SanSherDesigns

Thank you for supporting my small business. Your privacy is very important to me. This policy explains how and why I collect, use, and share your information when you purchase from my Etsy shop, contact me, or otherwise use my services through Etsy.com and its related sites.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information I Collect
To fulfil your order, you must provide me with certain information (which you authorised Etsy to provide to me), such as:
Your name
Email address
Postal address
Payment information
Details of the product you’re ordering
You may also provide additional information if you contact me directly (for example, for a custom order).

2. Why I Need Your Information and How I Use It
I rely on several legal bases to collect, use, and share your information, including:
To fulfil your order, provide customer support, or settle disputes
When you have provided your consent (for example, for marketing messages)
To comply with a legal obligation (such as tax laws)
For my legitimate interests, such as improving my services
Your information is used only for these purposes and never shared for unrelated reasons.

3. Information Sharing and Disclosure
I share your personal information for limited reasons and in limited circumstances:
Etsy: I share information with Etsy as necessary to provide you with my services and to comply with Etsy’s Seller Policy and Terms of Use.
Delivery services: I share relevant details (like your name and address) with trusted delivery companies to send your order.
Legal compliance: I may share your information if required to comply with laws or legal processes, or to protect my rights and safety.

4. Data Retention
I keep your personal information only for as long as necessary to provide you with my services and comply with my legal and tax obligations.
Typically, I retain order details for up to 7 years for tax and accounting purposes.

5. Your Rights (UK GDPR)
If you live in the UK or other territories covered by data protection laws such as the EU GDPR, you have several rights regarding your personal data:
Access: You can request a copy of the personal data I hold about you.
Correction: You can request that I correct or update your data.
Deletion: You can request that I delete your personal data.
Restriction or Objection: You can limit or object to how your data is used.
Portability: You can request a copy of your data in a commonly used format.

To exercise any of these rights, contact me at:
sanaz@sansherdesigns.com

6. Data Transfers Outside the UK
Etsy may store and process your information in the United States and other countries. Etsy uses approved data protection mechanisms, such as standard contractual clauses, to safeguard your information. I rely on Etsy’s secure systems to handle your data safely.

7. How to Contact Me
For the purposes of UK data protection law, I, Sanaz Sherkat, am the data controller of your personal information.
If you have any questions or concerns, you may contact me at:
sanaz@sansherdesigns.com

If you’re unhappy with how I handle your data, you have the right to contact the Information Commissioner’s Office (ICO) at https://ico.org.uk/concerns.

8. Updates to This Policy
I may update this privacy policy from time to time to reflect changes in my practices or for legal reasons. The most current version will always appear in my Etsy shop.