I, Kristin James, am the data controller of your personal information as it relates to my shop. When you place an order, I will receive your name, delivery address and email address from Etsy. I will only use these details to process and deliver your order, or deal with any queries you have related to that order. If you send me a message using the contact button on Etsy, I will receive your user name and email address. The only circumstances in which I will share your data are in processing your order or complying with the law. I will never use or pass on your information to third parties for marketing purposes or any other purpose, other than the circumstances listed below or add you to any mailing list without your explicit consent. The circumstances in which I may share your data are : with Etsy to comply with my obligations, with delivery companies to fulfill your order, and/or to comply with legal or tax obligations. I will retain your details for as long as necessary in order to process the transaction and I will securely store any data collected during that period. I retain personal data related to orders or customer queries for 7 years. After this time I will delete your data from my records. You have the right to know what personal data I hold about you, and to ask for that data to be changed or deleted. You also have the right to complain to the ICO if you believe there is a problem with the way I handle your data. If you have any concerns about your personal data, please contact support@Etsy. In addition to my own privacy policy, if you pay with PayPal, your data will be protected by PayPal's privacy policy. If you pay directly by card on Etsy, your personal data is protected by Etsy's privacy policy.