DadArmy

#Privacy Policy for Dad Army

*Last updated: January 2026*

Dad Army (“I”, “me”, “my”) operates this Etsy shop. I respect your privacy and am committed to protecting your personal information. This Privacy Policy describes how your personal information is collected, used, shared, and retained when you purchase from or interact with my shop on Etsy.com. This policy is designed to meet **Etsy Seller Policy requirements**, **GDPR**, and **U.S. privacy laws including the California Consumer Privacy Act (CCPA/CPRA)**.

---

## 1. Personal Information I Collect

In order to fulfill your order, you must provide certain information to Etsy, which Etsy shares with me. This may include:

* Name
* Email address
* Postal/shipping address
* Order details (items purchased, order number)

Payment information (such as credit card numbers) is collected and processed **directly by Etsy**. I do **not** receive or store your full payment details.

If you contact me directly through Etsy Messages, I may also receive additional information you choose to provide (for example, details related to customer support or custom orders).

I do **not** collect or process sensitive personal data.

---

## 2. Legal Bases for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), I rely on the following legal bases to process your personal information:

* **Contractual necessity**: To process and fulfill your order, provide shipping, and offer customer support.
* **Legal obligation**: To comply with tax, accounting, and other legal requirements.
* **Legitimate interests**: To improve my services, respond to inquiries, and protect my shop from fraud or misuse, provided those interests are not overridden by your rights.

I do not use your personal information for off-Etsy marketing or profiling.

---

## 3. Information Sharing and Disclosure

I share your personal information only when necessary and in limited circumstances, consistent with Etsy’s Seller Policies:

* **Etsy**: Information is shared with Etsy to operate my shop, process payments, and comply with Etsy’s policies.
* **Shipping providers**: I share your name and shipping address with delivery services (such as USPS, UPS, or similar carriers) to deliver your order.
* **Legal and compliance**: I may disclose information if required by law, regulation, legal process, or governmental request.
* **Business transfers**: In the unlikely event of a sale, merger, or transfer of my business, personal information may be transferred as part of that transaction, subject to confidentiality obligations.

I do **not** sell, rent, or disclose your personal information to third parties for advertising or marketing purposes.

---

## 4. Data Retention

I retain personal information only for as long as necessary to provide my services and comply with legal obligations.

* Order and transaction records are generally retained for **7 years** to satisfy U.S. tax and accounting requirements.
* Customer messages are retained only as long as necessary for customer support purposes.

After the applicable retention period, personal information is securely deleted or anonymized.

---

## 5. Transfers of Personal Information Outside the EU

I am based in the United States. If you are located in the European Union or another region with data protection laws, your personal information will be transferred to and processed in the United States.

I rely on **Etsy’s data transfer mechanisms and safeguards**, including standard contractual clauses where applicable, to ensure lawful international transfers.

---

## 6. Your Rights Under GDPR

If you reside in the European Union, you have the right to:

* Access your personal information
* Correct inaccurate or incomplete information
* Request deletion of your personal information (subject to legal retention requirements)
* Restrict or object to certain processing
* Request data portability

You may exercise these rights by contacting me through Etsy Messages. You also have the right to lodge a complaint with your local data protection authority.

---

## 7. U.S. Privacy Rights (CCPA/CPRA – California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA:

* The right to know what personal information is collected, used, or disclosed
* The right to request deletion of your personal information (subject to legal exceptions)
* The right to correct inaccurate personal information
* The right to opt out of the sale or sharing of personal information (note: **Dad Army does not sell or share personal information** as defined by the CCPA)
* The right to non-discrimination for exercising your privacy rights

Requests may be submitted by contacting me through Etsy Messages. I may need to verify your request before fulfilling it.

---

## 8. Data Controller

For purposes of EU and U.S. data protection laws, I, **Josh Lightcap**, owner of Dad Army, am the data controller of your personal information.

---

## 9. How to Contact Me

If you have questions or concerns about this Privacy Policy or your personal information, please contact me through **Etsy Messages**.

---

## 10. Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to my practices, Etsy requirements, or legal obligations. Any changes will be posted here.

---

By purchasing from Dad Army, you acknowledge that you have read and understood this Privacy Policy.