KiwiFaeDesigns

This Privacy Policy describes how and when I collect, use, and share information when you purchase an item from Kiwi Fae Designs, contact me, or otherwise use my services through Etsy.com or its related sites and services.

This Privacy Policy does not apply to the practices of third parties that I do not own or control, including Etsy or any third‑party services you access through Etsy. You can reference the Etsy Privacy Policy to learn more about its privacy practices.

1. Information I Collect

To fulfil your order, you must provide me with certain information (which you authorised Etsy to provide to me), such as:

your name
email address
postal address
payment information
details of the product you’re ordering

You may also choose to provide me with additional personal information (for example, for a custom artwork request) if you contact me directly.

2. Why I Need Your Information and How I Use It

I rely on several legal bases to collect, use, and share your information, including:

To provide my services. I use your information to fulfil your order, provide customer support, and settle disputes.
Your affirmative consent. If you sign up for optional updates or marketing messages, you may withdraw your consent at any time.
Legal obligations. I may retain information about your purchases if required by tax law or other legal requirements.
Legitimate interests.
To provide and improve my services.
To comply with Etsy’s Seller Policy and Terms of Use.

3. Information Sharing and Disclosure

Information about my customers is important to my business. I share your personal information only for limited reasons and in limited circumstances:
Etsy. I share information with Etsy as necessary to provide my services and comply with my obligations under the Etsy Seller Policy and Etsy Terms of Use.
Service providers. I may engage trusted third parties to perform functions such as delivery services. I share your information only to the extent necessary to perform these services.

Business transfers. If I sell or merge my business, I may disclose your information as part of that transaction, only as permitted by law.

Compliance with laws. I may collect, use, retain, or share your information if I believe in good faith that it is necessary to:

respond to legal processes or government requests
enforce my agreements, terms, and policies
prevent or investigate fraud or other illegal activity
protect the rights, property, and safety of my customers or others

4. Data Retention

I retain your personal information only for as long as necessary to provide you with my services and as described in this Privacy Policy. I may also be required to retain this information to comply with legal and regulatory obligations, resolve disputes, and enforce agreements.

I generally keep your data for 4 years.

5. Transfers of Personal Information Outside the EU

I may store and process your information through third‑party hosting services in the United States or other jurisdictions. As a result, your personal information may be transferred to a jurisdiction with different data protection and government surveillance laws than your own.

If I am deemed to transfer information about you outside of the EU, I rely on legal mechanisms such as Privacy Shield–certified providers or other GDPR‑compliant safeguards (for example, Google Cloud or similar hosting services).

6. Your Rights

If you reside in certain territories, including the EU, you have a number of rights regarding your personal information. While some rights apply generally, others apply only in specific circumstances.

These rights include:

Access. You may request a copy of the personal information I hold about you.

Change, restrict, delete. You may request corrections, restrictions on processing, or deletion of your personal information (except where I am required to retain data for legal reasons).

Object. You may object to:

my processing of your information based on legitimate interests
receiving marketing messages after you have provided consent
Complain. If you reside in the EU and have concerns about my use of your information, you may raise a complaint with your local data protection authority.

7. How to Contact Me

For purposes of EU data protection law, I, Rhianna Williamson, am the data controller of your personal information for Kiwi Fae Designs.

If you have any questions or concerns, you may contact me at:

kiwifaedesigns@gmail.com

Or by mail at:

34 Bernard Street, Lincoln, LN2 5ND

If you need to access, correct, or delete personal information held by Etsy, you may contact Etsy directly at Etsy.com/help