoemakers, carpenters, bakers, jewellers and others. ThimbleKit is run by C2genix Enterprise, a business registered in Nigeria (CAC 9545570). In this policy, “we” and “us” mean C2genix Enterprise as the maker of ThimbleKit, and “you” means anyone who uses our website or app.

For any question about your data, write to [email protected].

Your account. When you sign up, we decide how your account details are used, and we are responsible for them.

Your workshop’s records. The clients, measurements, orders, photos and payments you put into ThimbleKit belong to your workshop. You decide what goes in and why; we keep it safe and use it only to run ThimbleKit for you. If you are a client of a maker and want your details changed or removed, please ask the maker first. We will help them if they need it.

• Account details: your name, email address and password (stored scrambled, so we can’t read it).
• Workshop details: its name, craft, currency, time zone, logo, WhatsApp number and any bank accounts you choose to show clients.
• Workshop records: clients’ names, phone numbers and measurements; orders, due dates, notes, materials and photos; payments and proof of payment; showcase pieces and requests.
• From clients directly: measurements a client sends through a maker’s link, and requests sent from a showcase page (name, WhatsApp number and note).
• Waitlist and newsletter: the email or WhatsApp number you give us, and your craft.
• Technical details: your IP address and browser, kept briefly in server logs to keep the service secure and working.
• Showcase visits: when someone opens a workshop’s showcase page, we count the visit for that workshop: which site sent them, whether they used a phone or a computer, and which pieces they opened. This uses no cookies and keeps no IP address; a visitor is counted with a code that changes every day, so nobody can be followed over time. These counts are deleted after about 13 months.

• To run ThimbleKit: show your records to you and your team, build tracking links and showcase pages, and send the emails you need, like password resets, invitations and order reminders.
• To keep it secure: prevent abuse, limit repeated attempts, and investigate problems.
• To answer you when you contact us.
• To tell you we’ve opened, or send the monthly tip, if you asked for it. Every email has a way to stop them.

We don’t sell your data, we don’t show adverts, and we don’t use your workshop’s records to market to your clients.

• You and your team. The owner sees everything in the workshop; staff see clients and orders, but not money totals or settings.
• Your clients. A tracking link shows one order to whoever has that link: the workshop’s name, the order, its stage, dates, payments and any bank details you chose to show. Links are long and random, and you can switch one off at any time.
• The public. Your showcase page, if you share it, shows the pieces you mark as visible.
• Us. We look at a workshop’s records only to fix a problem you’ve asked about, or when the law requires it.

A few trusted companies help us run ThimbleKit. They only handle data to provide their service to us:

• Hosting: our servers and storage are rented from a hosting provider.
• Email delivery: a provider that sends our emails.
• Voice and chat orders: when you choose to say an order or paste a chat to fill in the order form, that recording or text is sent to Google’s Gemini service to be written up, then thrown away. We don’t keep the recording, and Google doesn’t use it to improve its products.
• Visitor statistics: if you agree, Google Analytics counts visits to our public website, such as which pages are opened and roughly where visitors are, so we can see what helps people. It isn’t used inside the app or on the links you send clients, so it never sees your workshop’s records.
• Live chat: the support chat on our website and app is provided by Tawk.to. What you type in it, and your browser details, go to them.
• WhatsApp messages: ThimbleKit has its own WhatsApp number, run through Meta’s WhatsApp Business Platform. If you link your number in Settings, we send you alerts there and read what you write to it (including voice notes, which go to Gemini to be written up, as above). If a maker’s client says yes to updates, we send them messages about their order in the maker’s name. Meta delivers these messages and handles them under its WhatsApp Business terms. Anyone can stop them by replying STOP, or in Settings or on their order page.

Opening WhatsApp from ThimbleKit hands you over to WhatsApp, which has its own privacy policy. Our fonts are served from our own servers.

Some of these providers may store data outside your country. Where they do, we choose providers that protect it to the standard data protection laws expect, including Nigeria’s Data Protection Act and the EU and UK GDPR.

ThimbleKit needs a few cookies to work: one to keep you logged in, one that protects forms from being misused, and, if you tick “remember me”, one that keeps you logged in for longer.

On our public website we ask before using Google Analytics. Only if you agree does it set its own cookies to count visits; we never use it for advertising. You can change your mind any time with “Cookie settings” at the bottom of the site. The app itself, and the links you send clients, set no analytics cookies.

When the live chat loads, Tawk.to sets its own cookies so the conversation continues as you move between pages.

• Your account and workshop records stay for as long as you use ThimbleKit.
• A workshop you delete is kept for 30 days so you can bring it back, then erased for good with its photos.
• Server logs are cleared regularly.
• Messages sent to and from ThimbleKit’s WhatsApp number, and the photos and voice notes in them, are deleted after 12 months.
• If you close your account, we delete it and any workshop you own, except anything the law requires us to keep.

Under the Nigeria Data Protection Act 2023, the EU and UK GDPR, and similar laws where you live, you can ask us to:

• tell you what data we hold about you and give you a copy;
• correct anything that’s wrong;
• delete your data;
• stop using it for a purpose, such as the newsletter;
• hand it to you in a format another service can read. Owners can download their workshop’s records from Settings at any time.

Write to [email protected] and we’ll reply within 30 days. If you’re not happy with our answer, you can complain to the data protection authority where you live: in Nigeria, the Nigeria Data Protection Commission; in the UK, the Information Commissioner’s Office; in the EU, your country’s data protection authority.

Everything travels over an encrypted connection. Passwords are stored scrambled. Order photos are only shown to people logged into the workshop, or through the order’s own link; showcase photos are public only when you choose to show them. No system is perfect, so if we ever learn of a breach that affects you, we’ll tell you and the regulator as the law requires.

ThimbleKit accounts are for adults running a business. Makers may record measurements for children’s orders; that information is kept with the same care as any other client’s, and is the workshop’s responsibility.

If we change how we use your data, we’ll update this page and the date at the top. For important changes, we’ll tell account holders by email before they take effect.