InspiralTree

At InSpiral Tree, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you interact with our Etsy shop, including purchases, inquiries, and shipping. We comply with the General Data Protection Regulation (GDPR) for EU buyers and Etsy's Seller Policy, which prohibits using buyer information for unsolicited messages.

1. Information We Collect
We collect the following personal data to fulfill orders and enhance your experience:
Order and Shipping Details: Name, address, email, and phone number (provided via Etsy at checkout).
Payment Information: Handled solely by Etsy; we do not store or access your payment details.
Communication Data: Messages or inquiries you send through Etsy.
Usage Data: Automatically collected info like IP address, browser type, and pages visited (via Etsy's analytics tools, anonymized where possible).
We do not collect sensitive data (e.g., health or financial details beyond shipping needs).

2. How We Use Your Information
Your data is used only for legitimate business purposes:
Processing and shipping orders.
Responding to your inquiries or providing customer support.
Improving our products and services (e.g., analyzing trends anonymously).
Complying with legal obligations, such as tax reporting.
We never use your information for marketing without explicit consent and never send unsolicited messages.

3. Sharing Your Information
We share data only when necessary:
With Etsy: As required for transactions and platform compliance.
Shipping Carriers: Limited details (e.g., name and address) for delivery to over 40 countries.
Service Providers: Trusted third parties (e.g., logistics partners) bound by confidentiality agreements.
Legal Requirements: If compelled by law or to protect our rights.

We do not sell, rent, or share your data with third parties for their marketing purposes.

4. Data Security and Retention
We implement reasonable security measures (e.g., encryption and access controls) to protect your data from unauthorized access. Data is retained only as long as needed for order fulfillment (typically 1-2 years post-purchase) or legal requirements, then securely deleted.

5. Your Rights (GDPR for EU Residents)Under GDPR, you have rights to:
Access, correct, or delete your data.
Object to processing or request restriction.
Data portability.
Withdraw consent (where applicable).

To exercise these rights, contact us via Etsy's messaging system. We'll respond within 30 days. For complaints, contact your local data protection authority (e.g., Hellenic Data Protection Authority in Greece).

6. International Transfers
As a Greece-based family business shipping globally, data may be transferred outside the EU (e.g., to US carriers). We ensure adequate safeguards, such as Standard Contractual Clauses.

7. Changes to This Policy
We may update this policy; changes will be posted on our Etsy shop page. Continued use after updates implies acceptance.

This policy aligns with Etsy's requirements and GDPR. For full details, review Etsy's Privacy Policy.