This Privacy Policy describes how and when I collect, use, and share information when you purchase an item from me, contact me, or otherwise use my services through Etsy.com or its related sites and services.
This Privacy Policy does not apply to the practices of third parties that I do not own or control, including Etsy or any third-party services you access through Etsy. You can reference the Etsy Privacy Policy to learn more about its own privacy practices.
Information I Collect
To fulfill your order, you must provide me with certain information (which you authorize Etsy to share with me), such as your name, email address, postal address, payment information, and the details of the product you're ordering. You may also choose to provide additional personal information — for a custom build, for example — if you contact me directly with specific requests, reference images, or measurements.
Why I Need Your Information and How I Use It
I rely on a number of legal bases to collect, use, and share your information, including:
As needed to provide my services — such as using your information to fulfill your order, settle disputes, or provide customer support.
When you've given affirmative consent — which you may revoke at any time, such as by signing up for a mailing list or newsletter.
To comply with a legal obligation — such as retaining purchase information if required by tax law.
As necessary for my legitimate business interests, where those interests don't override your rights — including (1) providing and improving my services, and (2) complying with my obligations under Etsy's Seller Policy and Terms of Use.
Information Sharing and Disclosure
Information about my customers is important to my business. I share your personal information for limited reasons and in limited circumstances, including:
Etsy. I share information with Etsy as necessary to provide you my services and comply with my obligations under the Etsy Seller Policy and Etsy Terms of Use.
Service providers. I engage trusted third parties to perform functions for my shop — for example, USPS or UPS for order fulfillment, or PayPal. I share your information with these providers only to the extent necessary for them to perform their service.
Business transfers. If I sell or merge my business, I may disclose your information as part of that transaction, only to the extent permitted by law.
Compliance with laws. I may collect, use, retain, and share your information if I have a good-faith belief it's reasonably necessary to (a) respond to legal process or government requests, (b) enforce my agreements, terms, and policies, (c) prevent, investigate, or address fraud or other illegal activity, security, or technical issues, or (d) protect the rights, property, and safety of my customers or others.
Data Retention
I retain your personal information only for as long as necessary to provide you with my services and as described in this policy. I may also be required to retain certain information to comply with legal and tax obligations, resolve disputes, or enforce my agreements. I generally keep order-related data for 4 years.
International Transfers of Personal Information
I'm based in the United States. If you're purchasing from outside the US — including from the EU, UK, or elsewhere — your information may be transferred to, stored, and processed in the United States or other jurisdictions with different data protection laws than your own.
Your Rights
If you reside in certain territories, including the EU, UK, or California, you may have rights regarding your personal information, including:
Access. You may have the right to access and receive a copy of the personal information I hold about you by contacting me using the information below.
Change, restrict, delete. You may have the right to correct, restrict my use of, or delete your personal information. Absent exceptional circumstances (such as a legal requirement to retain data), I will generally delete your personal information upon request.
Object. You can object to my processing of your information based on legitimate interests, or to receiving marketing messages after previously consenting to them. In such cases, I will delete your information unless I have compelling, legitimate grounds to continue using it or it's needed for legal reasons.
Complain. If you reside in the EU or UK, you have the right to raise concerns with your local data protection authority.
How to Contact Me
For purposes of data protection law, I, Matthew Russell, operating as inf666inity, am the data controller of your personal information. If you have questions or concerns, you can reach me at:
Email: matthew.russell404@gmail.com
