HarperCustomDesignss

1. Information I Collect

To process your order, Etsy provides me with information you have authorized them to share, such as:
• Your name
• Email address
• Shipping address
• Billing address
• Payment information (I do not see full card numbers)
• The details of the product you’re ordering
• Any personalization notes, messages, or custom images you send

You may also provide additional personal information if you contact me directly.

⸻

2. Why I Need Your Information and How I Use It (Legal Bases)

I rely on the following lawful bases under the GDPR:

A. Contract

I use your information to fulfill your order, provide customer support, and deliver items.

B. Legal Obligation

I retain necessary information to comply with tax, business, and accounting laws.

C. Legitimate Interest

I may use your information to improve my services or prevent fraud.

D. Consent

If you choose to subscribe to optional messages or allow me to use photos of custom work in my portfolio, I will ask for your explicit consent. You may withdraw consent at any time.

⸻

3. Information Sharing and Disclosure

I only share your information for limited reasons:

A. Etsy

I share information with Etsy as necessary to provide you my services and comply with Etsy’s Seller Policy and Terms of Use.

B. Service Providers

I engage trusted third parties to perform functions such as:
• Shipping carriers
• Payment processors
• Printing or fulfillment partners (if applicable)

These parties receive only the minimum necessary information and must protect your data.

C. Legal Compliance

I may disclose your information if required by law (tax obligations, court orders, legal claims, fraud prevention).

⸻

4. Data Retention

I retain your personal information only as long as needed:
• Order info: up to 1 year for customer service
• Tax/business records: 6–10 years as required by law
• Custom images: deleted after the order is completed unless you consent to longer retention

You may request deletion sooner unless I am required to keep the data for legal purposes.

⸻

5. Transfers of Personal Data Outside the EU

Etsy and some of my service providers are located in the United States or other countries.
When your data is transferred, it is protected under:
• The EU–US Data Privacy Framework, and/or
• Standard Contractual Clauses (SCCs)

Your data is handled in compliance with GDPR-level protections.

⸻

6. Your Rights as an EU Customer

Under GDPR, you have the right to:
• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Restrict how your data is used
• Object to data processing
• Data portability (receive a copy in machine-readable form)
• Withdraw consent at any time
• File a complaint with your local Data Protection Authority

You may request any of these by emailing: ___

⸻

7. Security of Your Data

I protect your information by:
• Using secure password-protected devices
• Using encrypted communication where available
• Limiting access to customer information
• Deleting custom files once no longer needed

However, no system is fully secure, and transmission over the internet always involves some risk.

⸻

8. Children’s Privacy

My shop is not directed to individuals under the age of 16. I do not knowingly collect personal information from children.