At GypsyThatIWas, we take your personal data very seriously. In order to comply with the EU GDPR Law, we issue the following statement which we agree to uphold when you place an order with us.

In order to fulfill your order we rely on Etsy (and Paypal if you pay that way) to provide us with the necessary data needed in order to process your order in a timely manner. The data we collected is your name and mailing address, email address, any change of shipping address that you supply, and billing information (not visible to us). We require this information for order fulfillment purposes. You may revoke your consent at any time and have the right in detail to request details of the information we keep.

We understand the importance of keeping personal data secure and safe and only share limited personal data with companies we need to in order to maintain our business.

All the companies that we share information with are the following:
Etsy
Paypal
Facebook
The US Post Office

We only keep information for the sole purpose of fulfilling your orders and for our own records and what is deemed fair use in our business within the parameters of the law.

We are located in the state of Missouri in the United States, outside of the EU and as such, use no companies to store, process or collect your data.

Choosing to shop with a company outside of the EU means your data is subject to a new jurisdiction and subsequently new laws. However, we protect your rights upon the transference. We rely on EU-US Privacy shield and SSL security for handling of Etsy data transference and credit card encryption as that is what Etsy uses.

As a resident of the EU, you are subject to rights and privacy laws under the GDPR law.
* You have the right to revoke your permissions at any time except where it is legal for GypsyThatIWas to keep them for the processing of our business requirements by law.
* You have the right to access to your personal data within normal business hours via electronic format.

My name is Pam Talpers, and I am the data controller for GypsyThatIWas. For the purposes of data protection you can contact me at gypsygarnet60 [!at] aol.com if you have any questions or concerns.
* You have the right to withdraw from any mailing list or social media outlet at any time.
*You have the right to complain to your local data protection agency about the information we keep that is outside of what is required by law.