sophieheywood

This privacy policy details when and how I share, use and collect information when you purchase from my shop, get in touch with me or when you use other services through Etsy.com and/or its related services and sites.

This privacy policy does not apply to the practise of the third parties that I do not own or control. This includes Etsy or any third party services that are accessible through Etsy. The Etsy Privacy Policy can be referenced for you to learn more about its privacy practices.

Information I Collect

When you order from my shop, you have authorised Etsy to provide me with specific information, such as your email address, your name, payment information, postal address and the details of the item you are ordering. In some cases you may want to provide me with additional information when you contact me directly, such as details for a custom pet portrait for example.

How I Use Your Information and Why I Need It

To collect, use and share your information I rely on a few legal bases, including;

• To be able to provide my services, for example, using your information to complete and post orders, to provide you with customer support and to settle any disputes.
• For times when you have granted your agreed consent, which you can revoke whenever you please, for example, by signing up to a mailing list.
• If I was required to comply with a legal claim in which the information is obligated for a court order, such as retaining information about your purchases if required by tax law.
• The purpose of my legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as 1) providing and improving my services. I use your information to provide the services you requested and in my legitimate interest to improve my services; and 2) Compliance with the Etsy Seller Policy and Terms of Use. I use your information as necessary to comply with my obligations under the Etsy Seller Policy and Terms of Use.

Information Sharing and Disclosure

Customer information is important to my business. In limited circumstances and for limited reasons, your information will be shared. Reasons include:

• When necessary, I share information with Etsy. This is so I am able to provide my services with you while at the same time complying with obligations as a seller, both under the Etsy Seller Policy and the Etsy Terms of Use.
• Your information may sometimes be shared with service providers. I work with certain trusted third parties to provide services and perform functions to my shop, for example, delivery companies. I will only share your personal information with these companies to the extent needed to carry out these services.
• If I was to ever sell or merge my business, your information may be disclosed to complete that transaction, only to the extent permitted by law.
• Compliance with laws. I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.

Data Retention

In order to provide you with the services described in my privacy policy, I only retain your information for as long as necessary to carry out those services. With that said, I may also be required to retain information in order to comply with resolving disputes, my regulatory and legal obligations and to enforce my agreements. Generally, I keep your data for around 4 years.

Transfers of Personal Information Outside the EU

Your information may be processed and stored by myself through third-party hosting services within the US and other jurisdictions. A jurisdiction with different government surveillance and data protection laws to your own may require me to transfer personal information to them. If ever I am required to transfer information about you outside of the EU, I will rely on Privacy Shield as the legal basis for the transfer. This is due to Google Cloud being Privacy Shield certified.

Your Rights

In certain territories, which include the EU, there are a number of rights you have in relation to your personal information. Generally some of these rights apply, although there are certain rights, which only apply in certain cases, those of which are detailed below:

• You may be entitled to the right to receive and access a copy of the personal information about you I hold by getting in touch with me using the contact information below.
• You may have the rights to restrict my use of, delete or change your personal information. Apart from exceptional and rare circumstances, such as where I am required to store the information for legal reasons, I will generally delete you personal information on request.
• You have the right to object to me processing some of your personal information for my legitimate interests. You also have the right to object to receiving marketing messages from me after expressing your consent to receive them. In these cases I will delete your personal information, unless I have legitimate and compelling reasons to continue using the information for legal reasons.
• If you live in the EU and wish to raise concern about how I use your information (and without prejudice) you have the right to do so. You can raise any concerns with your local data protection authority.

How To Contact Me

For purposes of EU data protection law, I, Sophie Heywood, am the data controller of your personal information.

If you have any questions or concerns, you can send me a message through Etsy Conversations. Alternatively you can email me at sophkadoph@gmail.com

Thank you.