Catholically

PRIVACY POLICY

This Privacy Policy describes how and when we collect, use, and share your
information when you purchase an item from us, contact us, or otherwise use
our services through Etsy.com or its related sites and services. This policy
does not apply to third parties we do not own or control, including Etsy —
see Etsy's own Privacy Policy for its practices.

Information We Collect
To fulfil your order, you must provide us with certain information (which you
authorized Etsy to provide to us), such as your name, email address, postal
address, and the details of the product you are ordering. You may also choose
to give us additional personal information if you contact us directly (for
example, for a personalized or engraved item).

Why We Need Your Information and How We Use It
We rely on the following legal bases to collect, use, and share your
information:
- as needed to provide our services, such as to fulfil your order, settle
disputes, or provide customer support;
- when you have given your affirmative consent, which you may revoke at any
time, such as by signing up for our mailing list;
- if necessary to comply with a legal obligation or in connection with a legal
claim, such as retaining purchase information as required by Italian tax law;
- as necessary for our legitimate interests, where not overridden by your
rights, such as providing and improving our services and complying with the
Etsy Seller Policy and Terms of Use.

Information Sharing and Disclosure
We share your personal information only for limited reasons and in limited
circumstances:
- Etsy, as necessary to provide our services and comply with the Etsy Seller
Policy and Terms of Use.
- Service providers, such as shipping/delivery companies and payment
processors, only to the extent necessary to perform their services.
- Business transfers, if we sell or merge our business, only as permitted by law.
- Compliance with laws, where we have a good-faith belief it is reasonably
necessary to respond to legal process, enforce our terms, prevent fraud or
security issues, or protect the rights and safety of our customers or others.

Data Retention
We retain your personal information only as long as necessary to provide our
services and to comply with our legal and tax obligations, resolve disputes,
and enforce our agreements. Under Italian law, we generally retain order and
accounting-related data for up to 10 years.

Transfers of Personal Information Outside the EU
We are based in Italy and ship worldwide, including to the United States, and
may process information through third-party services located outside the
European Economic Area. As a result, your information may be transferred to
countries with different data protection laws. Where we transfer personal data
outside the EEA, we rely on appropriate safeguards such as the European
Commission's Standard Contractual Clauses or, where applicable, the EU–US Data
Privacy Framework.

Your Rights
If you reside in the EU/EEA (or a territory with similar laws), you have rights
regarding your personal information:
- Access: request a copy of the personal information we hold about you.
- Change, restrict, delete: ask us to correct, restrict, or delete it; absent
legal reasons to keep it, we will generally delete it on request.
- Object: object to processing based on legitimate interests, and to marketing
messages after you have consented.
- Complain: lodge a complaint with your local data protection authority — in
Italy, the Garante per la protezione dei dati personali.

How to Contact Us
For the purposes of EU data protection law, RBK SRL is the data controller of
your personal information. For any question or request, contact us at info@catholically.com