PRIVACY POLICY

● PERSONAL INFORMATION COLLECTED ●

To process your order, you must provide me with certain information (that you have authorized Etsy to transmit to me), and in particular your name, email, mailing address, payment details, as well as the description of the product you are ordering.
You may also choose to provide me with certain additional personal information (for a custom order for example), by contacting me directly.

● WHY I NEED YOUR INFORMATION AND HOW I USE IT ●

I rely on a number of legal bases to collect, use and share your information, including:
to provide my services to you, such as when I use your information to process your order, resolve a dispute or provide customer service as necessary to comply with a legal obligation, legal process or court order, such as retaining information about your purchases for tax purposes if necessary, to serve my legitimate interests, where those legitimate interests are not overridden by your rights or interests, such as 1) providing and improving my services. I use your information to provide the services you have requested and in my legitimate interest to improve those services; and 2) compliance with the Seller Rules and the Etsy Terms of Service. I use your information, if necessary, to comply with my obligations as defined by the Etsy Seller Rules and Terms of Service.

● SHARING AND DISSEMINATING INFORMATION ●

Information about my customers is important to my business. I only share your personal information for a very limited number of reasons, as well as in a limited number of circumstances such as:
Etsy. I share your information with Etsy when necessary to provide my services to you and comply with my obligations as defined by the Etsy Seller Rules and Terms of Service.
Service Providers. I use certain trusted third parties to perform certain actions or provide certain services for my store - shipping companies, for example. I may need to share your personal information with these third parties, but only as necessary to perform these services.
Business Transfers. If I sell my business or merge it with another, I may have to share your information as part of that transaction, but only to the extent permitted by law.
Compliance with the law. I may have to collect, use, retain and share your information if I believe in good faith that it is necessary and reasonable to: (a) comply with a legal process or state request; (b) enforce my agreements, terms, or regulations; (c) prevent, investigate, or manage any fraud or other illegal activity, or technical or security problems; or (d) protect the rights, property, and safety of my customers or others.

● DATA RETENTION ●

I retain your information only as long as necessary to provide my services to you and for the purposes set forth in my Privacy Policy. I may also need to retain this information to comply with legislative and legal obligations, resolve disputes and enforce my commitments.
I generally retain it for a period of 4 years.

● TRANSFERS OF PERSONAL INFORMATION OUTSIDE THE EU ●

I may potentially store and process your information through third-party hosting providers located in the United States or other countries. Therefore, I may transfer your personal information to a jurisdiction where the laws regarding data protection and governmental oversight are different from those in your country.
If I need to transfer your personal information outside the European Union, I rely on the Data Protection Shield ("Privacy Shield") as the legal basis for doing so, as Google Cloud is Privacy Shield certified.

● YOUR RIGHTS ●

If you are a resident of certain territories, including the European Union, you have certain rights with respect to your personal information. Some of these rights apply generally, and others only in limited cases. These rights are described below:

Access. You may have the right to access and receive a copy of the personal information I hold about you by contacting me. You can find my email address below to contact me.
Modify, restrict, delete. You may also have the right to change your personal information, restrict my use of it or delete it. Other than in exceptional circumstances (such as if I need to retain my store data for legal reasons), I will generally delete your personal information upon request.
Objecting. You may object to (1) my processing of certain of your information for my legitimate interests and (2) the receipt of marketing messages from me after you have explicitly consented to receive them. In these cases, I will delete your personal information unless I have legitimate reasons for continuing to use it, or it is required for legal reasons.
Complain. If you are a resident of the European Union and wish to express a concern about my use of your information (and without prejudice to any other rights you may have), you may do so to your local data protection authorities.

● CONTACT ●

Under the European Data Protection Act, I, Annick Ly, am the data controller with respect to your personal information. If you have any questions or concerns, you can contact me on my email: contact.apily@gmail.com.


Annick Ly