CutePatchforBaby

Privacy Policy for Cute Patch (Etsy Shop)
Effective Date: 06/06/2025

Thank you for visiting Cute Patch on Etsy. We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Luxembourg data-protection laws. This Privacy Policy explains how we collect, use, disclose, and retain your information when you shop with us.

1. Data Controller
Cute Patch
Location: Luxembourg
Contact Email: contato.cutepatch@gmail.com

As the data controller, Cute Patch determines the purposes and means of processing your personal data.

2. Information We Collect
When you place an order or communicate with us, we may collect the following categories of personal data:

Identity & Contact Data

Full name

Email address

Shipping address

Transaction Data

Order details (items purchased, quantity, price)

Payment status (note: actual payment processing is handled by Etsy; we do not store your credit‐card data)

Communication Data

Messages exchanged via Etsy (questions, requests, feedback)

Technical & Usage Data

IP address (as provided by Etsy)

Device or browser information (as provided by Etsy)

We never request more data than is strictly necessary for fulfilling orders, providing customer service, or complying with legal obligations.

3. Purpose & Legal Basis for Processing
We process your personal data for the following reasons:

Order Fulfillment (Contractual Necessity)
To confirm, package, and ship your purchase, to provide order updates, and to handle returns/exchanges.

Customer Support (Legitimate Interest)
To answer your inquiries, troubleshoot any issues, or respond to messages you send via Etsy.

Legal & Tax Compliance (Legal Obligation)
To maintain accounting records (e.g., invoices, receipts) and comply with Luxembourg tax, customs, and consumer-protection laws.

Marketing & Promotions (Consent)
Only if you choose to subscribe to our newsletter list, we may send occasional emails about new products or promotions. You may withdraw consent at any time by clicking “unsubscribe” in any marketing email.

Improving Our Services (Legitimate Interest)
To analyze order patterns, customer feedback, and website performance in order to improve product selection, packaging, or service quality.

4. How We Use and Share Your Data
Etsy Platform & Service Providers

We share your name, shipping address, and order details with Etsy and the shipping carrier to fulfill your order.

We may share minimal contact details with our chosen logistics partners (e.g., postal or courier services) so they can deliver your package.

Legal Authorities

If required by law (e.g., tax audits, customs inspections), we disclose transaction details or customer information to relevant authorities.

Third-Party Analytics & Improvement Tools

We might use anonymized, aggregated data (e.g., number of orders per month) to understand sales trends. We never share personally identifiable information in aggregated reports.

No Sale of Personal Data

We do not sell, rent, or trade your personal information to any third parties for marketing purposes.

5. Cookies and Tracking (via Etsy)
Since Cute Patch operates exclusively through the Etsy platform, all cookies, tracking pixels, and analytics tools are managed by Etsy. For details on how Etsy uses cookies or collects analytics data, please refer to Etsy’s own Privacy Policy. Cute Patch does not set cookies directly in your browser.

6. Data Retention
Order Records: We keep your order history and associated correspondence for as long as necessary to comply with Luxembourg’s legal and tax obligations (currently up to 10 years).

Marketing Lists: If you subscribe to our newsletter, your email remains on our list until you unsubscribe.

Support Correspondence: We retain message threads with you for up to 2 years, unless you request earlier deletion.

Once retention periods expire, we will either delete or anonymize your remaining personal data.

7. Your Rights Under GDPR
As an EU resident, you have these rights regarding your personal data:

Right of Access
You can ask us to confirm whether we hold personal data about you and request a copy of that information.

Right to Rectification
If any information we hold is inaccurate or incomplete, you can request corrections.

Right to Erasure (“Right to Be Forgotten”)
You may request that we delete your personal data, except insofar as we need to retain it for legal compliance (e.g., tax records).

Right to Restrict Processing
In certain cases, you can ask us to temporarily suspend processing your data (for example, if you contest its accuracy).

Right to Data Portability
You can ask for a machine-readable copy of your data to transfer elsewhere.

Right to Object
You can object to our processing when we rely on legitimate interests. We will stop unless we demonstrate compelling legitimate grounds.

Right to Withdraw Consent
If processing is based on consent (e.g., marketing emails), you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Right to Lodge a Complaint
If you believe our processing violates GDPR, you can file a complaint with Luxembourg’s data protection authority (National Commission for Data Protection – CNPD).

To exercise any of these rights, please contact us at [Insert Contact Email].

8. Security Measures
We implement reasonable technical and organizational measures to safeguard your personal data:

All order data is transmitted via Etsy’s secure platform (HTTPS/TLS encryption).

We store any minimal data we keep (such as order archives) in password-protected systems.

Only authorized members of Cute Patch have access to customer data, and we regularly review permissions.

Despite these measures, no internet transmission is 100 % secure. If you suspect a data breach affecting your data, please notify us immediately.

9. International Transfers
Your personal data remains within the European Economic Area (EEA). Since Etsy processes payments (via third-party processors) outside the EEA in some cases, Etsy itself ensures any cross-border data transfers comply with GDPR (e.g., using Standard Contractual Clauses). Cute Patch does not export your data beyond the EEA for its own purposes.

10. Children’s Privacy
Our Etsy shop is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a child, please contact us to request deletion.

11. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The “Effective Date” at the top will be updated when any material changes occur. We recommend reviewing this page from time to time.

Contact Information
If you have any questions, requests, or concerns about this Privacy Policy or how we handle your data, please get in touch:

Email: [Insert your business email]

Etsy Messages: Visit our Cute Patch shop page and click “Contact”

Thank you for trusting Cute Patch with your information. We appreciate your business and will do everything we can to keep your data safe.