This Privacy Policy describes how OverPersonalized ("we," "us," or "our") collects, uses, and discloses personal information when you place an order from our Etsy shop or otherwise communicate with us through Etsy. Etsy acts as an independent data controller for personal information it collects directly from you, and its processing of your data is governed by Etsy’s own privacy practices. Etsy privacy policy is available at https://www.etsy.com/legal/privacy/ .
1. Personal Information We Collect
1.1 Information You Provide to Us
We collect personal information necessary to fulfill your order and provide customer support. When you place an order or contact us through Etsy, we may collect:
- Name
- Billing and shipping address
- Email address
- Phone number
- Order details and purchase history
- Any information you voluntarily provide through Etsy messages, personalization fields, or emails
Payment information is processed directly by Etsy and/or Etsy's payment providers. We do not have access to or store full payment details.
2. How We Use Your Personal Information
We use your personal information to:
- Process and fulfill your orders (digital and physical)
- Deliver digital products and related instructions
- Arrange shipping and order fulfillment
- Communicate with you regarding your order
- Provide customer support
- Comply with legal and tax obligations
- Prevent fraud and misuse of our services
3. Legal Basis for Processing
If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:
- Contractual necessity – to fulfill your purchase
- Legal obligation – to comply with tax and consumer laws
- Legitimate interests – to operate, improve, and secure our shop
- Consent – where required (e.g., optional communications)
4. Sharing Your Personal Information
We share personal information only when necessary to operate our business.
4.1 Service Providers
We may share your information with trusted third parties, including:
- Order fulfillment and shipping providers located in the EU and/or the US
- ShipStation, which we use to manage and fulfill physical product orders
- Payment, accounting, and business service providers as required
These providers are authorized to use your information only as necessary to perform services for us.
4.2 Third-Party Tools and External Links
Some of our digital products may include links to third-party platforms, such as:
- Canva – for accessing, editing, or customizing digital products. Please review Canva’s Privacy Policy at https://www.canva.com/policies/privacy-policy/
- Storylane (app.storylane.io) – for interactive digital guides or tutorials. Please review Storylane.io’s Privacy Policy at https://www.storylane.io/privacy-policy
When you click these links, you leave Etsy and our control. We are not responsible for the privacy practices of third-party websites. Please review their privacy policies separately.
4.4 Legal Requirements
We may disclose personal information if required by law or in response to lawful requests by public authorities.
5. International Data Transfers
Your information may be transferred to and processed in countries outside your country of residence, including the United States.
Where required under GDPR, we rely on appropriate safeguards such as:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions
- Other lawful transfer mechanisms
6. Data Retention
We retain your personal information only for as long as necessary to provide you with our services and as described in our Privacy Policy. However, we may also be required to retain this information to comply with legal and regulatory obligations, to resolve disputes, to enforce agreements, for tax and other legal purposes. We generally keep your data for the following time period: 7 years.
7. Your Rights
7.1 EU / EEA Residents
You have the right to:
- Access your personal data
- Request correction or deletion
- Object to or restrict processing
- Request data portability
- Withdraw consent at any time
You also have the right to lodge a complaint with your local data protection authority if you believe your personal data has been processed unlawfully.
7.2 US Residents
Depending on your state of residence, you may have rights to:
- Access personal information we hold about you
- Request deletion or correction
We do not sell personal data.
8. Legal Age
Our shop is not intended for individuals under the age of 16, and we do not knowingly collect personal data from minors.
9. Contact Information
For privacy-related questions or requests, you may contact us via Etsy messages or at submit@overpersonalized.com.