MadeBySUP

Privacy Policy
This Privacy Policy explains how I collect, use, and share information when you purchase an item from my shop, contact me, or otherwise interact with my services through Etsy.com or its related sites and services. This policy does not apply to the practices of third parties that I do not own or control, including Etsy or any third-party services you access through Etsy. For more details, please refer to Etsy's Privacy Policy.

1. Information I Collect
To process your order, you must provide me with certain information (which you authorised Etsy to provide to me), including:

Your name
Email address
Postal address
Payment information (handled securely via Etsy)
Details of the product you’re ordering
You may also choose to provide me with additional personal information (e.g., for custom orders) if you contact me directly.

2. Why I Need Your Information and How I Use It
I rely on several legal bases to collect, use, and share your information, including:

To fulfil your order. I use your information to process payments, ship orders, and provide customer support.
To comply with legal obligations. I may keep information as required for tax law or other regulations.
To provide and improve my services. I use your information as necessary to enhance my offerings, but only within the scope of legitimate business purposes.
3. Information Sharing and Disclosure
I value your privacy and only share your information in limited circumstances:

Etsy. I share information with Etsy as necessary to provide my services and comply with Etsy policies.
Service providers. I engage trusted third parties (e.g., delivery companies) to perform functions for my shop. These third parties will only receive the information necessary to perform these services.
Compliance with laws. If required, I may disclose your information to comply with legal obligations or court orders.
4. Data Retention
I retain your personal information only as long as necessary to provide my services and comply with legal obligations. Typically, I store your data for 4 years, unless further retention is required for legal or tax reasons.

5. Transfers of Personal Information Outside the EU
I may store and process your information using third-party hosting services located in the US or other jurisdictions. When transferring information outside the EU, I rely on legal safeguards, such as Privacy Shield certification for relevant services, to protect your data.

6. Your Rights
If you reside in certain territories, including the EU, you have the following rights concerning your personal information:

Access. You can request a copy of the data I hold about you.
Change, restrict, or delete. You can request corrections, limit the use of your data, or have your information erased (barring legal obligations to retain it).
Object. You can object to the processing of your data for legitimate interests or marketing purposes.
Complain. If you believe I have mishandled your data, you have the right to file a complaint with your local data protection authority.
7. How to Contact Me
For purposes of EU data protection law, I, [Your Name], am the data controller of your personal information. If you have questions or concerns, please contact me at:

Email: [Your Email Address]
Address: [Your Business Address]

Alternatively, you can contact Etsy directly for assistance with privacy-related concerns at Etsy Help Center.