In line with European Union's General Data Protection Regulation (GDPR) implemented in May 2018, this policy explains how and when I collect, use, and share your information when you purchase an item from me, contact me, or use my services through Etsy.

Information I collect

When you purchase an item of mine through Etsy, you authorise Etsy to share certain person information with me so I can fulfil your order (such as your name, email address, postal address, payment information, and what you have ordered).

If you contact me about a personalised order, you may choose to provide other information about yourself in order to fulfil the order (such as a name to be added to a print, or a message for a card).

Why I need your information and how I use it

I collect, use, and share you information in order to:

- provide my services (such as fulfilling orders and providing customer support)

- when you have provided your affirmative consent (such as signing up for a newsletter), which you may revoke at any time

- when it is necessary to comply with legal obligations (such as information on your orders for tax purposes).

Information sharing and disclosure

Your information's security is important to me and I only share it when necessary to carry out my services.

- I share your information with Etsy in order to provide my services and comply with Etsy's policies.

- I share your information with service providers such as delivery companies. I share your information only when it is necessary to perform these services.

- I share your information when it is necessary to comply with laws.

Data retention

I only keep your data for as long as it is necessary to carry out my services. I may also be required to retain this information to comply with legal obligations. In order to do this, I keep your data for no longer than 2 years.

Your rights

If you live in certain territories, including the EU, you have certain rights in relation to your personal information.

- You have the right to access the information I hold about you by contacting me using the information below.

- You have the right to change, restrict, or delete the personal information I hold about you. Except for circumstances where I am legally obligated to keep your information, I will delete it on request.

- You can object to me using your personal information, or object to receiving marketing messages after providing your consent. I will delete your data except when legally obligated to keep it.

- If you live in the EU, you have the right to complain about my use of information with your local data protection authority.

How to contact me

For the purposes of EU data protection law, I, Cait Peterson, am the data controller of your personal information.

If you have any questions or concerns, you can contact me at cait.peterson@gmail.com.