EarthShock

EarthShock ("we", "our", "us", or "the shop") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our Etsy shop or make a purchase.

By using our shop, you agree to the terms outlined in this policy.

1. Information We Collect
When you visit EarthShock on Etsy or place an order, we may collect the following information:

Name and billing/shipping address

Email address

Etsy username

Payment information (processed securely by Etsy – we do not store full payment details)

Order history and purchase preferences

Communication history (messages sent via Etsy Conversations)

2. How We Use Your Information
We use your personal information to:

Process and fulfil your orders (including shipping and order confirmation)

Communicate with you about your order, delivery, or any issues

Respond to your messages and customer service enquiries

Improve our products and shop experience

Comply with legal obligations (e.g., tax and record-keeping requirements)

We will never sell, rent, or trade your personal information to third parties for marketing purposes.

3. Legal Basis for Processing (UK GDPR)
Under UK data protection law, we process your information on the following bases:

Contractual necessity: To fulfil your orders and provide our services to you.

Legitimate interests: To improve our shop and respond to customer enquiries.

Legal obligation: To retain records for tax and accounting purposes.

4. Sharing Your Information
We share your information only when necessary to operate our shop:

Etsy: As our platform provider, Etsy collects and processes your data according to their own Privacy Policy. We do not control Etsy's data practices.

Shipping carriers (e.g., Royal Mail, Evri, UPS): To deliver your order, we share your name and address.

Legal authorities: If required by law, we may disclose information to comply with legal processes.

We do not share your information with any other third parties.

5. Data Retention
We retain your personal information for as long as necessary to:

Fulfil your orders

Maintain records for tax and accounting purposes (typically 6–7 years in the UK)

Resolve disputes or enforce our agreements

After the retention period expires, your information will be securely deleted or anonymised.

6. Your Rights (UK GDPR)
Under UK data protection law, you have the following rights:

Right to access – Request a copy of the personal data we hold about you.

Right to rectification – Correct inaccurate or incomplete information.

Right to erasure – Request deletion of your data (subject to legal obligations).

Right to restrict processing – Limit how we use your data.

Right to data portability – Receive your data in a structured, commonly used format.

Right to object – Object to processing based on legitimate interests.