Daftoons

1. Information I Collect
To fulfil your order, I collect and process the following personal data:

Name

Email address

Postal address

Order details

Payment information (processed securely by Etsy; I do not receive your full card details)

Any additional information you provide for custom orders

Etsy also collects technical and usage data as described in Etsy’s own Privacy Policy. Etsy acts as a data controller for that information.

2. Legal Basis for Processing
Under the GDPR, I rely on the following legal bases:

Contractual necessity: to process, fulfil, and deliver your order

Legal obligation: to comply with tax, accounting, and regulatory requirements

Legitimate interests: to improve my products and customer experience

Consent: for optional marketing communications (only if you explicitly opt in)

3. How I Use Your Information
I use your data to:

Process and deliver your order

Communicate with you about your purchase

Provide customer support

Maintain business records for tax and legal compliance

Improve my shop and product offerings

I do not use your information for automated decision‑making or profiling.

4. Sharing Your Information
I only share your data when necessary:

Etsy: to process orders and payments

Delivery companies: if you purchase physical goods

Professional service providers: such as accountants (for tax compliance)

Legal authorities: if required to comply with laws or resolve disputes

I never sell or rent your personal information.

5. Data Retention
I retain your data only as long as necessary:

Order and customer information: up to 7 years for tax and accounting obligations

Messages and custom order details: as long as needed to provide customer support
After this period, your data is securely deleted or anonymised.

6. Your GDPR Rights
You have the right to:

Access the personal data I hold about you

Request corrections to inaccurate data

Request deletion of your data (where legally permissible)

Restrict or object to certain processing

Request a copy of your data in a portable format

Withdraw consent for marketing at any time

To exercise any of these rights, contact me through Etsy Messages.

7. Transfers Outside the UK/EU
Etsy may store and process data outside the UK/EU. Etsy uses appropriate safeguards (such as Standard Contractual Clauses) to protect your information.
I do not independently transfer your data outside the UK/EU.

8. Security
I take reasonable technical and organisational measures to protect your data, including secure storage and limited access.
However, no online system is completely risk‑free, so please keep your Etsy account details secure.

9. Children’s Privacy
My shop does not knowingly collect or store information from anyone under the age of 13.

10. Contact Details
For any privacy‑related questions or GDPR requests, you can contact me via Etsy Messages.

11. Changes to This Policy
I may update this Privacy Policy from time to time. Any changes will be posted here with an updated revision date.