Privacy Policy for Your Services on Etsy and Related Platforms

At the heart of this Privacy Policy is an explanation of how I collect, utilize, and share information when you engage with my services, be it through purchasing items, reaching out to me, or otherwise interacting with my offerings on Etsy.com and its affiliated sites and services.

It's important to note that this Privacy Policy does not extend to the practices of third-party entities beyond my control or ownership, including Etsy and any third-party services accessed through Etsy. To gain further insight into their privacy practices, you can refer to Etsy's own Privacy Policy.

Here's a comprehensive breakdown of key aspects covered in this Privacy Policy:

Order Fulfillment and Information Collection:
To complete your orders, certain information is essential. This information, which you have authorized Etsy to share with me, includes your name, email address, postal address, payment details, and specifics about the product you're purchasing. If you reach out directly, you might also provide additional personal information for custom orders.

Legal Bases for Data Collection and Usage:
I rely on various legal grounds for collecting, using, and sharing your information, which include:

Meeting service obligations, such as processing your orders, resolving disputes, and providing customer support.
Gaining your explicit consent, which you can withdraw at any point, such as when signing up for my mailing list.
Fulfilling legal responsibilities or court orders, as well as managing legal claims and adhering to tax laws.
Pursuing legitimate interests, with due consideration to your rights and interests. This includes improving my services and complying with Etsy's Seller Policy and Terms of Use.

Limited Sharing of Personal Information:
I value your information's confidentiality and only share personal details under specific circumstances, including:

Sharing with Etsy, as needed for service provision and to comply with Etsy's policies.
Engaging trusted third-party service providers, like delivery companies, to assist in my shop's functions.
During business transfers, where I might disclose information in line with applicable laws.

If required by law, I may collect, use, retain, and share data in situations involving legal processes, fraud prevention, agreement enforcement, and protecting individuals' rights and safety.

Data Retention and Processing:
I retain your personal information as long as necessary for service provision and as outlined in my Privacy Policy. Legal and regulatory obligations, dispute resolution, and agreement enforcement might also necessitate data retention. Typically, I store data for a duration of 4 years.

International Data Processing:
Your data may be stored and processed through third-party hosting services located in various jurisdictions, including the US. Consequently, your personal data could be transferred to jurisdictions governed by different data protection and government surveillance laws. If data transfer outside the EU occurs, Privacy Shield certification from Google Cloud is my legal basis.

EU Data Protection Rights:
If you reside in territories covered by EU data protection laws, certain rights pertain to your personal information:

The right to access and receive a copy of your personal data held by me.
The ability to change, limit, or erase your personal data, except in exceptional circumstances.
Objecting to the processing of your data based on legitimate interests and to receiving marketing communications after previously giving consent.

Raising concerns with your local data protection authority.
For matters concerning EU data protection, I, Julia Groves, act as the data controller for your personal information. If you have questions or concerns, you can reach me at thequietgrove@gmail.com.