So that I can send you the order, you must provide me with certain information that you have already authorized Etsy to provide me. This information includes your name, email address, postal address, payment information and the details of the product you have requested. You can also provide me with other personal information (for a personalized order, for example), if you contact me directly.

I rely on certain legal bases to collect, use and share your information, which includes:

* As necessary to provide my services, such as when I use your information to send your order, to resolve a dispute or to provide customer support.
* when you have provided your consent, which you can revoke at any time, how to register on my mailing list;
* if necessary to comply with a legal obligation or court order or in connection with a legal action, such as withholding information about your purchases if required by a tax law; Y
* as necessary for the purposes of my legitimate interests, if your rights or interests do not invalidate them, such as 1) provide and improve my services. I use your information to provide the services you have requested in my legitimate interest to improve my services; and 2) Compliance with the policy and terms of use of Etsy sellers I use your information as necessary to fulfill my obligations with respect to the policy and terms of use of Etsy sellers.

The information about my clients is important for my business. I only share your personal information for very specific reasons and circumstances, such as:

* Etsy I share information with Etsy as necessary to provide my services and comply with the obligations set forth in the policy and terms of use of Etsy sellers.
* Service providers. We work with certain trusted third parties to perform functions and provide services for my store, such as transport companies. - --- * I will share your personal information with these third parties, but only to the extent necessary to perform these services.
* Changes in the business If I sell or merge my business, I may disclose your information as part of that transaction only to the extent permitted by law.
* Compliance with the law. I may collect, use, retain and share your information if in good faith I believe it is reasonably necessary to: (a) respond to a legal proceeding or government requests; (b) enforce my contracts, conditions and policies; (c) prevent, investigate and address fraud and other types of illegal activity, security or technical problems; or (d) protect the rights, property and safety of my clients and others

I keep your personal information only for the time strictly necessary to provide you with my services and as described in the privacy policy. However, I may also need to keep this information to comply with my legal and regulatory obligations, to resolve conflicts and to enforce my contracts. In general, I keep your data during the following period: 4 years.

I can store and process your information through third-party hosting services in the US. UU and other jurisdictions. As a result, I may transfer your personal information to a jurisdiction that has data protection and government oversight laws different from those in your jurisdiction. If I am going to transfer information about you outside the EU, I rely on the framework of the Privacy Shield as the legal basis for the process, since Google Cloud is certified as such.

If you reside in certain territories, including the EU, you have a series of rights in relation to your personal information. While some of these rights are of general application, others apply only in specific cases. Next, I describe those rights:

* Access You have the right to access and receive a copy of the personal information I have about you. To do this, contact me as indicated below.
Change, restrict, delete You may also have rights to change and delete your personal information, as well as to restrict my use of it. Except in the case of exceptional circumstances (such as my obligation to store data for legal reasons), I will usually delete your personal information if you request it.
* Objections You can oppose (i) processing part of your information according to my legitimate interests and (ii) sending you marketing messages after providing your express consent to receive them. In these cases, I will remove your personal information unless it has compelling and legitimate reasons to continue using that information or if it is necessary for legal reasons
* Complaints If you reside in the EU and want to raise concerns about my use of your information (and without prejudice to any other rights that you may have), you have the right to do so with the corresponding local data protection authority.

For the purposes of the EU data protection law, I, Nataly Cervantes, am the controller of your personal information. If you have questions, you can contact me at the address ncervantes@ctejidas.com