JuniperJaneCraft

This privacy policy sets out how JUNIPERJANECRAFT uses and protects any information that you give JUNIPERJANECRAFT when you buy from me on ETSY.
JUNIPERJANECRAFT is committed to ensuring that your privacy is protected. In order to prevent unauthorised access or disclosure, I have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information I collect online.

JUNIPERJANECRAFT may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from April 2018.

This Privacy Policy does not apply to the practices of third parties that I do not own or control, including Etsy or any third party services you access through Etsy. You can reference the Etsy Privacy Policy to learn more about its privacy practices.
If you reside in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.

Why do I need your personal data?
I collect and process data in order to fulfil our contractual obligation to you, the customer. I need your personal data for the purposes of fulfilling your order, tracking your order and communicating with you regarding your order.
What Personal Data I receive?
I receive personally identifiable information from Etsy only when it is voluntarily submitted by buyers when placing an on-line order. The data I receive includes: name, billing address, delivery name, delivery address, Email Address, telephone number, date of order, items ordered, personalisation details for items ordered, value of items ordered and chosen method of delivery.
I do not have access to your payment details as this is not provided to me by Etsy or PayPal.

What do I do with the information I gather?
I use and/or store your data for the following reasons:
- Internal record keeping for Tax and VAT records
- To process and deliver your order
- To contact you regarding your order and update you on the progress of your order.
- I may use this data to improve our products and services.


Who do I share your details with?
I only share your details for the following purposes and situations:
- With Postal service providers and couriers to deliver your order (this will normally be Royal Mail).
- If I am required or permitted to do so by law
- It is required by law enforcement or fraud prevention
Your data may also be securely stored by cloud storage services and cloud hosting services for reporting and archiving purposes. I only store such information with services that meet the EU’s GDPR requirements and are also covered by the E.U.-U.S. Privacy Shield Framework where necessary.
For requests that require me to deliver outside of the E.U., the delivery service organisation may be required to share the recipient’s contact details with a sub-contracted non-EU delivery service.
I do not sell or rent personally identifiable information to any third party for any purpose unless I have your permission.

How can you find out what Personal Information I have about you?
Under the GDPR, buyers are entitled to obtain from me a copy of the data held concerning them and to have any inaccuracies in the data rectified. If I are requested by a customer to provide I will verify the identity of the person making the request using reasonable means. I am obliged to provide this data to within 1 calendar month and free of charge. However, I have the right to refuse or charge for requests that are manifestly unfounded or excessive and repetitive.
If you would like a copy of the information held on you, please contact me via the Etsy messaging system.

How long do I hold your personal data?
I may retain your personal data for up to seven years in order to comply with HMRC filing regulations.

Can you ask me to delete your personal data?
I have the right to retain personal data used for our record keeping for tax and VAT purposes.
If a request is made to delete/amend personal data that I have which is not needed by me as a reasonable business or legal requirement, I will delete/amend this records within a reasonable amount of time (28 days from the date of request) and inform the customer once this is done in writing (either via the Etsy messaging system or letter)
If you would like to request deletion of your data, please contact me via the Etsy messaging system.