Data that I collect:

To be able to fulfill your order, you must provide certain information to me (you have given Etsy permission to pass it on to me), such as your name, e-mail address, postal address, payment details and the details of the product you have ordered. If you contact me directly (for example when you place a custom order) you can also choose to give me additional personal information.


Why I need your data and how I use it:

I rely on a number of legal bases to collect, use and share your data, such as:

- Where necessary to provide my services, such as when I use your data to fulfill your order, settle disputes or provide customer service;
- When you have given your explicit permission, which you can withdraw at any time, such as by signing up for my mailing list;
- If necessary to comply with a legal obligation or court order or in connection with a legal claim, such as keeping information about your purchases if required by tax law; and
- To the extent necessary for the purpose of my legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as 1) the delivery and improvement of my services. I use your information to provide the services you have requested and in my legitimate interest in improving my services; and 2) Compliance with Etsy's Seller Policies and Terms of Use. I use your information as necessary to comply with my obligations under Etsy's Seller Policy and the Terms of Use.


Data exchange and disclosure:

The details of my customers are important for my company. I only share your personal information for very limited reasons and very specific situations, as follows:

- Etsy. I share data with Etsy where necessary to provide you with my services and to fulfill my obligations as described in both Etsy's Seller Policy and Terms of Use .;
- Service providers: I engage certain trusted third parties to perform certain functions and deliver services to my shop, such as delivery personnel. I will share your personal information with these third parties, but only as far as necessary to provide these services.
- Business transfers. If I sell my business or enter into a merger, I may disclose your details as part of that transaction, but only to the extent permitted by law.
- Compliance with laws. I may collect, use, store and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to a legal process or government requests; (b) compliance with my agreements, conditions and policies; (c) the prevention, investigation and handling of fraud and other illegal activities, security or technical problems; or (d) protect the rights, property and safety of my customers or others.


Data retention:

I keep your personal information only for as long as necessary to provide you with my services and as described in my Privacy Policy. However, I may also be required to retain this information in order to comply with our legal and regulatory obligations, resolve disputes and maintain my agreements. The legislation in the Netherlands stipulates that I must save invoices for 7 years.


Your rights

If you live in certain areas, including the EU, you have a number of rights regarding your personal data. Although some of these rights are general, some rights relate to certain limited cases. I describe these rights below:

- Access. You may be entitled to access and receive a copy of the personal information that I own from you. You can contact me via the details below.
- Modify, limit, delete. You may also have the right to change your personal information, to limit my use of it, or to delete it. If there are no exceptional circumstances (such as where I have to store data for legal reasons), I will usually delete your personal data on request.
- Objection. You can object to (i) my processing of some of your data based on my legitimate interests and (ii) receiving marketing messages after giving your explicit permission to receive them. In such cases, I will delete your personal information, unless I have compelling and legitimate reasons to continue using that information or if this is necessary for legal reasons.
- Complaints. If you live in the EU and you want to express concern about my use of your data (and without prejudice to any other rights that you may have), you have the right to contact your local data protection authority.


How you can contact me

In the context of EU data protection legislation, I, Ingrid Wens, am the data controller of your personal data. If you have questions or concerns, you can contact me via etsy@ingridwens.nl.