MaxPringJewellery

In compliance with the General Data Protection Regulations (GDPR). The Policy below describes how and when I collect, use and share information you provide when you purchase an item from me or contact me through Etsy.com.

This Policy does not apply to any of the third parties that I do not own, manage or control, including Etsy or any third party services you access through Etsy. You can reference the Etsy Privacy Policy to learn more about its privacy practices.

1. Personal information I collect

When you purchase from me I collect information required to fulfil your order, this includes your Etsy username, name, address, items ordered and payment amount details (I do not have access to, nor hold any of your personal financial information such as your credit or debit card, this information is collected and stored via the Etsy Payment system which is outside of my control)

The information I collect is required only for me to fulfil your order. In fulfilling your order I use a third party to arrange delivery of your items, either Royal Mail On-Line Postage Services to generate pre-paid postage labels, or directly with Royal Mail Postal Services via the Post Office if you live outside the UK or your item is being sent recorded delivery.

I may also be required to share your information with Etsy.com to settle disputes, or to provide customer support;

I do not share your information with any other third parties, nor retain it outside of Etsy and Royal Mail.

2. Specific Requirements for me to Collect, use and share personal information

I am required by law to hold the information I collect from you for at least 5 years after I have submitted my Annual Self Assessment Tax Return in line with HM Revenue Customs and Excise, Inland Revenue Regulations.

3. Why I Need Your Information and How I Use It

The Information I am required to collect, hold and share is for the following reasons:-

• as needed to fulfil your order, to settle disputes, or to provide customer support;
• to comply with my legal obligation as required by HM Government, Inland Revenue; and
• to comply with the Etsy Seller Policy and Terms of Use. I use your information as necessary to comply with my obligations under the Etsy Seller Policy and Terms of Use.

4. Information Sharing and Disclosure

Information about my customers is important to my business and I only share your personal information for very limited and specific reasons as follows:-

• Etsy. I share information with Etsy as necessary to fulfil your order and to comply with my obligations under both the Etsy Seller Policy and Etsy Terms of Use.
• Trusted Third Parties that provide postal services (Royal Mail). I share your name and address to this third party, but only to the extent necessary (i.e. deliver your goods)
• To comply with laws. I may collect, use, retain, and share your information if I am required to by law or for a legal process: (a) e.g. respond to legal process or to government request; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.

5. Data Retention

I retain your personal information only for as long as necessary to fulfil your order as described in this Policy. I am also required to retain this information to comply with my legal and regulatory obligations, I generally keep your data for a period: 6 years as required by HM Revenue and Customs.

6. Your Rights

If you live in certain countries, including the EU, you have a number of rights in relation to your personal information. While most of these rights apply generally, certain rights apply only in certain circumstances. These are outlined below:-

• Access. You may have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below.

• Change, restrict, delete. You may also have rights to change, restrict my use of, or delete your personal information. I will generally delete your personal information upon request (except where I am required to retain for legal reasons e.g. Tax requirements)

• Object. You can object to my processing of some of your information based on my legitimate interests and (ii) receiving marketing messages from me after providing your express consent to receive them (I do not currently use your information for marketing purposes). In such cases, I will delete your personal information unless I have legitimate grounds to continue using that information e.g. if it is needed for legal reasons.

• Complain. If you live in the EU and wish to raise a concern
about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.

7. How to Contact Me

For purposes of EU data protection law, I, Maxine Pring, am the data controller of your personal information. If you have any questions or concerns, you may contact me via the contact me button or via e-mail maxine.pring@btinternet.com