Osda Life Privacy Policy
Last updated: November 22, 2025
This Privacy Policy explains how Osda Life (“Osda Life”, “I”, “me”, “my”) collects, uses, and shares information when you purchase a product from my Etsy shop, contact me, or otherwise use my services through Etsy.com and its related sites and services.
Osda Life sells digital downloadable products only through Etsy. All products are delivered electronically via Etsy’s automated download system. No physical items are currently shipped.
By purchasing from Osda Life or otherwise interacting with my shop, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree, you must discontinue use of my services.
I may update this Privacy Policy from time to time. If changes are made, I will revise the “Last updated” date at the top of this page.
This Privacy Policy applies only to my own privacy practices as an independent seller and data controller. It does not apply to Etsy’s practices or to any other third parties. Etsy is responsible for its own processing of your personal data, which is described in the Etsy Privacy Policy and related documents available on Etsy’s website.
Data Controller and Contact Information
For purposes of data protection laws such as the General Data Protection Regulation (GDPR), Osda Life is the data controller for the personal information described in this policy.
Contact method: You may reach me exclusively via Etsy Messages for any questions or concerns about this Privacy Policy or your personal data. I do not use external email for customer communication to comply with Etsy’s policies, which require all buyer-seller contact to be conducted through the Etsy platform.
Scope of This Policy
This Privacy Policy applies to personal information collected and processed in connection with:
Purchases of digital downloadable products from my Etsy shop (www.osdalife.etsy.com or its localized equivalents)
Communications with me through Etsy’s messaging system
Analytics and reporting related to visits to my Etsy listings and shop pages
This policy applies to customers and visitors worldwide, including those located in the European Economic Area (EEA), United Kingdom, Canada, the United States (including California), and other regions with data protection laws.
Information I Collect
When you purchase a digital product or contact me through Etsy, I receive certain information from Etsy as part of the transaction or interaction. This may include:
Your name
Your Etsy username
Your email address (if provided by Etsy)
Your country or general location
Details of the digital item(s) you purchased
Payment method type (for example, credit card, PayPal, Etsy Gift Card; Etsy does not share full payment details like card numbers or account numbers)
Any information you choose to include in messages to me
I do not receive your full payment details (such as full credit card numbers or bank account numbers). Etsy and its payment processors handle all payment processing and only share limited information with me that is necessary for the transaction.
You may also provide additional personal information if you contact me directly (for example, questions about a digital file, customization requests, or technical support requests).
Because my shop currently offers only digital downloads, I do not ordinarily collect or use full postal shipping addresses for fulfillment. However, Etsy may still display or store address fields as part of your Etsy account, over which Etsy has primary control.
Legal Bases and Purposes for Processing
Depending on your location, I may be required to explain the lawful bases I rely on for processing your personal data. Under the GDPR (for EU/UK customers) and similar laws, I rely on the following legal bases:
a. Contract Performance
To fulfill your order and provide related services, including:
Processing your order and making your digital files available for download
Providing customer support and responding to your messages
Resolving disputes related to orders or digital delivery
Honoring refund or exchange policies, where applicable
Processing on this basis is necessary for performing the contract between us (your purchase of a digital product).
b. Legal Obligation
To comply with legal and regulatory requirements, for example:
Maintaining business, tax, and accounting records
Responding to lawful requests from public authorities or regulators
Complying with applicable consumer protection, e-commerce, or financial reporting laws
c. Legitimate Interests
Where it is necessary for my legitimate interests, balanced against your rights and freedoms, for example:
Monitoring shop performance and improving my products, listings, and customer experience
Using aggregated or de-identified analytics information to understand trends and demand
Protecting my rights, security, and business interests (for example, preventing fraud or abuse)
Where I rely on legitimate interests, I do so only where those interests are not overridden by your rights and interests.
d. Consent (Where Required)
In limited cases, I may rely on your consent, for example:
If I ever send you marketing communications outside Etsy’s messaging system (only with your explicit opt-in)
How to withdraw consent: Since Osda Life operates entirely within Etsy’s platform, you can withdraw consent by:
Contacting me via Etsy Messages to request withdrawal, or
Using Etsy’s own privacy settings and communication preferences to limit marketing messages
Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.
How I Use Your Information
I use your personal information only for purposes that are reasonable and necessary in connection with running my Etsy shop and providing digital products, including:
Fulfilling orders: providing access to purchased digital files, addressing any download issues, and supporting your use of the product as described in the listing
Customer communication: replying to messages, answering questions, handling order issues, and providing technical support
Legal and tax compliance: keeping records of sales and transactions for accounting and tax purposes as required by law
Shop administration and improvement: reviewing anonymized or aggregated analytics to understand which listings are viewed, purchased, or favorited and to improve my product offerings, descriptions, and pricing
Fraud prevention and security: monitoring for suspicious activity related to orders or messages, and addressing misuse of my digital products or shop
I do not use your personal information to make automated decisions that produce legal or similarly significant effects (see Section 10).
Analytics and Cookies (Including Google Analytics)
My shop operates entirely on Etsy’s platform. Etsy uses cookies and similar technologies for core site functions, analytics, and advertising. Any cookies or trackers on my shop pages are implemented and controlled by Etsy and its partners, not directly by me.
Where enabled for my shop, I receive access to Etsy-provided analytics and Google Analytics reports that show how visitors interact with my listings and shop pages. These reports may include, for example:
Number of visits and page views
Listings viewed and traffic sources (for example, Etsy search, external referrer, ad campaign)
General device and browser information (for example, mobile or desktop, operating system, browser type)
Approximate location information such as country or region
These analytics reports are provided to me in aggregated or de-identified form. I do not receive information from Google Analytics that directly identifies you as an individual, such as your name, email address, or full IP address.
For visitors in regions that require a legal basis for analytics (for example, the EU or UK), I rely on my legitimate interest in understanding how my shop is used and improving my products and services. Where local law requires prior consent for non-essential cookies or analytics, Etsy is responsible for collecting and managing that consent through its own cookie banners and privacy settings.
If you wish to manage analytics or advertising cookies, you can:
Adjust your browser or device settings to restrict or block cookies
Use browser-based opt-out tools where available
Adjust your privacy and advertising preferences in your Etsy account settings
Because I do not operate my own independent website for these transactions, I do not set or manage cookies directly. Etsy manages cookies and similar technologies on my behalf through its platform.
Information Sharing and Disclosure
I value your privacy and only share your personal information in limited, appropriate circumstances:
a. With Etsy
I share information with Etsy as necessary to operate my shop and comply with Etsy’s policies. When you place an order, Etsy shares with me the information needed to fulfill your order and handle customer service. Etsy remains responsible for its own use of your data, as described in Etsy’s own privacy documents.
b. With Service Providers
At this time, my products are delivered digitally through Etsy; no physical items are shipped.
I may, however, use third-party services for:
Accounting and tax preparation and secure record-keeping
Cloud-based document storage or backup
Customer support tools (if ever used in the future)
In such cases, I share only the minimum information necessary for those providers to perform their functions, and I require them to protect your information in accordance with applicable laws and appropriate security measures.
If I later add physical products or use print-on-demand or shipping services, this Privacy Policy will be updated to explain how your address and order details are shared with those providers.
c. Legal Compliance and Protection
I may disclose your information if I reasonably believe it is necessary to:
Respond to lawful requests or legal processes (for example, subpoenas, court orders, regulatory inquiries)
Meet tax, accounting, or other legal reporting obligations
Protect my rights, property, safety, or that of my customers or others
Detect, prevent, or address fraud, security issues, or shop policy violations
d. No Sale or Rental of Personal Data
I do not sell or rent your personal information.
For California and similar jurisdictions: I do not “sell” or “share” your personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). Any targeted advertising you see on or off Etsy is controlled by Etsy and its partners under their own policies.
Data Retention
I retain personal information only for as long as reasonably necessary to achieve the purposes described in this policy or as required by law. Specifically:
Order and transaction records: retained for up to 7 years (or a different period if required by local tax or accounting law) to comply with financial and tax obligations
Customer communications (Etsy Messages): retained as long as reasonably necessary for business records, customer service, dispute resolution, and legal protection
Etsy may control how long certain data (such as order histories or message threads) is stored on its platform. For detailed information about Etsy’s own data retention practices, please refer to Etsy’s Privacy Policy and help resources.
If you request deletion of certain data, I will comply where required by law and where the data is under my control, unless I must retain it to comply with legal obligations or protect my rights.
International Data Transfers
Osda Life is based in the United States of America. When you buy from my shop or communicate with me, your personal information may be processed in the United States of America and any other country where Etsy, its affiliates, or its service providers operate.
For EU/UK and other international customers:
Data associated with your Etsy account and transactions is primarily controlled and processed by Etsy, which uses legal mechanisms such as Standard Contractual Clauses or other recognized safeguards for international transfers
I do not maintain separate international infrastructure outside of Etsy. To the extent I store records (for example, invoices or accounting records) in my own systems, those are hosted in my country of residence or by reputable providers that commit to appropriate data protection safeguards
By using Etsy and purchasing from my shop, you understand that your personal information may be transferred to and processed in countries that may have different data protection laws than your country of residence. Appropriate safeguards are used to protect your information in these circumstances where required by law.
Automated Decision-Making
I do not use automated decision-making that produces legal or similarly significant effects about you. All decisions regarding your orders, refunds, and customer service involve human review.
Note: Etsy’s automated delivery of digital files after purchase is a routine contract fulfillment process and does not constitute automated decision-making under privacy laws.
Your Rights
Your rights may vary depending on your place of residence. Many of these rights are primarily exercised through Etsy, because Etsy controls the underlying platform and most of the data associated with your account.
a. EU/EEA and UK (GDPR / UK GDPR)
If you are located in the EEA or UK, you may have the right to:
Access: request access to the personal data I hold about you
Rectification: request correction of inaccurate or incomplete data
Erasure: request deletion of personal data in certain circumstances (for example, where it is no longer needed for the original purposes)
Restriction: request that I limit the processing of your data in certain situations
Objection: object to certain types of processing, including where I rely on legitimate interests
Data portability: receive certain personal data in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible
Complaint: lodge a complaint with your local data protection authority if you believe your rights have been violated
b. Canada (PIPEDA and similar laws)
If you are located in Canada, you may have the right to:
Know how your data is collected, used, and disclosed
Access your personal information and request corrections where it is inaccurate or incomplete
Withdraw consent for certain uses, subject to legal or contractual restrictions
c. United States, Including California (CCPA/CPRA)
Depending on your state, you may have rights such as:
Right to know the categories and specific pieces of personal information collected, used, or disclosed
Right to deletion of certain personal information, subject to exceptions (for example, where retention is required by law)
Right to correct inaccurate personal information
Right to opt out of the sale or sharing of personal information (Osda Life does not sell or share your personal information for cross-context behavioral advertising as defined by CCPA/CPRA)
Right to non-discrimination for exercising your privacy rights
d. Other Jurisdictions
If you are located in a country with its own data protection laws (for example, Brazil, Australia, or others), you may have additional or different rights under local law.
How to Exercise Your Rights
Because most of your personal data is processed and stored by Etsy, many requests should be directed to Etsy or managed through your Etsy account settings (for example, downloading your Etsy data, managing communication preferences, or closing your account).
If your request relates to information that I directly control and store (for example, business records or message history outside Etsy’s own tools, if any), you may contact me exclusively via Etsy Messages.
Please clearly state:
Your identity and how you are associated with my shop (for example, order number or username)
What right you wish to exercise (for example, access, correction, deletion)
Any relevant details to help locate your information
I may need to ask for additional information to verify your identity and to protect your privacy and security. I will respond within the timeframes required by applicable law.
Security
I take reasonable and appropriate measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures may include:
Limiting access to records to only those who need it for legitimate business reasons
Using password protection and, where available, multi-factor authentication for accounts used to store business records
Storing records in reputable, secure services
No system is completely secure, and I cannot guarantee absolute security. However, I am committed to safeguarding your information and will act promptly in the event of a known or suspected security issue involving data under my control.
Children’s Privacy
My shop and products are intended for adults. I do not knowingly collect personal information from children under the age required by applicable law in their jurisdiction (for example, 13 or 16). If I learn that I have inadvertently collected such information, I will take reasonable steps to delete it.
If you believe that a child has provided me with personal information, please contact me using the contact details above.
Marketing Communications
I do not automatically add you to marketing email lists outside of Etsy solely because you made a purchase. If I ever offer an external email newsletter or similar marketing, I will only add you if you actively opt in, and you may unsubscribe at any time.
You may also receive service-related messages through Etsy (for example, order confirmations, download notifications, or conversations about your purchase). These are necessary for completing your orders and are not considered marketing.
Changes to This Policy
I may update this Privacy Policy from time to time to reflect changes in my practices, Etsy’s features, or applicable laws. When I do, I will update the “Last updated” date at the top of this page.
If the changes are material, I may also provide additional notice (for example, by posting a notice in my shop announcements on Etsy). Your continued use of my shop and services after any changes means you accept the updated Privacy Policy.
