In my Privacy Policy I write about: 
– Information I collect
– How I protect your information
– Why I need your information and how I use it
– Information Sharing and Disclosure
– Transfers of Personal Data Outside the EU
– Data Retention
– Your Rights
– How to contact me
—————————-
Information I Collect
—————————-
To fulfil your order, you must provide me with certain information (which you authorised Etsy to provide to me), such as your name, email address, postal address, payment information, and the details of the product that you’re ordering. You may also choose to provide me with additional personal information (for a custom order of artwork, for example), if you contact me directly.
If you provide me with the personal data of third parties (sending something as gift), you shall be responsible for having informed them and obtained their consent for using their personal information.
——————————————
How I protect your Information
——————————————
To maintain the accuracy of the personal data I collect and process, to prevent unauthorised access and ensure the lawful use of your information, I have both implemented appropriate physical, technical, and administrative measures.
————————————————————–
Why I Need Your Information and How I Use It
————————————————————–
*** When you buy something from me ***
I will use your personal data to manage your purchase by processing your orders and returns. I will also use your data in order to handle complaints and warranty matters for products.
The processing of your personal data is necessary to deliver the order to you. 
I will process following categories of your information: name, shipping address, email, payment information
I store your data as long as Etsy makes them available on the Seller Platform.
*** When you contact me for customer service ***
I will use your personal data to manage your queries, to handle complaints and warranty matters for products and technical support matters through e-mail, Etsy messages and through social media.
I will process any information you provide to me, including the following: name, email address, postal address, purchase history, payment history, previous communication with me
The processing of your personal data is based on my legitimate interest and I store your data for five years.
*** When you sign up for my newsletter ***
If you subscribe to my newsletter I will use your personal data to send you discounts and offers, information surveys and invitations through email.
I will process following categories of personal information: name, email address
which newsletter you opened, what links you clicked
The processing of your personal data is based on your consent, and I will keep them until you withdraw your consent. You can opt out from the newsletter by clicking on the “unsubscribe” link in my newsletters.
*** When you follow me on Social Media ***
If you follow me on social media you indirectly distribute personal information to me. The processing of such personal data is based on your consent, and I will keep them until you withdraw your consent (unfollow me)
————————————————-
Information Sharing and Disclosure
————————————————-
Information about my customers is important to my business. I share your personal information for very limited reasons and in limited circumstances. Such partners are logistics, delivery and delivery service providers, customer service providers, financial organisations, anti-fraud organisations, technology providers.
*** Etsy ***
I share information with Etsy as necessary to provide you my services and comply with my obligations under both the Etsy Seller Policy and Etsy Terms of Use.
*** Delivery service providers ***
I engage certain trusted third parties to perform functions and provide services to my shop, such as delivery companies. I will share your personal information with these third parties, but only to the extent necessary to perform these services.
These are Royal Mail (in UK), Hungarian Post (in Hungary)
*** Financial service providers ***
If I sell or merge my business, I may disclose your information as part of that transaction, only to the extent permitted by law. Such company is PayPal (Paypal.com)
*** Compliance with laws ***
I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.
These companies are: Bookkeeping: Blake Water Accountants Limited
*** Direct marketing ***
If you subscribed to my newsletter, I will send you emails about discounts, new products and events. I use Mailchimp (mailchimp.com) as newsletter provider, so I share your information with them.
—————————————————
Transfers of Personal Data Outside the EU
—————————————————
I may use third-party services in the US. As a result, I may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction. If I am deemed to transfer information about you outside of the EU, I rely on Privacy Shield as the legal basis for the transfer, as Google and Face-book is Privacy Shield certified.
——————–
Data Retention
——————–
I retain your personal information only for as long as necessary to provide you with my services and as described in my Privacy Policy. However, I may also be required to retain this information to comply with my legal and regulatory obligations, to resolve disputes, and to enforce my agreements. I generally keep your data for the following time period: 5 years.
—————-
Your Rights
—————-
If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. I describe these rights below
*** Access ***
You may have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below.
*** Change, restrict, delete ***
You may also have rights to change, restrict my use of, or delete your personal information. Absent exceptional circumstances (like where I am required to store data for legal reasons, ) I will generally delete your personal information upon request.
*** Object ***
You can object to (i) my processing of some of your information based on my legitimate interests and (ii) receiving marketing messages from me after providing your express consent to receive them. In such cases, I will delete your personal information unless I have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
*** Complain ***
If you reside in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.
————————–
How to Contact Me
————————–
For purposes of EU data protection law, I, Helen Garfield, am the data controller of your personal information. If you have any questions or concerns, you may contact me at helen@thecreativesdesk.com. Alternately, you may mail me at:
Helen Garfield, 6 Lucerne Crescent, Bridgwater, Somerset, TA5 2FH, UK.
Address: 6 Lucerne Crescent, Bridgwater, somerset, TA5 2FH, UK.
Email address: helen@thecreativesdesk.com
Self employed registration number: 2039744085
VAT registration number: not subject to VAT
Authorised representative: Helen Garfield
SHOP CreativesDeskStudio
August 8, 2022