Through contacting us, entering into a contract for services, and/or purchasing a product, you are consenting to us processing and storing your personal data for the purposes outlined below.

"Us" is the Pen and Inkish Etsy shop.

1 - Information we collect

Personal data will be collected and used only for the purposes of:

• Responding to an enquiry or providing customer support
• Providing the services agreed upon
• Fulfilling an order for a purchase
• Collecting payment for services and orders

2 - Why we need your information and how we use it

Your information is collected and used for the following purposes:

• To provide our services, including fulfilling orders, to settle disputes, or to provide customer support

• To contact you with further information, only when you have provided your express consent for contact, which you may revoke at any time, such as by signing up for our mailing list

• If necessary to comply with a legal obligation or court order in connection with a legal claim, such as retaining information about your purchases if required by tax law

• As necessary for the purposes of our legitimate interests, where these are not overridden by your rights or interests, such as (i) providing and improving our services, and (ii) to comply with our obligations under Etsy's Terms of Use and Seller Policies where we sell products through Etsy.

3 - Information Sharing & Disclosure

We will not share your data with commercial bodies or sales organisations. Your data will only be shared in the following circumstances:

• Service Providers, e.g. courier/delivery companies - information will be shared only to the extent required for the purposes of delivering your purchases

• Purchases and orders through Etsy information will be shared with Etsy only to the extent required to enable use to manage your orders and/or services purchased through the site, and to comply with our obligations under the site's Terms of Use and Seller Policies

• Business Transfers - if we sell or merge our business, we may disclose your information as part of that transaction, only to the extent permitted by law

• Compliance with laws - if necessary, we may retain and/or share your information in order to:

a) respond to legal process or to government requests
b) enforce our agreements, terms and policies
c) prevent, investigate and address fraud and other illegal activity, security or technical issues
d) protect the rights, property and safety of our business, our customers or others

4 - Data Retention

We will retain your personal information for as long as necessary to provide you with the contracted services. However, we may also be required to retain some information to comply with our legal and regulatory obligations, to resolve disputes and to enforce our agreements.

Your data will generally be kept for a maximum of 3 years from our last service provision, contract or purchase.

5 - Transfers of personal data outside the EU

All data is normally held within the UK, except as listed below:

• Some data may be copied to a web-based backup facility. Our backup service is based in Canada and is fully encrypted; the service's employees cannot view or access any data.

• Where data is stored and processed through Etsy, Etsy may host data outwith the EU.

6 - Your Rights

If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. In practice, we operate as if all customers have these rights. These rights are:

• Access - you have the right to request and receive a copy of the personal information we hold about you. You can contact us using the details in section 7 below.

• Change, restriction or deletion - you also have the right to change, restrict our use of, or delete your personal information. Unless there are exceptional circumstances (e.g. where we are required to store data for legal reasons) we will generally delete your personal information on request.

• Objection - you can object to:

a) us processing some of your information based on our legitimate interests, and
b) receiving marketing messages from us after providing your express consent to receive them.
c) In such cases, we will delete your personal information unless we have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.

• Complaint - if you reside in the EU and wish to raise a concern about our use of your information, you have the right to do so with your local data protection authority. In the UK this is the Information Commissioner's Office.

7 - How to contact us

You can email us at penandinkish@tutanota.com

But the quickest way to contact us is by direct message through Etsy.

Please note that if you wish to access, correct or delete information supplied through Etsy, we are unable to amend or delete any information held directly by Etsy. If you also wish to access, correct or delete information held by Etsy, you will need to contact them directly.