PRIVACY POLICY

I am committed to processing personal information about customers in a way that is safe, secure and non-invasive. Under the EU General Data Protection Regulation (GDPR) 2018 this document sets out what data I collect and store when you buy from me, why I collect it, who the information is shared with and the rights of the customer to have the information changed or deleted.

WHAT INFORMATION IS COLLECTED:
Name and address
Email

Debit/credit card information is collected separately by Paypal or Etsy's payment processor. I do not have access to any information relating to your credit card(s), including type, number, or expiry date.

WHO THE INFORMATION IS SHARED WITH:

Information about my customers is important to my business. I share your personal information for very limited reasons and in limited circumstances, as follows:
• Etsy. I share information with Etsy as necessary to provide you my services and comply with my obligations under both the Etsy Seller Policy and Etsy Terms of Use.
• Service providers. I engage certain trusted third parties to perform functions and provide services to my shop, such as delivery companies (including but not limited to,Australia Post). I will share your personal information with these third parties, but only to the extent necessary to perform these services. Paypal (during payment at checkout)
• Compliance with laws. I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.

The information is not used for direct marketing such as sales emails.

HOW THE INFORMATION IS COLLECTED:
Directly from customers via the online ordering system on the Etsy web site.

WHO MAY SEE THE INFORMATION:
Myself, [Kristen Boardman], sole owner of the business.
Select third parties, i.e. Paypal, Etsy.
Other third parties, i.e. law enforcement or tax authorities (only in unusual circumstances).

TRANSFERRING PERSONAL INFORMATION OUTSIDE OF THE UK:
The use of this website requires that personal information is transferred to Etsy in the USA. I have checked that all third party partners have privacy policies in place that protect personal information to a level that complies with UK law. Etsy is protected by Privacy Shield.

KEEPING PERSONAL INFORMATION SECURE:
I am committed to keeping customer's personal information secure. It will not be sold, inappropriately shared or accidentally used. Customer's details are only used for direct communication about specific orders over email or through Etsy's messaging system. All technology in use by me is kept up to date with current security software and is not made available for use by anyone else.

HOW LONG INFORMATION IS KEPT:
Under Australian law, business records must be kept for ten years. In the case of invoices and receipts, customer information is also included. This information will be securely disposed of as soon as practical. However customers also have the right to be forgotten and personal information will be removed from my recording system if requested and it does not interfere with the obligations of the business, e.g. submitting taxes.

ACCURACY OF INFORMATION:
This web site relies on customers keeping their information up to date and accurate. Log in to your account using the 'log in' button at the top left hand side of any web page using the log in details created when you signed up for an Etsy account. You can then change your personal details from within your account.

ACCESS TO PERSONAL INFORMATION:
Under GDPR legislation, customers should have access to their personal information and be given the opportunity to change their details. You also have the right to ask me to change, restrict my use of or delete your personal information. In order to see what information is held about you either:

Log in to your account using the 'log in' button at the top right hand side of any web page using your log in details.
OR
Request to see what information is held by sending me a message with your request and including your name and address as used when shopping on this web site.

You can request that I delete your personal information from Etsy and I will contact them on your behalf. Or you can contact Etsy yourself and request the same thing directly from them. You can also close your Etsy account from within your own account settings.

If you reside in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.

CHANGES TO MY PRIVACY POLICY:
As privacy legislation is an ever changing landscape, I will update my privacy policies as required.

CONTACT DETAILS:
Kristen Boardman
sales@kikiburrabeads.com