The European General Data Protection Regulation (GDPR) and other local data protection laws guard how this kind of personal information is collected and used, and protect the privacy rights of online shoppers. Under these laws, buyers are entitled to certain information, including when, why, how, by whom, and for what purpose personal information is collected, used, and shared.
The GDPR requires that I provide certain information to the buyers in my privacy policy, including:
 the personal information I collect;
 the legal bases I relies on to collect, use, and share personal information;
 the third parties with whom I shares personal information;
 the length of time I keep personal information;
 if I transfer personal information outside of Europe;
 my buyers’ rights regarding I use of their personal information;
 how my buyers can contact me with privacy-related requests.

This Privacy Policy describes how and when I collect, use, and share information when you purchase an item from me, contact me, or use my services otherwise through my online shop.
This Privacy Policy does not apply to the practices of third parties that I do not own or control.
1. Accepting the Privacy Policy
I need to process your personal information to run my business. By accepting my Terms of Use, you are confirming that you have read and understand this policy including how and why I use your information. If you don’t want me to collect or process your personal information in the ways described in this policy, you shouldn’t use my shop.

My Terms of Use require all shoppers to be at least 18 years of age. Minors under 18 years of age, children under age 13 are not permitted to use my shop services.

When using my shop services, you acknowledge that I will use your information in Bulgaria. Please read on to learn more about how we protect personal information.
2. Information Collected or Received
To fulfil your order, you must provide me with certain information (which you authorized Etsy to provide to me), such as your name, email address, physical postal address, phone number and the details of the product that you’re ordering. You may also choose to provide me with additional personal information (for custom orders), if you contact me directly.

Other people may see your reviews and related photos for items you have purchased; your favorites, those who follow you and those who you follow. You may change or correct your account information through your account settings.

3. Information Uses, Sharing & Disclosure
Information about my customers is important to my business. I share your personal information with the third parties for very limited reasons and in limited circumstances, as it follows:
 Information necessary to comply with a legal obligation, a court order, or to exercise or defend legal claims;
 you have expressly made the information public;

The third parties with whom he shares personal information
 Etsy. I share information with Etsy as necessary to provide you my services and comply with my obligations under both the Etsy Seller Policy and Etsy Terms of Use

 Service Providers: I engage certain trusted third-parties to perform functions, such as delivery companies (as postal operators and courier companies), individuals (postal workers) to help me execute my obligations and an accounting company. I will share your personal information with these third parties, but only to the extent necessary to perform these services. These third parties have only limited access to your information and they may use your information only to perform their tasks. They are obligated to me not to disclose or use your information for other purposes.

 Business transfers. If I sell or merge my business, I may disclose your information as part of that transaction, only to the extent permitted by law.

 Compliance with laws. I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to:
• respond to legal process;
• enforce my agreements, terms and policies;
• prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or
• protect the rights, property, and safety of my customers, or others.

 Legal and Safety: I may also retain, preserve, or release your personal information to a third party in the following limited circumstances:
• in response to lawful requests by public authorities or law enforcement requirements; to protect, establish, or exercise my legal rights or defend against legal claims,
• to comply with a subpoena, court order, legal process, or other legal requirement; or when I believe in good faith that such disclosure is reasonably necessary to comply with the law, prevent imminent physical harm or financial loss, or investigate, prevent, or take action regarding illegal activities, suspected fraud, threats to my property.

4. Security
The security of your personal information is important to me. I follow generally accepted standards to protect the personal information submitted to me, both during transmission and after it is received. My account information is protected by a password. It is important that I protect against unauthorized access to my account and information by choosing my password carefully and by keeping your password and computer secure, such as by signing out after using the Services.
5. The length of time I keep personal information
I retain your personal information only for as long as it is necessary to provide you with my services and as described in my Privacy Policy. However, I may also be required to retain this information to comply with my legal and regulatory obligations, to resolve disputes, and to enforce my agreements. I generally keep your data for the following time period: max 10 years.

6. Transfers of Personal Information Outside the EU
I may store and process your information through third-party hosting services in the USA and other jurisdictions. As a result, I may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction. If I am deemed to transfer information about you outside of the EU, I rely on Privacy Shield as the legal basis for the transfer, as Google Cloud is Privacy Shield certified.

7. Your Rights
You may benefit from a number of rights in relation to your information that I process. Upon request, I will provide you with information about whether we hold any of your personal information.
I may receive a buyer’s email address or other information as a result of entering into a transaction with that buyer. This information may only be used for Etsy-related communications or for Etsy-facilitated transactions. I may not use this information for unsolicited commercial messages or unauthorized transactions. Without the buyer’s consent, and subject to other applicable Etsy policies and laws, I may not add any Etsy member to my email or physical mailing list, use that buyer’s identity for marketing, or obtain or retain any payment information.

*If a customer contacts me to access, correct or delete personal information held by Etsy, I will contact Etsy at www.Etsy.com/help for assistance, or request that the customer send a request directly to Etsy.

If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. I describe these rights below:
• Access. You may have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below.
• Change, restrict, delete. You may also have rights to change, restrict my use of, or delete your personal information. Absent exceptional circumstances (like where I am required to store data for legal reasons) I will delete your personal information upon request if it possible.
• You can object to:
• my processing of some of your information based on my legitimate interests and
• receiving marketing messages from me after providing your express consent to receive them. In such cases, I will delete your personal information unless I have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
• Complain. If you reside in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.

8. How to Contact Me
For purposes of EU data protection law, I, Hristo Krushkov, am the data controller of your personal information. If you have any questions or concerns, you may contact me at abalon.office@gmail.com. Alternately, you may mail me at:
Hristo Krushkov
Divna 13 str.-10
4001 Plovdiv
Bulgaria

9. Privacy Policy Changes
I may amend or update this policy from time to time. I encourage you to check back regularly and review any updates.