This Privacy Policy describes how and when I collect, use and share information when you order from me or use my services through Etsy.com or related sites and services.

These rules do not apply to the practices of third parties that are not owned or controlled by me, including Etsy or any third party services that I may access through Etsy. You may review Etsy's Privacy Policy to learn more about Etsy's privacy practices.

To process your order, you must provide me with certain information (which you have authorized Etsy to transmit to me), and in particular your name, your email address, your mailing address, and payment details, as well as the description of the product you are ordering. You may also decide to give me some additional personal information by contacting me directly.

Why do I need your information and how do I use it?

I rely on several legal bases to collect, use and share your information: to provide you with my services, to process your order, to resolve a dispute or to provide you with customer service. When you have given me your explicit consent, which you may revoke at any time, if necessary (to comply with a legal obligation, a court judgment, or in connection with a court request, such as withholding information regarding your purchases under tax law) to serve my legitimate interests (in case these legitimate interests are not overridden by your rights or interests, such as 1) to provide and improve my services. I use your information to provide the services you have requested and in my legitimate interest to improve those services; and 2) compliance with the Provider Rules and the Etsy Terms of Use).
I use your information, if necessary, to fulfill my obligations under the Vendor Rules and the Etsy Terms of Use.

Information Exchange and Dissemination
Information about my customers is important to my business. I do not share your personal information.

Etsy.
I share your information with Etsy when necessary to provide you with my services and to fulfill my obligations under the Provider Rules and Etsy's Terms of Use.

Service Providers.
I use certain third parties that I trust to perform certain actions or provide certain services for my store, for example, shipping companies. I may need to share your personal information with these third parties, but only to the extent necessary to perform these services.

Compliance with legislation.
I may need to collect, use, retain and share your information if I believe in good faith that it is necessary and reasonable to do so: a) to respond to legal process or a government request; b) to enforce my agreements, terms or regulations; c) to prevent, investigate or manage fraud or other illegal activity, or technical or security issues; or d) to protect the rights, property and safety of my customers or others.

Data Retention
I keep your information only as long as necessary to provide you with my services and for the purposes set forth in my Privacy Policy. I may also need to retain this information to fulfill legal and statutory obligations, to resolve disputes, and to enforce my commitments. I generally retain it for a period of 4 years.


Transfers of personal information outside the EU
We may store and process your information through third party hosting providers located in the United States or other countries. As a result, I may transfer your personal information to a jurisdiction where data protection laws and government oversight are different from your country. If I need to transfer your personal information outside of the European Union, I rely on the Privacy Shield as a legal basis for doing so, as Google Cloud is Privacy Shield certified.

Your rights
If you are a resident of certain territories, including the European Union, you have certain rights regarding your personal information. Some of these rights apply generally
and others only apply in limited circumstances. These rights are described below:

Access.
You may have the right to access and receive a copy of the personal information I hold about you by contacting me. You will find my contact information below.
Modify, restrict, delete. You may also have the right to modify your personal information, restrict my use of it or delete it. Except in exceptional circumstances (e.g. if I need to keep my store data for legal reasons), I will generally delete your personal information upon your request.

Object.
You may object 1) to me processing some of your information in my legitimate interest and 2) to receiving marketing messages from me after you have explicitly consented to receive them. In these cases, I will delete your personal information unless I have legitimate reasons to continue using it, or where required for legal reasons.

Complaints.
If you are a resident of the European Union and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you may do so with your local data protection authorities.

How to contact me:
Under the European Data Protection Act, I, Chloé Bordils, am the data controller in relation to your personal information. If you have any questions or concerns, you can contact me at my email chloe@chloebordils.com. You can also send me a postal mail to the address :
Chloé Bordils - Apartado de correos 72 - 12200 Onda - Spain.