Loras3DCrafts

Information I Collect
In order to fulfill your order, you must provide me with certain information (which you have authorized Etsy to provide to me), such as your name, email address, postal address, payment information, and details of the item you ordered. If you contact me directly, you may also choose to provide me with additional personal information (for example, for a specific color or drawing style).

Why Do I Need Your Information and How Do I Use It?
I rely on a number of legal bases to collect, use and share your information, including:
• your information is needed to provide my services, such as when I use it to fulfill your order, resolve disputes, or provide customer support.
• required when you give your affirmative consent, which you can revoke at any time, such as signing up for my mailing list.
• required if necessary to comply with a legal obligation or court order, or in connection with a legal request, such as withholding information about your purchases if required by tax law.
• As necessary for the purpose of my legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as 1) providing and improving my Services. I use your information to provide the services you request and to improve my services in my legitimate interest; and 2) compliance with Etsy Seller Policy and Terms of Use. I use your information as necessary to comply with my obligations under the Etsy Seller Policy and Terms of Use.

Information Sharing and Disclosure
Information about my customers is important to my business. I share your personal information for very limited reasons and in limited circumstances as follows:
• Etsy. I share with Etsy the necessary information to provide you with my services and to comply with my obligations under both the Etsy Seller Policy and the Etsy Terms of Use.
• Service providers. I hire some trusted third parties to perform functions such as delivery companies and provide services to my shop. I will share your personal information with these third parties, but only to the extent necessary to perform these services.
• Business transfers. If I sell or merge my business, I may only disclose your information as part of that transaction to the extent permitted by law.
• Compliance with the law. I may collect, use, store and share your information if I believe in good faith that it is reasonably necessary to: (a) respond to legal process or government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate and address fraud and other illegal activities, security or technical issues; or (d) protect the rights, property and safety of my customers or others.

Data storage
I store your personal information only for as long as necessary to provide you with my services and as described in my Privacy Policy. However, I may also need to retain this information to comply with my legal and regulatory obligations, resolve disputes, and enforce my agreements. I usually keep your data for 5 years.

Transfer of Personal Information Outside the EU
I may store and process your information through third party hosting services in the US and other jurisdictions. As a result, I may transfer your personal information to a jurisdiction that has different data protection and government surveillance laws from your jurisdiction. If I need to transfer information about you outside the EU, I rely on Privacy Shield as the legal basis for the transfer, as Google Cloud is Privacy Shield certified.

Your rights
If you reside in certain regions, including the EU, you have a number of rights regarding your personal information. Some of these rights apply generally, while others apply only in certain limited circumstances. I explain these rights below:
• Access. You may have the right to access and obtain a copy of the personal information I hold about you by contacting me using the contact details below.
• Modify, restrict, delete. You may also have the right to change, restrict or delete your personal information. I will usually delete your personal information upon request, unless there are exceptional circumstances (such as where I have to store data for legal reasons).
• Article. You can object to (i) processing certain of your information based on my legitimate interests and (ii) receiving marketing messages from me after you have given your express consent to receive them. In such cases, I will delete your personal information unless I have compelling and legitimate reasons to continue using that information or it is necessary for legal reasons.
• To complain. If you are a resident of the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to report it to your local data protection authority.

How to Contact Me?
For the purposes of EU data protection law, I, 3DARTSTOREEPOP, am the data controller of your personal information. If you have any questions or concerns, you can contact me at