At Out of My Head, I take your personal data very seriously. In order to comply with the EU GDPR Law, I issue the following statement which I agree to uphold when you place an order with me.
In order to fulfil your order I rely on Etsy to provide me with the
necessary data needed in order to process your order in a timely manner. The data I collect is (which you authorized Etsy to provide to me) your name, email address, postal address, payment information, and the details of the product that you’re ordering. You may also choose to provide me with additional personal information (for a custom order, for example), if you contact me directly.

I may also contact you for additional
information such as custom product details, improvement of our business, and information needed to complete the order in a timely manner.

You may revoke your consent at any time and have the right to request details of the information we keep.

Information sharing and disclosure:
I understand the importance of keeping personal data secure and safe and only share limited personal data with companies we need to in order to maintain our business.

United States Postal Service - postal address only
Federal Express - postal address only
United Parcel Service - postal address only



Data Retention:
I only keep information for the sole purpose of fulfilling your orders and for my own records and what is deemed fair use in my business within the parameters of the law. However, I may also be required to retain this information to comply with my legal and regulatory obligations, to resolve disputes, and to enforce my agreements. I generally keep your data for the following time period: 7 years.



Transference of data outside of the EU:
I may store and process your information through third-party hosting services in the US and other jurisdictions. As a result, I may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction. If I am deemed to transfer information about you outside of the EU, I rely on Privacy Shield as the legal basis for the transfer, as Google Cloud is Privacy Shield certified.

Informing of rights:
As a residence of the EU, you are subject to rights and privacy laws under the GDPR law.
* You have the right to revoke your permissions at any time except where it is legal for Out of My Head to keep them for the processing of our business requirements by law.
* You have the right to access to your personal data within normal business hours via electronic format.
* You have the right to withdraw from any mailing list or social media outlet at any time.
*You have the right to complain to your local data protection agency about the information we keep that is outside of what is required by law.

Contact Information:
My name is Katherine Kollman and I am the data controller for Out of My Head.
For the purposes of data protection you can contact me at outofmyheaddesigns [!at] gmail.com,
Mailing address: Out of My Head, 202 Brunswick Ave., Gardiner Me 04345
Or Phone 207-582-8250 if you have any questions or concerns.