I hold only the minimum of personal information about you and below, I'll set out what I (Bobbydazzle Jewellery) do with that data. I promise I'll make it short and painless. Please refer to Etsy's own privacy policy to find out about the data it holds and uses.

The information I hold about you is limited to details that you give me or that Etsy gives me on your behalf - name, address, contact details, and anything you tell me if we have a conversation (e.g. details about a custom order.) I don't receive any of your payment details. I use the information I have only to process your order or answer any questions. Obviously, without your information I can't do either of those things, and because we're all sensible people let's also assume that by placing an order or contacting me, you're also giving me consent to use if for those things.

I'm not a big fan of direct marketing, either as a business or as a customer, but of course I do need to promote my business, so I've reluctantly set up a mailing list. Please sign up if you'd like to hear from me occasionally - and I promise it will only be occasional. I'll only contact you when I have something genuinely interesting to tell you, such as a new product range, opportunities to see my work in real life or maybe the occasional special offer. Unless you actively sign up to my mailing list, I won't use your details for direct marketing.

I use Mail Chimp, a third party company, to manage my mailing list. They're a very commonly used company by businesses large and small around the world, and I'm happy that they take data privacy seriously and keep my customers' email addresses secure.

I don't share your details with anyone, you'll be pleased to know. However, if I'm ever legitimately required to do so by Etsy or anyone working on its behalf, I'll share what little I have. This is unlikely because they already have the same information but it might apply in the event of a dispute or complaint that you and I can't resolve between ourselves or if Etsy is conducting an investigation and needs information from me.

Of course, if there's ever a situation in which the law compels me to share information or the police come knocking on the door with a warrant, I'll give them what little I have - I'm a great privacy advocate but I'm no freedom fighter! I will always check first that they are genuine and have the right authority before I hand over any details. The same goes for any government bodies.

I make a point of keeping as little information as possible for as short a time as necessary. I'll keep information about sales for as long as tax/other legal requirements require me to (up to 6 years) but this won't generally require me to keep anything other than basic dates and amount. I'll also keep any additional details I may have (details of conversations, for example, or custom order requirements) for a short while after your order; no more than 6 months so if anything goes wrong (fingers crossed that it doesn't!) or you have a query, I'll can look back and sort things out.

If you're in the EU, you can't fail to have heard of the General Data Protection Regulation (GDPR) and you probably know that it gives you rights over your personal information. As I hold only the minimum of information and then only for essential purposes, it's unlikely your rights will apply but it's still important that you know about them, so here's a quick summary:

You have the right to access your data. Should you want to see the information I have about you for any reason, just ask and I'll tell you what I have and/or send you have a copy. You can ask to have data corrected/amended - again, just let me know and I'll correct it.

You have the right of objection to processing in certain circumstances, which sounds dramatic but is not likely to apply to us here. I've explained above that I use your information for a very limited range of purposes, all of which are vital if I'm going to provide your order, talk to you and stay on the right side of the tax man and the law. None of these things is likely to intrude on your privacy and if you do object to me doing them for any reason, I'm afraid we simply can't do business with each other!

You have the right to opt out of direct marketing. I hate marketing, you hate marketing, we all hate marketing. I won't be sending you any unless you actively sign up to my mailing list, although Etsy might - do remember that Etsy will have its own policy regarding marketing and make sure you stay on top of your marketing and contact preferences as that's not within the control of sellers.

You can also request the deletion of your personal information where I have no legitimate need to hold it. However, as I hold hold the bare minimum for the shortest possible time and for strictly essential purposes, there's really nothing that can be deleted!

Finally, I hope you never have cause to use it, but you do have the right to lodge a complaint with the regulator in your country. In the UK, that's the Information Commissioner's Office (ICO.org.uk). There are other data privacy rights in the GDPR, such as the right to data portability or the right to restriction, but it's hard to think of a scenario in which they would apply here so I'm not going to bore you with the details of them here. You can find out more by visiting the website of your local data protection authority.

I should probably tell you who I am: my name is Louise Wiseman (I'm Bobbydazzle Jewellery) and I'm based in Derbyshire in the UK. Bobbydazzle Jewellery is a trading name of my company, Louise Wiseman Ltd, which has its registered address at 3 Charnwood Street, Derby, DE1 2GY. I'm what's known officially as a 'data controller' for the personal information I hold about you which means I'm responsible for complying with the GDPR rules and requirements I've set out above. At the risk of repeating myself, do remember that Etsy also holds your personal information and is the data controller for the data it holds.

If you're not in the EU, you may be feeling a little bit left out. Well, so are we in the UK these days: join the club! But enough about our Brexit woes. The data protection rights I've outlined above only apply within the EU and UK (and will continue to apply there post-Brexit) but no matter where in the world you are, your privacy is equally important and I treat your personal information in exactly the same way.

If you've bothered to read to the bottom of this privacy policy, well done and thank you. You deserve a little reward, so if you place an order from my shop, I will throw in a little something extra for you so drop me a message in or after your order, along the lines of 'I read the Privacy Policy' so I know.

There. We're done with the boring but important stuff. If you have any questions left about how I use your personal information, just ask me. Now go and browse some lovely jewellery!