AnnaGiDesign

PRIVACY POLICY

1 The information I collect

To complete your order, you must provide me with some information (Etsy has provided you with your permission), such as your name, email address, postal address, payment details and details of the product you have ordered. You may decide to provide me with additional personal information (for example to order a personalized jewel), if you contact me directly.

2 Because I need your information and how I use it

I rely on a number of legal bases to collect, use and share your information, including:

• They are necessary to provide my services, such as when I use your information to complete your order, resolve disputes or provide customer support;

If necessary to comply with legal obligations or court order or legal action, such as storing information about your purchase if required by tax law; is • If necessary for my legitimate interest, provided that your rights or interests do not prevail, such as 1) provide and improve my services. I use your information to provide the services you have requested and in my legitimate interest to improve my services; and 2) Compliance with the Seller's Rules and the Etsy Terms of Use. I use your information as needed to comply with my obligations, pursuant to the Seller's Settlement and Etsy Terms of Use. 3 Sharing and dissemination of information Information about my customers is important to my business. I will share your personal information only for limited reasons and circumstances, as follows: • Etsy. I share the information with Etsy as necessary to provide you with my services and for compliance with my obligations under the Etsy Sales Rules and Conditions of Use. • Service providers. I use trusted third parties to perform certain functions and to provide services to my store, such as delivery companies. I will share your personal information with these third parties, but only to the extent necessary to perform these services. • Business transfers. Should I proceed with the sale or merger of my business, I may disclose your information as part of this transaction, but only to the extent permitted by law

• Compliance with the law. I may collect, use, store and share your information if, in good faith, I deem it reasonably necessary to: (a) respond to legal proceedings or government requests; (b) apply contracts, conditions and regulations; (c) avoiding, investigating and combating fraud, and other problems related to illegal, security or technical activities; or (d) protect the rights, property and safety of my customers, or others. 4 Storage of data I will keep your personal information only for the time necessary to provide you with my services, as indicated in my Privacy Policy. However, I may be required to keep this data to comply with legal obligations, resolve disputes and enforce contracts. Generally, I keep your data for the following period of time: 4 years. 5 Transfers of personal information outside the EU I may store and process your information via third-party hosting services in the United States and other jurisdictions. As a result, I may transfer your personal information to a jurisdiction with data protection and governmental surveillance laws other than those in force in your jurisdiction. If you transfer your personal information outside the EU, I will rely on Privacy Shield as the legal basis for the transfer, as Google Cloud has Privacy Shield certification. 6 Your rights If you live in certain territories, including the EU, you have different rights related to your personal information. While some of these rights are generally applicable, others apply only in some specific cases. I describe these rights below: • Access. You have the right to access and receive a copy of your personal information in my possession by contacting me using the following contact details. • Modification, limitation, cancellation. In addition, you have the right to modify your personal information, to limit the use of your personal information or to delete your personal information. Except for exceptional circumstances (such as when I am required to retain data for legal purposes), I generally delete personal information on request. • Opposition. You may object (i) to the processing by me of some of your information based on my legitimate interest and (ii) to receiving marketing messages from me after providing your explicit consent to receive them. In such cases, I will delete your personal information, except where there are compelling and legitimate reasons for me to continue using such information or where it is necessary for legal reasons. • Complaint. If you live in the EU and wish to express a concern regarding the use of your information (and without prejudice to any rights you may have), you have the right to do so with your local data protection authority. How to contact me For the purposes of the European Data Protection Act, Anna Giraldi is responsible for processing your personal information. If you have any questions or concerns, please contact me at the email address annagidesign@gmail.com