GodSlingshot

Privacy Policy — YshotxSlingshot
At YshotxSlingshot, your privacy matters. This policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and the rights you have — including for buyers in the European Union.

1. Scope

This policy covers personal data processed in connection with our Etsy shop, orders, customer service, and shop communications. It applies to visitors and buyers, including EU/EEA residents.

2. Data we collect

We may collect and process the following categories of personal data:

Identity & contact: name, shipping address, billing address, email address, phone number.

Order & transaction: items purchased, order date, order notes, returns and refund history.

Payment info: payment details are processed by Etsy and payment providers; we do not receive or store full payment card details.

Communications: messages you send to us via Etsy, including questions and custom requests.

Reviews & photos: reviews or photos you provide with permission.

Technical/log data: browser and device data, IP address and cookies as collected by Etsy.

3. Legal bases for processing (GDPR)

Where applicable we rely on:

Performance of a contract (processing orders, shipping, returns).

Legal obligations (tax, accounting, record keeping).

Legitimate interests (fraud prevention, shop improvement, responding to inquiries).

Consent (if you opt in to any direct marketing outside Etsy).

4. How we use your data

We use personal data to:

Process and fulfill your orders and manage returns.

Communicate about your order status, shipping, and customer service.

Comply with tax and legal obligations.

Prevent fraud and protect the shop.

Improve our products and service.

We will not use buyer contact information for unsolicited messages. Any marketing outside Etsy will only be sent where you have given clear consent.

5. Who we share data with

We share data only as necessary to operate the shop:

Etsy (platform, order processing, and messaging).

Payment processors (Etsy Payments, PayPal, etc.) — for payment handling.

Shipping carriers — to deliver orders.

Legal or accounting advisors — for compliance when required.

These parties act as processors or independent controllers. We require processors to protect data and to use it only for the purposes agreed.

6. International transfers

Data may be processed or stored outside the EU/EEA (for example, by Etsy or payment providers). Where transfers occur, we rely on appropriate safeguards, such as contractual protections (e.g., EU standard contractual clauses) or other lawful transfer mechanisms used by those providers.

7. Data retention

We retain personal data only as long as needed to: fulfill orders, comply with legal obligations (tax/accounting), resolve disputes, and meet legitimate business needs. When no longer required, data will be securely deleted or anonymized. If you request deletion, we will comply unless retention is required by law.

8. Your rights (EU/EEA residents)

You have the right to: access, correct, delete, restrict processing of, or obtain a copy (data portability) of your personal data; and to object to processing where applicable. You may also withdraw consent at any time (where processing is based on consent). To exercise these rights, please contact us via Etsy Conversations on our shop page. You may also lodge a complaint with a supervisory authority.

9. Cookies and tracking

Our shop runs on Etsy’s platform, and Etsy uses cookies and tracking for functionality and analytics. We do not control Etsy’s cookies; please see Etsy’s settings and privacy resources for details.

10. Security

We take reasonable technical and organizational measures to protect personal data. However, no online system is completely secure; we cannot guarantee absolute security. If a data incident affecting your information occurs, we will follow legal notification requirements.

11. Children

Our shop is not directed to children under 13. We do not knowingly collect personal data from children. If we learn we have collected such data, we will delete it as required by law.

12. Changes to this policy

We may update this policy. The effective date at the top will reflect changes. Please check this page periodically.