WandaCore

PRIVACY POLICY

Last updated: July 2026

This Privacy Policy explains how Wanda Core ("I", "me", "my", or "the Shop") collects, uses, shares, and protects your personal information when you purchase from my Etsy shop, contact me, or otherwise use my services through Etsy.com and its related services.

This Privacy Policy does not apply to the practices of Etsy or any third parties that I do not own or control. Please review Etsy's Privacy Policy to learn more about how Etsy processes your personal information.

1. INFORMATION I COLLECT

To fulfil your order, Etsy provides me with certain information that you have authorized Etsy to share with me, including:

* Your name
* Your email address
* Your postal delivery address
* Payment information necessary to process your order through Etsy Payments
* Details of the products you purchase

I do not receive your complete payment card details.

You may also voluntarily provide additional personal information if you contact me through Etsy Messages or by email regarding your order.

I only collect personal information that is necessary to operate my shop and provide the services you request.

2. WHY I COLLECT AND USE YOUR INFORMATION

I use your personal information to:

* Process and fulfil your orders
* Prepare and ship your purchases
* Communicate with you regarding your order
* Respond to customer service enquiries
* Resolve disputes where necessary
* Detect or prevent fraudulent or unauthorized transactions
* Comply with legal, accounting and tax obligations
* Comply with Etsy's Seller Policy, Terms of Use and other applicable policies
* Protect the security and integrity of my business

I do not sell or rent your personal information.

I do not use personal information obtained through Etsy for unsolicited marketing.

3. LEGAL BASES FOR PROCESSING

Where the General Data Protection Regulation, or GDPR, applies, I rely on one or more of the following legal bases to process your personal information:

Performance of a contract

Processing is necessary to fulfil the sales contract between you and me. This includes processing your order, shipping your purchase, communicating with you about your order and providing customer support.

Compliance with legal obligations

Processing may be necessary to comply with legal obligations, including accounting, taxation, consumer protection, anti-fraud and other regulatory requirements.

Legitimate interests

Processing may be necessary for my legitimate interests in operating and protecting my business, provided those interests are not overridden by your rights and freedoms.

These legitimate interests may include:

* Operating and managing my Etsy shop
* Preventing fraud and abuse
* Maintaining accurate business records
* Defending or establishing legal claims
* Complying with Etsy's applicable policies

Consent

Where consent is legally required for a specific processing activity, I will rely on your consent. You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

4. INFORMATION SHARING AND DISCLOSURE

I share personal information only where necessary to provide my services, operate my business or comply with the law.

Etsy

I share information with Etsy as necessary to provide my services through the platform and comply with Etsy's Seller Policy, Terms of Use and other applicable policies.

Shipping providers

I share the information necessary to deliver your order with postal services, courier companies and other shipping providers.

Professional advisers

Where necessary, I may share information with accountants, tax advisers, legal advisers or similar professional service providers who assist me in operating my business and who are subject to appropriate confidentiality obligations.

Legal and regulatory authorities

I may disclose personal information where required by applicable law, court order, legal process or governmental request.

I may also disclose information where reasonably necessary to:

* Prevent, investigate or address fraud or illegal activity
* Enforce my agreements and policies
* Protect my legal rights
* Protect the rights, property or safety of my customers or others

Business transfers

If I sell, transfer, restructure or merge all or part of my business, personal information may be disclosed as part of that transaction, only where permitted by law and subject to appropriate safeguards.

5. DATA RETENTION

I retain personal information only for as long as necessary to:

* Fulfil your order
* Provide customer support
* Comply with legal, tax, accounting and regulatory obligations
* Resolve disputes
* Establish, exercise or defend legal claims
* Enforce my agreements

Different categories of information may be subject to different retention periods.

Where personal information is no longer required, it will be securely deleted or anonymized where appropriate.

Certain transaction and business records may need to be retained for the periods required by applicable tax, accounting or commercial laws.

6. INTERNATIONAL DATA TRANSFERS

Because Etsy and certain service providers operate internationally, your personal information may be transferred to and processed in countries outside your country of residence, including countries outside the European Economic Area.

Where I am responsible for an international transfer of personal information, the transfer will be made in accordance with applicable data protection law.

Depending on the circumstances, appropriate safeguards may include:

* An adequacy decision adopted by the European Commission
* Standard Contractual Clauses approved by the European Commission
* Another lawful transfer mechanism recognized under applicable data protection law

Etsy's own processing and international transfers are governed by Etsy's Privacy Policy and applicable terms.

7. DATA SECURITY

I take reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, loss or destruction.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

8. YOUR RIGHTS

If you reside in the European Economic Area, the United Kingdom or another jurisdiction providing similar data protection rights, you may have the right to:

* Request access to the personal information I hold about you
* Request correction of inaccurate or incomplete information
* Request deletion of your personal information where applicable
* Request restriction of processing
* Object to certain processing based on legitimate interests
* Request portability of your personal information where applicable
* Withdraw consent where processing is based on consent
* Lodge a complaint with a competent data protection authority

These rights may be subject to legal limitations and exceptions.

I may need to verify your identity before responding to a request.

Please note that I may be required to retain certain information where necessary to comply with legal, tax, accounting or regulatory obligations, or to establish, exercise or defend legal claims.

Where your request relates to information held directly by Etsy, you may also need to contact Etsy according to its Privacy Policy.

9. HOW TO CONTACT ME

For the purposes of applicable data protection law, Wanda Core is the data controller of the personal information that I independently process in connection with your purchase.

For questions about this Privacy Policy or to exercise your data protection rights, please contact me at hello@wandacore.com.

You may also contact me through Etsy Messages.

10. CHANGES TO THIS PRIVACY POLICY

I may update this Privacy Policy from time to time to reflect changes in applicable laws, Etsy's policies or my business practices.

The current version will be made available through my Etsy shop.