HeARTfromNature

These privacy rules describe how I collect, use, and share information, as well as when and under what circumstances, when you order from me or use my services via Etsy.com or the sites and services associated with it.

These rules do not apply to practices of third parties that I do not own or control, including Etsy or any third-party service you may access through Etsy. You can refer to Etsy's Privacy Policy for more information about the site's practices in this regard.

Information I Collect

To process your order, you must provide me with certain information (that you have authorized Etsy to transmit to me), including your name, email, postal address, payment information, and the description of the product you are ordering. You may also choose to provide me with additional personal information (for example, for a personalized order), by contacting me directly.

Why I Need Your Information and How I Use It

I rely on a number of legal bases to collect, use, and share your information, including:

to provide you with my services, such as when I use your information to process your order, resolve a dispute, or provide customer service;
when you have given me explicit consent, which you can revoke at any time, such as when you sign up for my newsletter;
if necessary, to comply with a legal obligation, court order, or request from law enforcement, such as keeping records of your purchases for tax purposes; and if necessary, to serve my legitimate interests, where those interests are not overridden by your rights or interests, such as 1) providing and improving my services. I use your information to provide the services you have requested and in my legitimate interest in improving these services; and 2) compliance with Etsy's Seller Policy and User Agreement. I use your information, if necessary, to comply with my obligations as defined by Etsy's Seller Policy and User Agreement.

Sharing and Disclosing Information

Information about my customers is important to my business. I only share your personal information for a very limited number of reasons and in a limited number of circumstances such as:

Etsy.
I share your information with Etsy when it is necessary to provide you with my services and to comply with my obligations under Etsy's Seller Policy and User Agreement.

Service Providers.
I use certain trusted third parties to perform certain actions or provide certain services for my shop - for example, shipping companies. I may have to share your personal information with these third parties, but only the information that is necessary to perform these services.

Business Transfers.
If I sell my business or merge with another company, I may have to disclose your information in the context of that transaction but only to the extent permitted by law.

Complying with Law.
I may have to collect, use, retain, and share your information if I believe in good faith that it is necessary and reasonable to: (a) respond to a legal process or government request; (b) enforce my agreements, policies, and terms of use; (c) protect my rights, privacy, safety, or property, and/or that of my customers, or others; and (d) comply with the law.

Data Retention

I retain your information only as long as necessary to provide my services and for the purposes established in my privacy policy. I may also have to retain this information to comply with legislative and legal obligations, resolve disputes, and enforce my commitments. I generally retain it for a period of: 7 years.

Transfers of Personal Information Outside of Canada

I may potentially store and process your information through third-party hosts located in the United States or other countries. As a result, I may transfer your personal information to a jurisdiction where data protection and government surveillance laws are different from those in your country. If I have to transfer your personal information outside of Canada, I rely on the Privacy Shield as the legal basis for doing so, with Google Cloud benefiting from Privacy Shield certification.

Your Rights

If you are a resident of certain territories, including the European Union, you have certain rights related to your personal information. Some of these rights apply generally, and others only in limited cases. These rights are described below:

Access.
You may have the right to access the personal information I hold about you and receive a copy by contacting me. My contact information is below.

Modify, restrict, delete.
You may also have the right to modify your personal information, restrict my use of it, or delete it. Outside of exceptional circumstances (such as if I needed to retain store data for legal reasons), I will generally delete your personal information upon request.

Object.
You can object 1) to my processing of certain of your information under my legitimate interests and 2) to receiving marketing messages from me after explicitly consenting to receive them. In these specific cases, I will delete your personal information unless I have legitimate reasons to continue using it or if it is necessary for legal reasons.

Complain.
If you reside in Canada and wish to express a concern regarding my use of your information (without prejudicing any other rights you may have), you may do so with your local data protection authorities.

How to Contact Me

Under Canadian data protection law, I, Caroline Labrie, am the data controller with respect to your personal information. For any questions or concerns, you can contact me at my email info@heartfromnature.com.