PuzzlePersonalStudio

Privacy Policy
1. Introduction
This Privacy Policy describes how and when I collect, use, and share information when you purchase an item from me or contact me through Etsy or its related services. I’m Marisa Caruana, based in Spain, and operate the Etsy shop PuzzlePersonalStudio.
2. Information I Collect
Personal data you provide: name, billing/shipping address, email, phone number.
Payment data: processed by Etsy and payment providers—not stored by me.
Communications: messages you send via Etsy.
Optional data: if you sign up for my newsletter, marketing, email, and consent records.

3. How I Collect Data
At checkout (name, address, contact).
Through Etsy Convos (communication).
If you opt in to marketing via a sign‑up form.
Optionally via analytics tools (e.g., Google Analytics).

4. Purpose & Legal Basis
Order fulfillment: shipping items (contractual necessity).
Customer service: responding to questions or issues (legitimate interest).
Marketing: only with your explicit consent.
Analytics: improving my shop based on aggregated data (legitimate interest).

5. Sharing & Transfers
Etsy: handles checkout, payments, and stores your data.
Shipping providers: to dispatch orders (data shared as needed).
Analytics providers: if you opt in (e.g., Google, Mailchimp).
International transfers: third parties (e.g., Google Cloud) outside the EU use standard contractual clauses or other EU‑approved safeguards. (etsy.com, etsy.com, alura.io, alura.io)

6. Data Retention
I keep your data as long as necessary to fulfill orders and meet legal retention obligations. After that, I delete or anonymize it.

7. Your Rights
Under the GDPR, you have the right to:
Request access, correction, or deletion of your data.
Withdraw consent at any time (affecting only future use).
Ask for data portability.
Object to or restrict processing.
Complain to a supervisory authority in your country.
To exercise these rights, contact me at the Etsy convo link, or contact Etsy Support for data held by Etsy. (etsy.com, help.etsy.com)

8. No Unsolicited Marketing
I won’t send marketing messages via Etsy Convo. Any marketing (e.g., newsletters, promotions) will only be sent if you’ve explicitly opted in.

9. Business Transfers
If my business merges, is sold, or undergoes a reorganization, your data may be transferred, but it will remain protected under this privacy policy.

10. Security
I maintain appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction. Vendors I use (e.g., Etsy, shipping carriers) also adhere to industry-standard security practices.

11. Changes to This Policy
This policy is effective as of [Date]. I may update it occasionally—any material changes will be reflected here with an updated date.

12. Contact Me
If you have privacy questions or want to exercise your rights, contact me via Etsy convo