Information Collected:
At Forest of Jewels, we take your personal data very seriously. In order to comply with the EU GDPR Law, we issue the following statement which we agree to uphold when you place an order with us. In order to fulfil your order we rely on Etsy to provide us with the necessary data needed in order to process your order in a timely manner. The data we collected is your name, email address, postal address, payment information and the details of the product you are ordering. We may also contact you for additional information such as customizations, personalizations and re-sizing of jewelry pieces.
Why I Need the Information and How I Use It:
Forest of Jewels needs to collect this information to complete and then ship your order, handle ay returns or exchanges, in addition:
-as needed to provide my services, such as when I use your information to fulfill your order, to settle disputes, or to provide customer support;
-when you have provided your affirmative consent, which you may revoke at any time, such as by signing up for my mailing list;
-if necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law; and
-as necessary for the purpose of my legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as 1) providing and improving my services. I use your information to provide the services you requested and in my legitimate interest to improve my services; and 2) Compliance with the Etsy Seller Policy and Terms of Use. I use your information as necessary to comply with my obligations under the Etsy Seller Policy and Terms of Use.
As a reminder, You may revoke your consent at any time and have the right in detail to request details of the information we keep.
Information Sharing and Disclosure:
We understand the importance of keeping personal data secure and safe and only share limited personal data with companies we need to in order to maintain our business. These companies are:
Etsy: I share information with Etsy as necessary to provide you my services and comply with my obligations under both the Etsy Seller Policy and Etsy Terms of Use.
PitneyBowes/SendPro: I may use Pitney Bowes to mail your packages, I will only share the information with them necessary to purchase proper postage.
Google Analytics: I may use Goggle to track details of those who visit the site. I do not send any personal data to Google and we configure our tracking codes to anonymise any IP addresses.
Other Service Providers: I may contract with other engage certain trusted third parties to perform functions and provide services to my shop, UPS or Fedex for example. I will share your personal information with these third parties, but only to the extent necessary to perform these services.
Sale of My Business: Should I sell my business, I may disclose your information at the time of the sale, but only to the extent permitted by law.
Compliance with laws. I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.
Data Retention:
We only keep information for the sole purpose of fulfilling your orders and for our own records and what is deemed fair use in our business within the parameters of the law. I will generally keep your data for 5 years.
Transference of Data Outside the EU:
We are located in the United States, outside of the EU and as such use Craftybase to store your data. As a UK based company they are in full compliance with the safety requirements.
Choosing to shop with a company outside of the EU means your data is subject to a new jurisdiction and subsequently new laws. However we protect your rights upon the transference with the above security measures.
Your Rights:
As a resident of the EU, you are subject to rights and privacy laws under the GDPR law.
* You have the right to revoke your permissions at any time except where it is legal for Forest of Jewels to keep them for the processing of our business requirements by law.
* You have the right to access to your personal data within normal business hours via electronic format.
* You have the right to withdraw from any mailing list or social media outlet at any time.
*You have the right to complain to your local data protection agency about the information we keep that is outside of what is required by law.
How to Contact Me:
My name is Marybeth Rich and I am the data controller for Forest of Jewels For the purposes of data protection you can contact me at pinetreejewels@gmail.com If you have any questions or concerns.