ChelseaCustomStudio

— Information I Collect —
To complete your order, I require certain information (which you have authorized Etsy to provide to me), such as your name, email address, postal address, payment details, and specifications of the product you are ordering. If needed for a custom order, you may also opt to provide me with additional personal information by contacting me directly.

— Data Collection, Usage, and Sharing: Legally Compliant Practices —
I process your information lawfully, in accordance with the European Union’s General Data Protection Regulation (GDPR):
- To fulfill your order and provide customer support;
- When you have given your revocable affirmative consent for additional reasons, such as joining my mailing list;
- If required by applicable law or court order;
- To improve my services, provided that doing so does not conflict with your rights or interests; and
- To comply with the Etsy Seller Policy and Terms of Use.

— Information Sharing and Disclosure —
My customers' information is essential to my business. I only share your personal information for specific, limited reasons and circumstances. These include:
- Etsy. I share data with Etsy as required to provide my services and meet the conditions of their Seller Policy and Terms of Use.
- Service providers. I collaborate with trusted third parties for certain services, including delivery. In these cases, I only disclose the customer data necessary to perform these services.
- Business transfers. Any sale or merger of my business will involve the disclosure of customer information in accordance with the law's requirements.
- Compliance with laws. I collect, use, store, and share customer data when it is reasonably essential to do so to: (a) respond to legal or government requests; (b) enforce my terms, policies, and agreements; (c) to prevent fraudulent or illegal activities from occurring; or (d) protect the safety, rights, and property of customers or others.

— Data Retention —
I will securely retain your personal information in accordance with my privacy policy for no longer than necessary to provide you with my services and comply with legal and regulatory obligations, resolve disputes, and enforce agreements. As a general rule, your data will be kept for a period of four years.

— Transfer of Personal Information Outside the EU —
I store and process your information through third-party hosting services in the US. This means that I may transfer your personal information to a country with different data protection and government surveillance laws than your own. In this scenario, I rely on Privacy Shield as the legal basis for the transfer, as Google Cloud is Privacy Shield certified.

— Your Rights — 
You have certain rights in relation to your personal information if you reside in certain countries, including the EU. These rights generally apply to all my customers, but some may only be available in limited cases:
- The right to access and receive a copy of your personal information that I hold by contacting me directly.
- The right to change, restrict my use or delete your personal information at any time.

If you object to my processing of your data based on my legitimate interests or receiving marketing messages after providing consent, I will delete it unless I need it for legal purposes or compelling and legitimate grounds exist for me to continue using it.

If you are an EU citizen and wish to raise a concern about my use of your information, you can do so with your local data protection authority.

You can reach me, Heather Simmonsen, as the data controller of your personal information under EU data protection law, with any questions or concerns. My email address is chelsea.custom.seattle@gmail.com.