1. Information I Collect
To fulfill your order, you must provide me with certain information (which you authorized Etsy to provide), such as your name, email address, postal address, payment details, and the details of the product you’re ordering. You may also provide additional personal information (for example, for a custom order) if you contact me directly.
2. Why I Need Your Information and How I Use It
I rely on a number of legal bases to collect, use, and share your information, including:
As needed to provide my services, such as fulfilling your order, settling disputes, or providing customer support
When you have provided your affirmative consent (e.g., signing up for a mailing list), which you may revoke at any time
If necessary to comply with a legal obligation or court order, or in connection with a legal claim (e.g., retaining purchase information for tax purposes)
As necessary for my legitimate interests, provided those interests are not overridden by your rights or interests, such as providing and improving my services and complying with Etsy’s policies and terms of use
3. Information Sharing and Disclosure
I share your personal information only for very limited reasons and in limited circumstances, including:
Etsy: I share information with Etsy as necessary to provide you my services and to comply with my obligations under Etsy’s Seller Policy and Terms of Use
Service Providers: I use trusted third parties, such as delivery companies, to fulfill orders. I will share your personal information with them only to the extent necessary to perform these services
Google Drive: I may store information (such as invoices or custom order records) securely on Google Drive
Business Transfers: If I sell or merge my business, I may disclose your information as part of that transaction, only as permitted by law
Compliance with Laws: I may collect, use, retain, and share your information if I have a good faith belief that it’s necessary to:
respond to legal process or government requests
enforce my agreements, terms, and policies
prevent, investigate, or address fraud or other illegal activity
protect the rights, property, and safety of my customers or others
4. Data Retention
I retain your personal information only as long as necessary to provide you with my services and as described in this Privacy Policy. However, I may also need to retain this information to comply with legal and regulatory obligations, resolve disputes, and enforce agreements. I generally keep your data for 4 years.
5. Transfers of Personal Information Outside the EU
I may store and process your information through third-party hosting services in the US or other jurisdictions. As a result, I may transfer your personal information to a jurisdiction with different data protection laws. When I do, I rely on legal mechanisms such as standard contractual clauses or third-party compliance certifications. For example, I use Google Drive, which follows recognized international privacy standards.
6. Your Rights
If you reside in certain territories, including the EU, you have rights in relation to your personal information, including:
Access: You may request a copy of the personal information I hold about you
Change, restrict, delete: You may request that I update, restrict, or delete your information
Object: You may object to the processing of your information in certain circumstances, including marketing (where applicable)
Complain: If you reside in the EU and have concerns about my use of your data, you have the right to raise them with your local data protection authority
7. Contact Information
For purposes of EU data protection law, I, Muhammad Khan, am the data controller of your personal information. If you have any questions or concerns, you may contact me at:
gemmajasper.ca@gmail.com
430 Panatella Square NW, Calgary, AB, Alberta, Canada