1. Introduction
Chiefs Lab (“we,” “us,” or “our”) operates an Etsy shop selling 3D-printed military-themed products, including hitch covers and accessories. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Etsy shop or interact with us. This policy is designed to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.
By placing an order or interacting with our shop, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
Chiefs Lab is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, you can contact us at:
Business Name: Chiefs Lab
Platform: Etsy (etsy.com)
Email: dahall@chiefslab.com
Location: Georgia, United States
3. Information We Collect
We collect personal data that is necessary to fulfill your orders and provide customer service. This may include:
3.1 Information You Provide Directly
• Full name and shipping address
• Email address
• Phone number (if provided for shipping purposes)
• Order details and product preferences
• Messages and communications sent through Etsy
• Custom order requests and specifications
3.2 Information Collected Automatically
• Etsy user ID and profile information (as shared by Etsy)
• Transaction and order history
• IP address and general location data (collected by Etsy)
• Browser type and device information (collected by Etsy)
3.3 Information from Third Parties
Etsy may share certain buyer information with us as necessary to fulfill orders. Please also review Etsy’s Privacy Policy for details on how Etsy handles your data.
4. Legal Basis for Processing (GDPR)
Under the GDPR, we process your personal data based on the following legal grounds:
• Contract Performance: Processing necessary to fulfill your order, process payments, and arrange shipping.
• Legitimate Interests: Improving our products and services, preventing fraud, and responding to inquiries.
• Legal Obligations: Complying with tax, accounting, and other legal requirements.
• Consent: Where you have given explicit consent, such as subscribing to marketing communications. You may withdraw consent at any time.
5. How We Use Your Information
We use the personal data we collect for the following purposes:
• Processing and fulfilling your orders, including shipping and delivery
• Communicating with you about your orders, inquiries, or custom requests
• Providing customer support and resolving disputes
• Complying with legal obligations, such as tax reporting
• Improving our products, services, and shop experience
• Detecting and preventing fraud or unauthorized activity
• Sending marketing communications (only with your explicit consent)
6. How We Share Your Information
We do not sell your personal data. We may share your information with the following parties only as necessary:
• Etsy: As the marketplace platform, Etsy processes payments and facilitates transactions. Etsy has its own privacy policy governing data it collects.
• Shipping Carriers: We share your name and shipping address with carriers (e.g., USPS, UPS, FedEx) to deliver your orders.
• Payment Processors: Payment is handled by Etsy’s payment system. We do not directly collect or store credit card or financial information.
• Legal Authorities: We may disclose information if required by law, regulation, or legal process.
• Professional Advisors: Accountants, lawyers, or consultants who are bound by confidentiality obligations.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, including:
• Order records: Retained for a minimum of 5 years to comply with tax and accounting obligations.
• Customer communications: Retained for up to 3 years after the last interaction, unless a longer period is required by law.
• Marketing consent records: Retained for as long as consent remains active, plus a reasonable period afterward for compliance purposes.
After the retention period, your data will be securely deleted or anonymized.
8. Your Rights Under GDPR
If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with similar data protection laws, you have the following rights:
• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of any inaccurate or incomplete data.
• Right to Erasure (“Right to Be Forgotten”): Request deletion of your personal data, subject to legal retention requirements.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Request your data in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, please contact us at the email address listed in Section 2. We will respond within 30 days of receiving your request.
9. Your Rights Under CCPA
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act:
• Right to Know: Request disclosure of the categories and specific pieces of personal information collected about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will provide a clear opt-out mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
10. International Data Transfers
Chiefs Lab is based in the United States. If you are located outside the United States, please be aware that your personal data may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.
For transfers of personal data from the EEA or UK to the United States, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) or other approved mechanisms, to ensure your data is adequately protected.
11. Data Security
We take reasonable technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:
• Using Etsy’s secure platform for all transactions and communications
• Limiting access to personal data to only those who need it to fulfill orders
• Securely storing any offline records containing personal information
• Regularly reviewing our data handling practices
While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
12. Cookies and Tracking
Our Etsy shop operates within the Etsy platform. Etsy uses cookies and similar tracking technologies to provide and improve its services. We do not independently deploy cookies. For more information about Etsy’s use of cookies, please review Etsy’s Cookie Policy.
13. Children’s Privacy
Our products and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete it promptly. If you believe a child has provided us with personal data, please contact us immediately.
14. Third-Party Links
Our Etsy shop or communications may contain links to third-party websites or services (e.g., social media pages). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The updated policy will be posted with a revised effective date. We encourage you to review this policy periodically. Material changes will be communicated through our Etsy shop or direct notification where feasible.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Business: Chiefs Lab
Email: dahall@chiefslab.com
Etsy Shop: https://itschiefslab.etsy.com
If you are in the EEA or UK and believe that your data protection rights have not been adequately addressed, you have the right to lodge a complaint with your local Data Protection Authority (DPA).
