ThreadnFrameCo

Privacy Policy for ThreadnFrameCo (Etsy Seller)

Last updated: 01/22/2026

Controller
ThreadnFrameCo
Owner: Chadd Naugle
Address: 3801 Blaylock Ct, Longs, SC 29568, United States
Email: chaddnaugle@gmail.com
Data Protection Officer (where applicable): Chadd Naugle — chaddnaugle@gmail.com

Scope
This policy explains how ThreadnFrameCo (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you visit our Etsy shop, make purchases, contact us, sign up for communications, or otherwise interact with us. It applies to customers and visitors in the European Economic Area (EEA), the UK, and other jurisdictions where applicable.

Personal data we collect

Identity data: name.
Contact data: billing and shipping address, email address.
Transaction data: order details, purchase confirmations, invoices (we do not store full payment card details; payments are processed by Etsy and payment providers).
Communications data: messages you send via Etsy or email and our replies.
Technical data: IP address, device/browser type, cookies and similar tracking technologies.
Marketing preferences: opt-in/opt-out status and communication preferences.
Note: We sell items intended for children under 16; any collection of children’s personal data will be limited to what is necessary and handled in accordance with applicable law.
Sources of data
You directly (orders, messages, sign-ups).
Etsy and affiliated payment/shipping providers when you purchase via Etsy.
Third-party services and analytics (see section 9).
Automatically via cookies and analytics tools.
Purposes and legal bases for processing
To perform our contract with you: process and deliver orders, handle returns/refunds, and provide customer service. Legal basis: performance of a contract.
To comply with legal obligations: tax, accounting, and customs. Legal basis: legal obligation.
To communicate about orders and inquiries. Legal basis: legitimate interests (effective customer service) or performance of a contract.
To send marketing where you have given consent. Legal basis: consent (you can withdraw at any time).
To analyze and improve our services and prevent fraud. Legal basis: legitimate interests.
Recipients / Third parties
We share personal data only as needed with:
Etsy (platform) and Etsy’s service providers.
Payment processors and banks used by Etsy.
Shipping carriers for delivery.
Analytics and cloud providers: Google Analytics, Google Drive.
Legal, tax, and accounting advisors or law enforcement when required by law.
Other third-party service providers under contract where necessary for shop operations.
International transfers
Some recipients (Etsy, Google services, payment processors) may be located outside the EEA/UK (for example, the United States). Where transfers occur, we rely on appropriate safeguards such as EU Standard Contractual Clauses, adequacy decisions, or other lawful transfer mechanisms to protect your data.

Data retention
We retain personal data only as long as necessary for the purposes described:

Order and transaction records: default 7 years (to meet statutory tax/accounting obligations).
Customer service correspondence: 2 years.
Marketing data: until you withdraw consent.
Adjustments will be made if local law requires longer retention.
Cookies and tracking
We and third parties (including Etsy and Google Analytics) may use cookies and similar technologies to provide functionality, analyze usage, and support marketing. Manage Etsy cookies via your Etsy account settings and manage browser cookie settings as needed. Disabling some cookies may affect functionality.

Security
We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or damage. No internet transmission is completely secure; where possible, use secure channels and up-to-date devices.

Minors
We sell items intended for children under 16. We do not knowingly collect more personal data from minors than necessary. If you believe we have collected personal data from a child without appropriate parental consent where required, contact us to request removal.

Your rights (EEA/UK residents)
You have the right to: access, correct, erase, restrict processing, object to processing based on legitimate interests or direct marketing, and receive the personal data you provided in a structured, commonly used format (data portability). Where processing is based on consent, you may withdraw consent at any time. To exercise any right, contact chaddnaugle@gmail.com. We will respond within applicable legal timeframes. You also have the right to lodge a complaint with your data protection authority.

Changes to this policy
We may update this policy periodically. Significant changes will be posted with an updated “Last updated” date.

Contact
ThreadnFrameCo
Owner / DPO: Chadd Naugle
Email: chaddnaugle@gmail.com
Address: 3801 Blaylock Ct, Longs, SC 29568, United States