thegraytower

Privacy Policy for The Gray Tower
Effective Date: 4/1/2025
1. Information I Collect
To fulfill your order, I collect certain personal information which is provided by Etsy upon your authorization. This may include:
- Your name
- Email address
- Postal address
- Payment information
- Product details
Additionally, if you contact me directly (for example, to request a custom order), you may choose to provide extra information (such as preferences or custom design specifications). I only use this information to complete your orders and provide customer support.

2. Why I Need Your Information and How I Use It
I rely on several legal bases to collect, use, and share your personal information, including:
- As necessary to fulfill your order: I use your information to process your order, settle disputes, or provide customer support.
- With your consent: If you sign up for marketing communications, I rely on your consent, which you can revoke at any time.
- To comply with legal obligations: If required by law, I will retain and share your data for legal reasons, such as tax law or compliance with government requests.
- For legitimate interests: I use your information to improve my services, comply with Etsy's Seller Policy, and provide you with the best experience.

3. Information Sharing and Disclosure
I share your information with third parties only when necessary and in limited circumstances, such as:
- Etsy: I share information with Etsy as necessary to provide you with my services and comply with Etsy’s Seller Policy and Terms of Use.
- Service providers: I may share your information with trusted third parties who help perform functions and services for my shop, such as delivery companies. These third parties will only use your information to perform these services.
- Business transfers: If I sell or merge my business, I may disclose your information as part of that transaction.
- Compliance with laws: I may disclose your personal information to comply with legal requirements, respond to government requests, prevent fraud, or protect the rights and safety of my customers and others.

4. Data Retention
I retain your personal information only as long as necessary to provide you with services, resolve disputes, and comply with legal obligations. Generally, I retain your data for the following period: 4 years.

5. Transfers of Personal Information Outside the EU
I may store and process your personal information through third-party hosting services in jurisdictions outside the EU, including the US. If your information is transferred outside the EU, I rely on Privacy Shield as the legal basis for such transfers, since Google Cloud (my hosting provider) is Privacy Shield certified.

6. Your Rights
If you reside in the EU, you have several rights regarding your personal information, including:
- Access: You have the right to access and receive a copy of your personal information. Change, restrict, or delete: You can request changes to your data, restrict how I use it, or delete it (with some exceptions, such as where I am required to store data for legal reasons).
- Object: You can object to my processing of your information based on legitimate interests, or to marketing messages after you’ve given your consent.
- Complain: If you believe that your information has been mishandled, you have the right to file a complaint with your local data protection authority.

How to Contact Me
For the purposes of EU data protection law, I, Anastasia Makarov, am the data controller of your personal information. If you have any questions or concerns, please contact me at: thegraytower1@gmail.com