dragoncnc

To complete your order, you need to provide me with certain information (which you authorized Etsy to share with me), such as your name, email address, mailing address, payment details, and the product details you are ordering. If you contact me directly, you may choose to provide additional personal information for customization, for example.

I collect, use, and share your information based on various legal grounds, including:

Providing my services: I use your information to fulfill your order, resolve disputes, and provide customer support.
Your consent: If you give your consent, which you can revoke at any time, I may use your information for activities such as adding you to my mailing list.
Legal obligations: I may need to retain and share your information to comply with legal requirements, court orders, or tax regulations, such as keeping records of your purchases.
Legitimate interests: I may use your information to improve my services and comply with Etsy's Seller Policy and Terms of Use.
Protecting customer information is crucial for my business. I only share your personal information in limited circumstances:

Etsy: I share information with Etsy as necessary to provide you with my services and comply with Etsy's Seller Policy and Terms of Use.
Service providers: I engage trusted third parties, such as delivery companies, to perform functions and provide services for my shop. I share your personal information with them only as necessary.
Business transfers: If I sell or merge my business, I may disclose your information as part of that transaction, within the limits permitted by law.
Legal compliance: I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to respond to legal requests, enforce agreements, prevent fraud or illegal activities, or protect the rights and safety of my customers and others.
I retain your personal information only for as long as necessary to provide my services and as described in my Privacy Policy. However, I may also be required to retain this information to comply with legal and regulatory obligations, resolve disputes, and enforce agreements. Typically, I keep your data for a period of 4 years.

Your information may be stored and processed by third-party hosting services in the US and other jurisdictions. As a result, your personal information may be transferred to a jurisdiction with different data protection and government surveillance laws than your own. If I transfer your information outside the EU, I rely on Privacy Shield as the legal basis for the transfer, as Google Cloud is Privacy Shield certified.

If you reside in certain territories, including the EU, you have rights regarding your personal information. While some of these rights apply generally, others apply only in specific cases. The following rights are applicable:

Access: You have the right to access and receive a copy of the personal information I hold about you by contacting me using the provided contact information.
Change, restrict, delete: You may also have the right to modify, limit my use of, or delete your personal information. Unless exceptional circumstances apply (such as legal obligations to retain data), I will generally comply with your request to delete your personal information.
Object: You can object to (i) the processing of some of your information based on my legitimate interests and (ii) receiving marketing messages from me after giving your explicit consent. In such cases, I will delete your personal information unless I have compelling legitimate reasons to continue using it or if it is needed for legal purposes.
Complaints: If you reside in the EU and wish to raise concerns about how I use your information, you have the right to contact your local data protection authority, without prejudice to any other rights you may have.
For the purposes of EU data protection law, I, Nadiia Romanova, am the data controller of your personal information.