Puck & Mab Privacy Policy
Effective September 13, 2026
This Privacy Policy describes how Puck & Mab collects, uses, and shares personal information when you purchase an item from us, contact us, or otherwise use our services through Etsy.
Puck & Mab is an independent sole proprietorship based in Ohio, United States. For purposes of applicable data protection law, including the EU General Data Protection Regulation (“GDPR”), David Vodolazkiy, doing business as Puck & Mab, is the data controller of personal information processed by the shop.
Privacy questions or requests may be submitted through Etsy Messages to Puck & Mab.
Information we collect
To fulfill your order, we may receive information that you have authorized Etsy to provide to us, including your name, email address, billing or shipping address when applicable, order information, and details of the product you purchased.
You may also provide additional information when contacting us or requesting a personalized product, such as names, dates, event information, photographs, wording, or other customization details.
We do not receive or store your complete credit-card or other payment-account information. Payments are processed by Etsy and its payment providers.
Why we use your information
We use personal information only where we have an appropriate legal basis, including:
Performance of a contract. We use your information as necessary to process and fulfill your order, provide digital products, complete requested personalization, communicate about your purchase, and provide customer service.
Legal obligations. We may retain or process information where necessary to comply with tax, accounting, regulatory, fraud-prevention, or other legal requirements.
Legitimate interests. We may use information where reasonably necessary to operate and improve Puck & Mab, provide customer support, maintain business records, prevent misuse, resolve disputes, and protect our legal rights, provided those interests are not overridden by your rights.
Consent. Where consent is legally required, such as for certain marketing communications, we will obtain it separately. Purchasing from Puck & Mab does not automatically subscribe you to marketing communications.
Information sharing and disclosure
We share customer information only for limited business purposes and when reasonably necessary.
Etsy. We share information with Etsy as necessary to operate our shop and comply with Etsy's Seller Policy and Terms of Use.
Service providers. We may use trusted third parties to help provide products or services, such as printing, production, fulfillment, delivery, technology, or professional service providers. Personal information is shared only to the extent reasonably necessary for them to perform those services.
Legal requirements. We may collect, retain, use, or disclose information where we reasonably believe it is necessary to comply with applicable law or legal process; prevent or investigate fraud or security issues; enforce agreements; or protect the rights, property, or safety of Puck & Mab, our customers, or others.
We do not sell or rent customers' personal information.
Data retention
We keep personal information only for as long as reasonably necessary to provide our services and meet legitimate legal and business requirements.
Transaction and accounting information may be retained for up to seven years where necessary for tax, accounting, legal, or recordkeeping purposes.
Personalization information and customer communications are retained only as long as reasonably necessary to fulfill orders, provide customer service, resolve disputes, or protect our legal rights.
Information retained by Etsy is subject to Etsy's own privacy and retention practices.
Transfers outside Europe
Puck & Mab operates in the United States. Customers located in the European Economic Area, United Kingdom, or other jurisdictions outside the United States should understand that information may therefore be processed in the United States or other countries.
Where applicable law requires safeguards for international transfers, we rely on appropriate safeguards provided by Etsy or relevant service providers.
Your rights
Depending on where you live, you may have rights regarding your personal information, including rights to:
access personal information held about you;
request correction of inaccurate information;
request deletion in appropriate circumstances;
request restriction of processing;
object to certain processing;
receive certain information in a portable format;
withdraw consent where processing is based on consent; and
lodge a complaint with an appropriate data protection authority.
Some rights may be subject to legal exceptions, including where information must be retained for tax, accounting, fraud prevention, legal claims, or other lawful purposes.
To make a privacy request concerning information controlled by Puck & Mab, contact us through Etsy Messages.
Requests concerning information controlled directly by Etsy may need to be submitted to Etsy separately.
Marketing
We will not use information obtained from an Etsy transaction to send off-platform marketing communications unless you have separately consented to receive them.
If Puck & Mab offers an optional mailing list in the future, subscribers will be able to unsubscribe at any time.
Security
We take reasonable measures intended to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure. No online system can guarantee absolute security.
Changes to this policy
We may update this Privacy Policy as our shop, services, service providers, or legal obligations change. The effective date above will be updated when material changes are made.
Contact
For purposes of EU data protection law:
Data controller: David Vodolazkiy, doing business as Puck & Mab
Business type: Sole proprietorship
Location: Ohio, United States
Contact: Etsy Messages through the Puck & Mab shop
