As owner of the Etsy shop Vintage Patent Art, I am committed to protecting the privacy of my customers, and take my responsibility regarding the security of my customer’s information very seriously.

I will always make every effort to be clear and transparent about the information I am collecting from you, and what I will do with that information.

This Privacy Policy sets out the following:

What personal data I collect and process about you in connection with your relationship with me as a customer, and your use of my Etsy shop.
How and when I collect, use, or share this data when you purchase an item from me.
How I deal with your data protection rights
How to contact me, or access my services through Etsy.com and any related sites or services.

This Privacy Policy does not apply to the practices of any third parties that I do not own or control, including Etsy or any third party services you may access through Etsy. These third parties have their own Privacy Policies and Terms of Use which you should access and read before using their services. As always it is advisable to do your own research, and apply your own due diligence before accessing any services.


Personal Data I Collect

When you purchase an item from me in order for me to fulfill your order, it is necessary for you to provide me with certain information, such as your email address, name, phone number, postal address, payment information, and the details of the product that you’re ordering from me.

This is information that you authorize Etsy to provide to me.

You may also choose to provide me with additional information ( for example for a custom order) if you contact me directly.

Why I Require Your Information And How It Is Used

I require your information for the following purposes, and I rely on a number of legal basis to collect, use, and share your information including

As required to provide my services, such as when I use your information to fulfill your order, settle a dispute, or to provide you with customer support.
When you have provided your express consent, which you may revoke at any time, by for example signing up for my newsletter mailing list.
As required for the purpose of my legitimate interests, unless your rights and interests take precedence, such as in providing and improving my services. I use your information to provide you with the service you have requested, and in my legitimate interests to improve my services.
I also use your information as necessary to comply with my obligations under the Etsy Seller Policy and Terms of Use.
To comply with a court order or legal obligation or claim, I may retain your data as required, for example to maintain a record of your purchases if required to do so under tax law (in Ireland where I reside, a term of 6 years business accounts and details is required).

Information Sharing And Disclosure

The protection of your data and information is very important to me. I share your personal information for very restricted and limited reasons and circumstances only as follows:

Etsy. I share your information with Etsy as necessary in the delivery of my services to you, and to comply with my obligations under the Etsy Seller Policy and Etsy Terms of Use.
Third Party Service Providers. I engage certain trusted third parties in the delivery of my services to you, and in the course of my business, such as printing and delivery companies. When you place an order with me it may be necessary for me to disclose your information to some of these third parties to allow me to fulfill your order, but only the information necessary to do so. I require all third parties to have appropriate technical and operational security measures in place to protect your personal data, in line with Irish and E.U. Law on data protection rules.
To comply with laws. I may collect, use, retain and share your information if I believe in good faith that it is necessary to a) respond to a legal or government request, b) prevent, investigate and address illegal activities including fraud, or security or technical issues, c) enforce my terms, agreements or policies, or d) protect the property, safety and rights of my customers or others.

Data Retention

I retain your personal information only for as long as it is necessary for me to provide you with my services and as described in my Privacy Policy.

However, I may also be required to retain this information to resolve disputes, to enforce my policies and agreements, and to comply with legal and regulatory obligations such as preparing tax records.

For these purposes I will retain your data for a period of 6 years.

When your data is no longer required for any of these reasons, I will securely delete or destroy it.

Transfers of Personal Data Outside of Europe

Some of the third parties I rely on in my business are based outside of the European Economic Area (EEA). While some countries based outside the EEA do not always have strong data protection laws, I require all of my third party service providers to process your information in a secure manner, and in accordance with European Union (E.U). laws on data protection.

Third Party Companies I Use

MailChimp

MailChimp is my chosen email provider service, and they are based in the U.S.

They are a well established and trusted email service provider, and they deal with millions of emails safely and efficiently every day.

When you sign up for my email newsletter list, you can do so in confidence knowing that MailChimp have the strictest security measures in place to protect your personal information.

MailChimp is certified to the E.U.-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. So all transfers of personal information and data by MailChimp are carried out with highest levels of security measures in place.

During the sign-up process you will be asked to consent to the various methods of communication that you wish to receive from me. You can opt-in to all, or whichever options you wish to choose, such as emails and direct mail, or just emails.

Please also note, you can unsubscribe at any time and this will completely revoke your consent, and all of your personal information will then also be removed and deleted completely.

To view MailChimp's policies, and to find out more about them, you can access their website at https://mailchimp.com


Your Personal Rights and Access

If you reside in certain territories, including the E.U. you have certain rights in relation to your personal information and how it is used.

Some rights apply generally, while other rights will apply only in certain limited cases.

Request Information
You may ask if I hold personal information about you, and if so, what that personal information is, and why I am holding it or using it.

Request Access
To your personal information. This enables you to receive a copy of the personal information I may be holding about you.
Request Correction
This allows you to have any incorrect or incomplete personal information that I may hold about you corrected.

Request Deletion
This allows you to ask me to delete or remove personal information where there is no good reason for me to continue to process it. You can also ask me to delete or remove your information if you have objected to the processing of it.

Except for exceptional circumstances (such as, where I am required to store data for legal reasons) I will generally delete your personal information upon request.

Object To Processing
You can object to a) my processing of some of your information based on my legitimate interests b) receiving marketing messages from me after providing your express consent to receive them. There is always an Unsubscribe Link in all of the emails I send, and you have the right to Unsubscribe from these messages at any time.

In such cases, I will delete your personal information unless I have compelling and legitimate grounds to continue using that information, or if it is needed for legal reasons which may include tax purposes.

Request Transfer (Data Portability)
You may request a transfer of your personal information in an electronic format to you, or another party.

Complain
If you reside in the E.U. and you wish to raise a concern about my use of your personal information (and without prejudice to any other rights you may have) you have the right to do so with your local data protection authority.

How To Contact Me

For the purposes of E.U. data protection law, I, Susan O’Brien am the data controller of your personal information for the Etsy shop Vintage Patent Art.

If you have any questions or concerns, you may contact me at vintagepatentart@gmail.com