1. Introduction
Welcome to EldritchFactory on Etsy. Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our shop, make a purchase, or communicate with us via Etsy.com and related services. By accessing or using our shop, you agree to the practices described here.
2. Data Controller
Jakub Fornal
Email: jfornal@eldritchfactory.co.uk
Address: The Game House, Old Newnham Farm, Newnham, Plympton, Plymouth, Devon, PL7 5BL
3. Information We Collect
We collect information you provide directly and data that is automatically shared by Etsy:
Order Information: Name, billing/shipping address, email address, phone number, and order details (items purchased, customization notes).
Payment Data: Processed by Etsy or its payment processors; we do not store full payment details on our systems.
Communications: Messages you send us via Etsy Conversations, including any additional details you supply for custom orders.
Usage Data: Analytics and cookies collected by Etsy and Etsy’s third-party analytics providers about how you interact with our listings and shop.
4. Legal Bases for Processing (GDPR)
If you reside in the European Economic Area, we rely on the following legal bases:
Contract Performance: Processing is necessary to fulfill your order and provide customer support.
Consent: Newsletters, marketing communications, or reviews submitted voluntarily. You may withdraw consent at any time.
Legal Obligation: Retaining certain records to comply with tax, accounting, or other statutory requirements.
Legitimate Interests: Improving our offerings, investigating fraud, and ensuring compliance with Etsy’s Terms. We balance these interests against your rights and freedoms.
5. How We Use Your Information
Order Fulfillment: To process, manufacture, and ship your order.
Customer Service: To respond to inquiries, refunds, exchanges, or complaints.
Marketing (With Consent): To send you news, promotions, and special offers if you opt in.
Analytics & Improvement: To analyze sales trends, shop performance, and to develop new products.
Legal Compliance & Protection: To comply with laws, enforce our policies, and protect our rights.
6. Information Sharing
We only share your personal data in the following limited circumstances:
Etsy: As required to operate on their platform and comply with their policies.
Service Providers: Third parties (e.g., shipping carriers, print-on-demand partners, cloud hosting) who perform services on our behalf. We limit data shared to what is necessary.
Legal Authorities: If required by law, regulation, or court order, or to defend our legal rights.
Business Transfers: In the event of a sale, merger, or reorganization of our business, with appropriate confidentiality protections.
7. International Data Transfers
Our service providers may be located outside the European Economic Area (EEA). When we transfer your personal data internationally, we ensure adequate safeguards such as:
EU Standard Contractual Clauses approved by the European Commission.
Providers in countries with an EU adequacy decision.
8. Data Retention
We retain your personal data only as long as necessary to:
Fulfill the purposes outlined above.
Comply with legal, tax, and accounting obligations.
Resolve disputes and enforce our agreements.
Generally, we retain order records and related data for 4 years. You may request deletion or restriction of your data at any time (see Section 10).
9. Cookies & Tracking Technologies
We rely on Etsy’s cookie and tracking mechanisms for shop analytics and remarketing. You can control cookie preferences via Etsy’s settings or through your browser.
10. Your Rights (GDPR & Global)
If you are an EU or UK resident, you have the following rights under applicable data protection laws:
Access: Request a copy of your personal data.
Rectification: Correct inaccurate or incomplete data.
Erasure (“Right to be Forgotten”): In certain circumstances, request deletion of your data.
Restriction: Ask us to limit processing of your data.
Object: Object to processing based on legitimate interests or direct marketing.
Data Portability: Receive your data in a structured, machine-readable format.
Withdraw Consent: At any time for processing based solely on consent.
Lodge a Complaint: With your local data protection authority if you believe we have violated your rights.
To exercise any of these rights, please contact us at privacy@eldritchfactory.co.uk.
11. Security Measures
We implement reasonable technical and organizational safeguards to protect your information from unauthorized access, alteration, disclosure, or destruction. These include secure hosting, access controls, and data encryption in transit.
12. Children’s Privacy
Our shop is not directed to children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have data from a child, please contact us to have it removed.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will post the revised version with an updated “Effective Date” above.
14. Contact Us
For questions or concerns about this Privacy Policy or our data practices, please email:
privacy@eldritchfactory.co.uk
