This privacy policy describes how and when I collect, use and share information, if you purchase a product from me, contact me or otherwise use my services via Etsy.com or its related sites and services.

This Privacy Policy does not apply to third-party practices that I do not own or control, including Etsy or third-party services that you access through Etsy. You can check Etsy's Privacy Policy to learn more about how Etsy handles privacy.

Data that I collect

To be able to fulfill your order, you must submit certain information to me (you have given Etsy permission to pass it on to me), such as your name, e-mail address, postal address, payment details and the details of the product you have ordered. If you contact me directly (for example when you place a custom order) you can also choose to give me additional personal information.

Why I need your data and how I use it

I rely on a number of legal bases to collect, use and share your data, such as:

- where necessary to provide my services, such as when I use your data to fulfill your order (based on 'necessary for the agreement'), to settle disputes or to provide customer service;
- when you have given your express permission, which you can withdraw at any time, such as by signing up for my mailing list;
- if necessary to comply with a legal obligation or court order or in connection with legal proceedings, such as keeping information about your purchases if required by tax law; and
- to the extent necessary for the purpose of my legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as 1) the delivery and improvement of my services. I use your information to provide the services you have requested and in my legitimate interest in improving my services; and 2) Compliance with Etsy's Seller Policies and Terms of Use. I use your information as necessary to comply with my obligations under Etsy's Seller Policy and the Terms of Use.
Data exchange and disclosure

The details of my customers are important for my company. I only share your personal information for very limited reasons and very specific situations, as follows:

Etsy. I share data with Etsy where necessary to provide you with my services and to fulfill my obligations as described in both Etsy's Seller Policy and Terms of Use .;
Service providers I engage certain trusted third parties to perform certain functions and deliver services to my shop, such as delivery staff. I will share your personal information with these third parties, but only as far as necessary to provide these services.
Accounting program. I use a secure accounting program to be able to meet the legal obligations of the tax authorities. The server of this company is in the Netherlands and they declare to guarantee the privacy of customers and their users.
Business transfers. If I sell my business or enter into a merger, I may disclose your details as part of that transaction, but only to the extent permitted by law.
Compliance with laws. I may collect, use, store and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to a legal process or government requests; (b) compliance with my agreements, conditions and policies; (c) the prevention, investigation and handling of fraud and other illegal activities, security or technical problems; or (d) protect the rights, property and safety of my customers or others.
Data retention

I keep your personal information only for as long as necessary to provide you with my services and as described in my Privacy Policy. In addition, I have the legal obligation (administrative duty for the tax authorities) to keep invoices for at least 7 years.

If you live in certain areas, including the EU, you have a number of rights regarding your personal data. Although some of these rights are general, some rights relate to certain limited cases. I describe these rights below:

Access. You may be entitled to access and receive a copy of the personal information that I own from you. You can contact me via the details below.
Change, limit, delete. You may also have the right to change your personal information, to limit my use of it, or to delete it. If there are no exceptional circumstances (such as where I have to store data for legal reasons), I will usually delete your personal data on request.
Objection. You can object to (i) my processing of some of your data based on my legitimate interests and (ii) receiving marketing messages after giving your explicit permission to receive them. In such cases, I will delete your personal information, unless I have compelling and legitimate reasons to continue using that information or if this is necessary for legal reasons.
Complaints. If you live in the EU and you want to express concern about my use of your data (and without prejudice to any other rights that you may have), you have the right to do so with your local data protection authority.

How you can contact me

In the context of EU data protection legislation, I, Iris Revers, is the data controller of your personal data. If you have questions or concerns, you can contact me at winkelvanpietenkees@gmail.com. Or you can send a letter to:

Iris Revers, Noordvaartlaan 14, 2391 CS, Hazerswoude-Dorp