LanternAndThread

Privacy Policy

This Privacy Policy describes how and when I collect, use, and share information when you purchase an item from my shop, contact me, or otherwise use my services through Etsy.com or related sites and services.

I am responsible for the processing of your personal data and act as the data controller for purposes of EU data protection law (GDPR).

Personal Information I Collect

To fulfill your order, you must provide me with certain information (which you authorize Etsy to provide to me), such as:

Your name

Email address

Postal address

Payment information

Details of the product that you’re ordering

You may also choose to provide me with additional personal information if you contact me directly (for example, for customer support).

Why I Need Your Information and How I Use It

I rely on a number of legal bases to collect, use, and share your information, including:

To fulfill your order, such as processing payment, arranging shipping, and providing customer support

When you have given your explicit consent, which you may revoke at any time

To comply with a legal obligation, such as retaining information for tax or accounting purposes

For legitimate interests, such as improving my services or preventing fraud, provided those interests are not overridden by your rights or interests

Information Sharing and Disclosure

Information about my customers is important to my business. I share your personal information only for very limited reasons and in limited circumstances, as follows:

Etsy: I share information with Etsy as necessary to provide my services and comply with Etsy’s Seller Policy and Terms of Use

Service providers: I may engage trusted third parties to perform functions such as delivery services. I share your personal information with these providers only to the extent necessary to perform these services

Legal compliance: I may collect, use, retain, and share your information if I have a good-faith belief that it is reasonably necessary to comply with a legal obligation or court order

Data Retention

I retain your personal information only for as long as necessary to provide my services and as described in this Privacy Policy. However, I may also be required to retain certain information to comply with legal, tax, or accounting obligations.

Transfers of Personal Information Outside the EU

I may store and process your information through third-party hosting services located outside the EU. In such cases, I rely on appropriate safeguards, such as standard contractual clauses approved by the European Commission.

Your Rights (GDPR)

If you reside in the EU, you have a number of rights under data protection law, including:

The right to access and receive a copy of the personal information I hold about you

The right to request correction or deletion of your personal information

The right to object to processing or restrict processing

The right to data portability

The right to lodge a complaint with your local data protection authority

If you wish to exercise any of these rights, please contact me using the information below.

How to Contact Me

For purposes of EU data protection law, I can be contacted through Etsy Messages.