MaisonLuLufr

The information I collect

In order to process your order, you must provide me with certain information (that you have authorized Etsy to transmit to me), in particular your name, email address, postal address, payment details, as well as a description of the product you are ordering. You may also choose to provide me with additional personal information by contacting me directly.

Why I need your information and how I use it

I have a number of legal bases for collecting, using and sharing your information, including:

-to provide you with my services, for example when I use your information to process your order, resolve a dispute or provide customer service;
-when you have given me your explicit consent, which you may revoke at any time, for example by subscribing to my newsletter;
-if necessary, to comply with a legal obligation, a legal ruling or in connection with a request from the courts, such as keeping information about your purchases for tax purposes; and
if necessary, to serve my legitimate interests, insofar as these legitimate interests are not overridden by your rights or interests, such as 1) providing and improving my services. I use your information to provide the services you have requested and in my legitimate interest to improve those services; and 2) compliance with Etsy's Seller Rules and Terms of Use. I use your information, if necessary, to comply with my obligations under the Seller Rules and the Etsy Terms of Use.

Sharing and distributing information

Information about my customers is important to my business. I only share your personal information for a very limited number of reasons, as well as in a limited number of circumstances such as :

-Etsy. I share your information with Etsy when it is necessary to provide my services to you and to comply with my obligations under the Etsy Seller Rules and Terms of Use.

-Business Transfers. If I sell my business or merge it with another, I may need to share your information as part of that transaction, but only to the extent permitted by law.
-Compliance with legislation. I may need to collect, use, store and share your information if I believe in good faith that it is necessary and reasonable to: (a) comply with a legal process or governmental request; (b) enforce my agreements, terms or regulations; (c) prevent, investigate or respond to fraud or other illegal activity, or technical or security issues; or (d) protect the rights, property and safety of my customers or others.

Data retention

I retain your information only as long as necessary to provide my services to you and for the purposes set out in my privacy policy. I may also need to retain this information to comply with legislative and legal obligations, resolve disputes and enforce my commitments. I generally keep this information for a period of : 4 years.

Transfers of personal information outside the EU

I may potentially store and process your information via third-party hosts located in the United States or other countries. I may therefore transfer your personal information to a jurisdiction where data protection and governmental oversight laws are different from those in your country. If I need to transfer your personal information outside the European Union, I rely on the Data Protection Shield ("Privacy Shield") as the legal basis for this, as Google Cloud benefits from Privacy Shield certification.

Your rights

If you are a resident of certain jurisdictions, including the European Union, you have certain rights with respect to your personal information. Some of these rights apply generally, others only in limited cases. These rights are described below:

-Access. You may have the right to access the personal information I hold about you and to receive a copy of it by contacting me. You will find my contact details below.
-Modify, restrict, delete. You may also have the right to modify your personal information, restrict my use of it or delete it. Other than in exceptional circumstances (e.g. if I need to retain data relating to my store for legal reasons), I will usually delete your personal information on request.
-To object. You may object 1) to my processing certain of your information for my legitimate interests and 2) to receiving marketing messages from me after you have explicitly consented to receive them. In these cases, I will delete your personal information unless I have legitimate grounds for continuing to use it, or in cases where it is required for legal reasons.
-Making a complaint. If you live in the European Union and would like to raise a concern about my use of your information (without prejudice to any other rights you may have), you can do so with your local data protection authority.

How to contact me

Under the European Data Protection Act, I, Happy Hands Lab, am the data controller for your personal information. If you have any questions or concerns, you can contact me at happyhandslab@gmail.com.