QuillAndStar

This Privacy Policy describes how QuillAndStar collects, uses and shares information when you buy from us, contact us, or use your personal page on quillandstar.shop. It does not cover Etsy or other third parties we don't control; see the Etsy Privacy Policy for Etsy's practices.

INFORMATION WE COLLECT
- Order details Etsy provides to us: your name, email address, order (receipt) number and the items you bought.
- On your personal page at quillandstar.shop: the names you choose for your printable (for example a child's name or the host's name), your order number, and a short log of downloads (date, file format and a one-way scrambled code made from your IP address, so we can spot shared links). All other text you type is used only to create your file and is not stored.
- Messages you send us through Etsy.
We don't use tracking cookies or advertising trackers, and we don't need your postal address: nothing is shipped.

WHY WE NEED IT AND HOW WE USE IT
- To provide our service (performance of a contract): creating your personalized files, letting you download them, and helping you with support requests and disputes.
- Our legitimate interests: preventing misuse of personal links and keeping our service secure, and complying with the Etsy Seller Policy and Terms of Use.
- Legal obligations: for example keeping sales records where tax law requires it.
- Consent: we only send marketing messages if you have clearly asked for them, and you can withdraw that at any time. We never send promotions through Etsy messages.

SHARING
We never sell your information. We share it only as needed:
- Etsy, to provide our service and meet our obligations under Etsy's policies.
- Service providers who process data on our behalf, only to the extent needed: our web server provider (in the EU), Cloudflare (secure delivery of quillandstar.shop) and Make.com (looks up your order on Etsy when you open your page).
- If required by law, to protect rights and safety, or to prevent fraud; and if the business is sold or merged, only as permitted by law.

DATA RETENTION
Your personal page data (order number, the names on your files and the download log) is deleted automatically 12 months after your order. Etsy keeps its own order records under its own policy. Where the law requires us to keep sales records longer, we keep only what is required.

TRANSFERS OUTSIDE THE EU
Our server is in the EU. Some service providers (such as Cloudflare) may process data in the United States. Where that happens, we rely on the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

YOUR RIGHTS
Depending on where you live (including the EU/EEA and the UK), you may have the right to:
- access and get a copy of the information we hold about you;
- correct, restrict or delete it (we delete on request unless the law requires us to keep it);
- object to processing based on our legitimate interests, and to marketing at any time;
- complain to your local data protection authority (in Spain: the AEPD, www.aepd.es).
To use these rights, message us through Etsy. We reply within 30 days. For information held by Etsy, contact Etsy at etsy.com/help.

CONTACT
For EU data protection law, Iaroslav Pavlov, trading as QuillAndStar (Spain), is the data controller of your personal information. Contact: send us a message through our Etsy shop.