SanctuaryofSelfStore

Privacy Policy
Last updated: 13 May 2026
1. Who we are
We are an independent seller on the Etsy marketplace. This policy explains how we handle the personal data we receive from you in connection with your order. For EU/UK customers, we act as a data controller under the GDPR (and UK GDPR where applicable) in respect of the limited data described below.
2. Data we process — and please don't send us more
We only process the minimum data needed to fulfil your order:

Your name and shipping address
Order details and any messages you send us through Etsy
Customs or tax information where legally required

Please do not share unnecessary information with us. Do not send payment card details, government ID numbers, health information, or other sensitive personal data through Etsy messages or order notes. We do not need it, do not ask for it, and request that you keep communications limited to what is relevant to your order. If you send us such information voluntarily, we will delete it.
3. Legal bases
We rely on: performance of a contract (to fulfil your order), legal obligation (tax and accounting records), and legitimate interest (responding to enquiries and preventing fraud).
4. Sharing
We share data only with shipping carriers, tax authorities where required by law, and our accountant. We do not sell your data and do not use it for marketing without your consent.
5. Retention
We retain order records for the period required by tax law in our jurisdiction (typically 6–10 years), after which they are deleted.
6. Your rights
You may request access, correction, deletion, restriction, portability, or object to processing by contacting us via Etsy messages. You may also lodge a complaint with your national data protection authority.
7. Etsy platform and third-party systems
Etsy operates the marketplace through which you purchased from us. Etsy collects and stores data directly from you — including your Etsy account, payment details, and platform messages — and acts as an independent data controller for that data. We have no access to or control over Etsy's systems, infrastructure, or security practices. Accordingly, we accept no responsibility for any data breach, security incident, or unauthorised access affecting Etsy's platform or systems, and any claim relating to such an incident must be raised with Etsy directly under their privacy policy. Our responsibility is limited to the personal data we ourselves receive and store, for which we take reasonable security measures.
8. Contact
For privacy questions, contact us via our Etsy shop messages.