CEMETERYCRYPT PRIVACY POLICY
Last updated: 11 July 2026
CemeteryCrypt operates this Etsy shop and provides handmade and made-to-order clothing, accessories and related products.
This Privacy Policy explains how CemeteryCrypt collects, uses, stores and shares personal information received in connection with Etsy orders, enquiries and other interactions with our shop.
Etsy separately collects and processes personal information when customers access or use the Etsy platform. Etsy’s processing is governed by Etsy’s own Privacy Policy.
1. PERSONAL INFORMATION WE COLLECT OR PROCESS
Personal information means information that identifies you or can reasonably be linked to you.
Depending on how you interact with CemeteryCrypt through Etsy, we may receive or process the following information:
• Your name
• Your Etsy username
• Your email address
• Your billing and delivery address
• Your telephone number, where supplied
• Your order number
• The products, sizes, variants and customisation options ordered
• Transaction details, payment status and payment confirmation
• Delivery, tracking, customs and import information
• Messages, enquiries and other communications sent to us
• Information provided when requesting an order change, cancellation, return, refund, replacement or reshipment
• Photographs or evidence provided in connection with an order issue
• Reviews or other information you choose to make available through Etsy
CemeteryCrypt does not normally receive or store your complete debit card, credit card or other payment-account details. Payments made through Etsy are processed by Etsy and its payment providers.
2. SOURCES OF PERSONAL INFORMATION
We may receive personal information:
• Directly from you when you place an order, contact us, request a customisation or otherwise communicate with us
• From Etsy when it provides information necessary to process and fulfil your order
• From postal services, couriers, customs providers and delivery partners
• From service providers that assist us with order fulfilment, administration, accounting, tax, customs or customer support
• From government authorities or other third parties where permitted or required by law
3. HOW WE USE PERSONAL INFORMATION
We may use personal information for the following purposes:
PROVIDING AND FULFILLING ORDERS
We use personal information to:
• Review and process orders
• Produce handmade and made-to-order products
• Apply the size, design, variant or customisation selected
• Arrange packaging, dispatch, delivery and tracking
• Communicate important information about an order
• Process approved cancellations, returns, refunds, replacements or reshipments
• Provide customer support
• Respond to enquiries and complaints
LEGAL AND ADMINISTRATIVE PURPOSES
We may use and retain personal information to:
• Maintain business, tax, VAT and accounting records
• Complete customs and import documentation
• Comply with legal and regulatory obligations
• Respond to lawful requests from courts, regulators, law-enforcement agencies or government authorities
• Establish, exercise or defend legal claims
• Enforce our shop policies and contractual rights
SECURITY AND FRAUD PREVENTION
We may process information where reasonably necessary to:
• Identify or prevent fraud
• Investigate suspicious, abusive, unlawful or malicious activity
• Protect CemeteryCrypt, our customers and other parties
• Maintain the security and integrity of our business
COMMUNICATING WITH YOU
We use your information to respond to messages, provide order updates, resolve problems and maintain our business relationship with you.
MARKETING AND ADVERTISING
CemeteryCrypt will not add Etsy customers to an external mailing list or use Etsy order information to send unsolicited marketing communications.
We will only send direct marketing outside Etsy where you have separately and validly consented to receive it. You may withdraw that consent at any time.
Etsy may separately process information for its own marketing, recommendations and advertising activities in accordance with Etsy’s own Privacy Policy and privacy settings. CemeteryCrypt does not control Etsy’s independent processing for those purposes.
4. LEGAL BASES FOR PROCESSING
Where UK or European data-protection law applies, CemeteryCrypt may process personal information under the following legal bases:
• Contract: where processing is necessary to accept, produce, fulfil, deliver or administer your order
• Legal obligation: where processing is necessary to meet tax, VAT, customs, accounting, consumer-protection or other legal requirements
• Legitimate interests: where processing is reasonably necessary to operate and protect our business, prevent fraud, provide customer service, resolve disputes or defend legal claims
• Consent: where you have freely provided consent for a specific purpose, such as receiving direct marketing
Where we rely on legitimate interests, we consider whether those interests are proportionate and whether your rights and interests override them.
5. HOW WE SHARE PERSONAL INFORMATION
We may share personal information only where reasonably necessary and for legitimate purposes.
Recipients may include:
• Etsy
• Royal Mail and other postal or courier services
• Customs, duties, VAT, IOSS and import-processing providers
• Product-production or order-fulfilment providers where relevant
• Accountants, bookkeepers, tax advisers and professional advisers
• IT, cloud-storage, email and business-administration providers
• Payment providers where necessary to administer a transaction or refund
• Government bodies, regulators, courts or law-enforcement authorities where legally required
We provide these parties only with the information reasonably necessary to perform the relevant service or comply with the relevant obligation.
We do not sell Etsy customer information for commercial marketing purposes.
6. RELATIONSHIP WITH ETSY
Etsy operates the marketplace through which customers access this shop, place orders, make payments and communicate with sellers.
Etsy independently collects and processes information relating to:
• Etsy accounts
• Website and application usage
• Device and browser information
• Payment processing
• Platform security
• Personalised content and advertising
• Cookies and similar technologies
• Etsy customer support
Etsy’s collection, processing, retention and sharing of this information are governed by Etsy’s own policies.
CemeteryCrypt is responsible for the personal information it receives from Etsy and independently uses for the operation of this shop.
Requests relating specifically to information controlled by Etsy, such as an Etsy account, complete payment information, platform cookies or Etsy advertising preferences, should be directed to Etsy.
7. THIRD-PARTY WEBSITES AND LINKS
Our Etsy shop, listings or messages may contain links to our website, social-media pages or other third-party services.
Those websites and services have their own privacy and security practices. CemeteryCrypt is not responsible for the privacy practices, security or content of third-party services that we do not control.
Customers should review the relevant third party’s privacy policy before providing information through that service.
8. CHILDREN’S INFORMATION
Our products and services are not intended to be purchased independently by children who are unable to enter into a legally binding contract.
We do not knowingly collect personal information directly from children below the applicable age of legal capacity.
Where an order is placed by or on behalf of a minor, the responsible parent or legal guardian should supervise the transaction.
A parent or guardian who believes that a child has provided personal information to us without appropriate permission may contact us to request its review or deletion.
9. SECURITY
CemeteryCrypt takes reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no electronic transmission or storage system can be guaranteed to be completely secure.
Customers should not send unnecessary financial, identity or other highly sensitive information through Etsy Messages, email or other unsecured communication channels.
10. DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes described in this policy.
Order, payment, delivery, customs, VAT, tax and accounting records may generally be retained for at least six years, or for a longer period where required by law.
Other information may be retained for as long as necessary to:
• Fulfil and administer an order
• Resolve a complaint or dispute
• Provide customer support
• Prevent fraud
• Enforce our agreements and policies
• Establish or defend legal claims
• Comply with legal or regulatory obligations
When personal information is no longer reasonably required, it will be securely deleted, anonymised or otherwise disposed of where practicable.
11. INTERNATIONAL TRANSFERS
Etsy and some service providers may process or store personal information in countries outside the United Kingdom or European Economic Area.
Where CemeteryCrypt is responsible for an international transfer, we will use an appropriate legal safeguard where required. This may include:
• An adequacy decision
• Standard contractual clauses
• The UK International Data Transfer Agreement or UK Addendum
• Another legally recognised transfer mechanism
Etsy is independently responsible for the international transfers it makes in connection with operating its platform.
12. YOUR RIGHTS AND CHOICES
Depending on your location and applicable law, you may have rights concerning your personal information, including:
• The right to request access to information held about you
• The right to request correction of inaccurate or incomplete information
• The right to request deletion of information
• The right to restrict certain processing
• The right to object to certain processing
• The right to receive certain information in a portable format
• The right to withdraw consent where processing is based on consent
• The right to complain to an appropriate data-protection authority
These rights are not absolute. We may need to retain or continue processing certain information where required by law, necessary to fulfil a contract, prevent fraud, resolve a dispute or establish or defend legal claims.
We may ask for reasonable information to confirm your identity before responding to a rights request.
Requests concerning information held directly by CemeteryCrypt may be submitted using the contact information below.
Requests concerning information controlled independently by Etsy should be submitted to Etsy through the customer’s Etsy account or Etsy’s privacy-request process.
13. COMPLAINTS
Questions or complaints about CemeteryCrypt’s handling of personal information should first be sent to us using the contact details below.
Customers in the United Kingdom may also lodge a complaint with the Information Commissioner’s Office.
Customers in the EU or EEA may lodge a complaint with the data-protection supervisory authority responsible for their country or region.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes to our practices, services, legal obligations or regulatory requirements.
The revised policy will be published through our Etsy shop policies, and the “Last updated” date will be amended where appropriate.
15. CONTACT
CemeteryCrypt is the data controller for personal information that CemeteryCrypt receives and independently processes in connection with this Etsy shop.
CemeteryCrypt
1 Chichester Crescent
Newquay
TR7 2LD
United Kingdom
Email: cemeterycrypt@gmail.com
Telephone: +44 7947 568430
For Etsy-related order enquiries, customers may also contact us through Etsy Messages.
