Privacy Policy (GDPR)
Last updated: November 3, 2025
Controller: Amy Smart, trading as AmySmart on Etsy
(“I”, “me”, “my”)
Contact: amy@diaryofaquilter.com
Mailing address: Available on request
This Privacy Policy explains how and when I collect, use, and share your personal information when you purchase from my shop, contact me, or otherwise use my services through Etsy.com and related services. It does not apply to the practices of third parties that I do not own or control, including Etsy. For Etsy’s own privacy practices, please see the Etsy Privacy Policy. Etsy’s policy covers what Etsy collects and how they use, share, and retain it; Etsy’s policy also notes it does not apply to the practices of Etsy sellers.
Etsy
1) The information I collect
To fulfill your order or support you, I receive certain information (either provided by you or by Etsy), including:
Name, shipping address, and (if provided) phone number
Email address (used for order updates via Etsy Messages)
Order details (items purchased, personalization notes)
Payment confirmation details (processed by Etsy Payments; I do not receive your full card/bank details)
You may also share additional information with me via Etsy Messages (for example, custom order details). Etsy limits what data is shared with sellers and requires sellers to maintain their own privacy policy.
Etsy
2) Legal bases for processing
Under the GDPR, I rely on the following lawful bases:
Contract: To provide my services, fulfill your order, and provide customer support.
Legal obligation: To comply with tax, accounting, and consumer-protection laws.
Legitimate interests: To improve and provide my services (e.g., order records for inventory, preventing fraud, or resolving disputes) where those interests are not overridden by your rights.
Consent: For any optional uses (such as off-Etsy marketing), which I’ll request clearly and which you may withdraw at any time.
Etsy advises sellers to set and comply with a GDPR-compliant privacy policy and honor data requests.
Etsy
3) How I use your information
I use your information to:
Process payments and fulfill orders
Arrange shipping and delivery
Provide customer support and respond to messages
Keep necessary records for legal, tax, and business purposes
4) Sharing of personal information
I share personal information only for limited reasons and in limited circumstances, such as:
Etsy: I share information with Etsy as necessary to provide my services and comply with Etsy’s Seller Policy and Terms. Etsy is an independent controller for the data it processes.
Etsy
Service providers: Delivery/shipping carriers; bookkeeping/tax tools; order and inventory systems; and production/print partners, but only to the extent necessary to perform these services.
Compliance with laws: If I reasonably believe disclosure is necessary to respond to legal or governmental requests, enforce my policies, or protect my rights.
5) Data retention
I retain your personal information only for as long as necessary to provide my services and as described here. I generally keep order records for 7 years to meet tax and accounting obligations, after which I securely delete or anonymize them. (In some cases—such as a dispute or warranty—records may be kept longer if required by law.)
6) Transfers outside the EEA/UK
I am based in the United States. As a result, your information may be transferred to and processed in a country with different data-protection laws than your own. Where applicable, I rely on lawful transfer mechanisms (such as standard contractual clauses implemented by my processors) and share only what’s necessary to provide my services. Etsy’s own transfers and safeguards are described in the Etsy Privacy Policy.
Etsy
7) Your rights (EEA, UK, and similar jurisdictions)
You may have the right to:
Access the personal information I hold about you
Correct inaccurate or incomplete information
Delete your personal information (subject to legal/legitimate business needs)
Restrict or object to certain processing
Data portability
To exercise these rights, contact me at amy@diaryofaquilter.com
. For issues relating to Etsy’s own processing (e.g., your Etsy account, cookies, or advertising preferences), please contact Etsy directly or consult the Etsy Privacy Policy.
Etsy
8) Marketing communications
I will not add you to any off-Etsy marketing list without your explicit consent. If you do consent, you may withdraw it at any time by contacting me; I will then remove your details from my marketing tools (while retaining minimal records required by law to document consent or unsubscribe).
9) Children’s data
My shop and services are not directed to children. I do not knowingly collect or retain information from anyone under the age required by applicable law to provide consent.
10) Security
I take reasonable and appropriate measures to protect personal information (for example, device/account access controls, strong authentication, and sharing only what’s necessary with trusted providers).
11) Automated decision-making
I do not engage in automated decision-making or profiling in a way that produces legal or similarly significant effects.
12) How to contact me
For any privacy questions or requests, contact me at amy@diaryofaquilter.com
.
For Etsy-controlled data (for example, your Etsy account details, site cookies, or personalized advertising), please see the Etsy Privacy Policy or contact Etsy Support.
