PRIVACY POLICY
Last updated: October 5, 2026
This Privacy Policy describes how MyDesignProjects collects, uses, stores, and shares personal information when you purchase a digital product from me, contact me, or otherwise use my services through Etsy.com and its related services.
MyDesignProjects sells digital machine embroidery designs. No physical products are shipped to customers.
This Privacy Policy does not apply to the practices of third parties that I do not own or control, including Etsy. For information about how Etsy collects and processes personal information, please refer to Etsy's Privacy Policy.
1. Personal Information I Receive
To fulfil your order, Etsy may provide me with certain personal information necessary to process your purchase and provide the digital product.
This information may include:
• your name;
• your Etsy username or account information;
• your email address;
• details about your order and the digital products purchased;
• transaction information made available to sellers through Etsy;
• messages you send through Etsy Messages;
• additional information you voluntarily provide when contacting me or requesting a custom design.
I do not receive or store your full credit or debit card details. Payments are processed by Etsy and its applicable payment service providers.
Because the products sold by this shop are digital, a shipping address is generally not required to fulfil an order unless such information is made available by Etsy or is required for legal purposes.
2. Why I Need Your Information and How I Use It
I use personal information only to the extent necessary to:
• fulfil and manage your order;
• provide purchased digital files;
• respond to customer questions;
• provide technical or customer support;
• handle requests relating to an order;
• fulfil custom design requests where such services are offered;
• resolve disputes;
• prevent fraud or misuse of products;
• comply with Etsy's policies;
• comply with tax, accounting, and other legal obligations;
• establish, exercise, or defend legal claims, including intellectual property rights.
I do not use buyers' personal information to send advertising or marketing communications without their prior express consent.
Customers are not automatically added to any mailing list.
3. Legal Bases for Processing
Under the GDPR, I rely on several legal bases to collect, use, and process personal information.
Performance of a contract.
Processing may be necessary to fulfil your order, provide your digital product, respond to questions about your purchase, and provide customer support.
Legal obligations.
Certain information may be processed or retained where necessary to comply with tax, accounting, legal, regulatory, or court requirements.
Legitimate interests.
I may process limited personal information where necessary to operate my shop, improve customer service, prevent fraud, protect my shop and digital products, comply with Etsy's Seller Policy and Terms of Use, or protect legal rights, provided those legitimate interests are not overridden by your rights and interests.
Consent.
Where processing is based on your consent, such as consent to receive marketing communications, you may withdraw that consent at any time.
4. Information Sharing and Disclosure
I do not sell buyers' personal information or provide it to third parties for their own advertising or marketing purposes.
Personal information may be shared only in limited circumstances, including:
Etsy.
Information is processed through Etsy as necessary to provide my services, fulfil orders, and comply with my obligations under Etsy's Seller Policy and Terms of Use.
Service providers.
If trusted third-party service providers are used to operate my shop, personal information may be shared with them only to the minimum extent necessary for them to perform the relevant service.
Compliance with laws.
I may collect, use, retain, or disclose information where I reasonably believe this is necessary to comply with applicable law, a court order, or a lawful government request.
Protection of rights and safety.
Information may be used or disclosed where reasonably necessary to prevent fraud, address security issues, protect my legal rights, or protect the rights and safety of others.
Business transfers.
If I sell, merge, or reorganise my business, personal information may be disclosed as part of that transaction only to the extent permitted by law.
5. Data Retention
I retain personal information only for as long as reasonably necessary to provide my services and for the purposes described in this Privacy Policy.
Information relating to orders and transactions may generally be retained for up to five years from the relevant transaction, unless a longer or shorter retention period is required by applicable tax, accounting, or other laws.
Information may be retained for a longer period where necessary to resolve disputes, comply with legal obligations, or establish, exercise, or defend legal claims.
Information that is no longer required will be deleted or anonymised where reasonably and technically possible.
6. Transfers of Personal Information Outside Your Country
Etsy operates as an international marketplace. As a result, personal information may be processed or stored in countries outside your country of residence.
Where personal information is transferred outside the European Economic Area, such transfers should be made in accordance with applicable data protection laws and using appropriate legal safeguards.
Personal information processed directly by Etsy is subject to Etsy's own Privacy Policy and data protection practices.
7. Data Security
I take reasonable organisational and technical measures to protect personal information against:
• unauthorised access;
• misuse;
• alteration;
• unauthorised disclosure;
• loss; or
• destruction.
Access to customer information is limited to what is reasonably necessary to operate the shop, fulfil orders, provide customer support, and comply with legal obligations.
I will never ask customers through Etsy Messages to provide their Etsy password, full payment card details, or other confidential payment credentials.
8. Your Rights
Depending on your location and applicable data protection law, including the GDPR, you may have the right to:
• know what personal information is being processed;
• access and receive a copy of your personal information;
• request correction of inaccurate or incomplete information;
• request deletion of your personal information;
• request restriction of certain processing;
• object to certain processing activities;
• receive your personal information in a portable format where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with an appropriate data protection authority.
Some of these rights may be limited where I am legally required to retain or process certain information or where the information is necessary to establish, exercise, or defend legal claims.
9. Requests to Access, Correct, or Delete Information
If you would like to access, correct, restrict, or delete personal information that I independently hold, you may contact me through Etsy Messages or using the contact details provided below.
If your request concerns information held directly by Etsy, you may need to contact Etsy directly or use the privacy controls available through your Etsy account.
10. Marketing Communications
I do not use an email address obtained through an Etsy transaction to send promotional or marketing communications without the buyer's prior express consent.
If you voluntarily consent to receive marketing communications, you may withdraw your consent at any time.
Withdrawing consent to marketing does not affect transactional or customer-service communications necessary to fulfil or support your purchase.
11. Children
My products and services are not intended to be independently purchased by children who have not reached the age at which they may lawfully enter into the relevant transaction or consent to the processing of personal information in their jurisdiction.
I do not knowingly collect children's personal information for marketing purposes.
12. Changes to This Privacy Policy
I may update this Privacy Policy from time to time to reflect changes in applicable law, Etsy policies, or the way my shop operates.
When material changes are made, the "Last updated" date of this Privacy Policy will be revised.
13. How to Contact Me
For purposes of applicable EU data protection law, the controller of personal information independently processed by MyDesignProjects is:
Owner / Data Controller: Andrey Rodkin
Etsy Shop: MyDesignProjects
Email: machineembroideryfile@gmail.com
For questions or requests concerning privacy or personal information, you may also contact me through Etsy Messages.
If you reside in the European Economic Area, you also have the right to lodge a complaint with your competent national data protection authority.
