TingDraws

This Privacy Policy describes how and when I collect, use, and share information when you purchase an item from my Etsy shop, contact me, or otherwise use my services through Etsy.com.

I comply with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Personal Information I Collect
To fulfill your order, you must provide certain information through Etsy, such as:
- Your name
- Email address
- Postal address
- Payment information (processed by Etsy, not visible to seller)
You may also choose to provide additional personal information if you contact me directly (for example, to request a custom order).

2. Why I Need Your Information and How I Use It
I rely on a number of legal bases to collect, use, and share your information, including:
- As needed to provide my services, such as processing your order, shipping your items, and providing customer support.
- As necessary to comply with a legal obligation or court order, such as tax laws.
- As necessary for my legitimate interests, such as improving my services and protecting my shop from fraud, provided those interests are not overridden by your rights.

3. Information Sharing and Disclosure
I share your personal information only for very limited reasons and in limited circumstances:
- Etsy: I share information with Etsy as necessary to provide my services and comply with Etsy’s Seller Policy and Terms of Use.
- Delievery (e.g. UPS, USPS): I share your personal information with these third parties only to the extent necessary to perform the delivery services.
- Legal compliance: I may disclose your information if required to do so by law.

4. Data Retention
I retain your personal information only for as long as necessary to provide my services and comply with legal and tax obligations.

5. Transfers of Personal Information Outside the EU
If I transfer personal information outside of the EU, I ensure appropriate safeguards are in place, such as reliance on Etsy’s data transfer mechanisms.

6. Your Rights
If you reside in certain territories, including the EU, you have a number of rights with respect to your personal information, including:
- The right to access
- The right to correct
- The right to delete
- The right to restrict processing
- The right to object
- The right to data portability