The information I collect

To process your order, you must provide me with certain information (which you have authorized Etsy to transmit to me), and in particular your name, email, postal address, payment details, as well as the description of the product you are ordering. You can also decide to give me some additional personal information (for a personalized jewelry order for example), by contacting me directly.


Why I need your information and how I use it

I rely on a number of legal bases to collect, use and share your information, including :

- to provide you with my services, for example when I use your information to process your order, resolve a dispute or provide customer service;
- when you have given me your explicit consent, which you can revoke at any time, for example by subscribing to my newsletter ( http://eepurl.com/cUCGA9 );
- if necessary, to respond to a legal obligation, a legal ruling or in connection with a request from the courts such as, for example, to keep information about your purchases in the context of tax legislation;
- and, if necessary, to serve my legitimate interests, in case these legitimate interests are not invalidated by your rights or interests, such as :
1) to provide and improve my services. I use your information to provide the services you have requested from me and in my legitimate interest to improve those services; and
2) compliance with the Sellers Rules and Etsy's Terms of Use. I use your information, if necessary, to comply with my obligations under the Vendor Rules and Etsy's Terms of Use.


Sharing and dissemination of information

Information about my customers is important to my business. I only share your personal information for a very limited number of reasons and under a limited number of circumstances such as :

Etsy.
I share your information with Etsy when it is necessary to provide you with my services and to comply with my obligations as set forth in the Vendor Rules and Etsy's Terms of Use.

Service Providers.
I use certain third parties that I trust to perform certain actions or provide certain services for my store:
- Transportation companies, such as the Post Office. I may have to share your personal information with these third parties, but only that which is necessary to perform these services.
- my newsletter provider, if you have explicitly agreed to subscribe to it. An unsubscribe link is available at the bottom of each newsletter I send you.

Compliance with legislation.
I may have to collect, use, store and share your information if I believe in good faith that it is necessary and reasonable to do so in order to :
(a) respond to a legal process or government request;
(b) enforce my agreements, terms, or regulations;
(c) prevent, investigate, or manage fraud or other illegal activity, or technical or security issues; or
(d) protect the rights, property and safety of my clients or others.


Data Retention

I keep your information only as long as necessary to provide you with my services and for the purposes set out in my Privacy Policy.
I may also need to retain this information to comply with legal and statutory obligations, resolve disputes and enforce my commitments.
I generally keep it for a period of :
- 2 years for general information;
- 10 years after the close of the fiscal year for invoices.


Transfers of personal information outside the EU

I may potentially store and process your information via third party hosting providers located in the United States or other countries. As a result, I may transfer your personal information to a jurisdiction where data protection laws and government oversight are different than in your country. If I need to transfer your personal information outside of the European Union, I rely on the Privacy Shield as the legal basis for doing so, as Google Cloud is Privacy Shield certified.


Your rights

If you are a resident of certain territories, including the European Union, you have certain rights with respect to your personal information. Some of these rights apply generally, and others apply only in limited circumstances. These rights are described below:


Access.
You may have the right to access and receive a copy of the personal information I hold about you by contacting me. You will find my contact information below.

Modify, restrict, delete.
You may also have the right to modify your personal information, restrict my use of it or delete it. Other than in exceptional circumstances (for example, if I need to keep data related to my store for legal reasons), I will generally delete your personal information upon request.

Object.
You may object 1) to my processing of some of your information in the context of my legitimate interests and 2) to the receipt of marketing messages from me after I have explicitly consented to receive them. In these cases, I will delete your personal information unless I have legitimate reasons for continuing to use it, or in cases where it is necessary for legal reasons.

Challenging.
If you are a resident of the European Union and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you may do so to your local data protection authorities.


How to contact me

Within the framework of the European Data Protection Act, I, Sabrina Ivorra, am the data controller with regard to your personal information. If you have any questions or concerns, you can contact me on my email contact@vegetalica.fr or via Etsy messaging. You can also send me a postal mail to the address :

Sabrina Ivorra - Végétalica
263 Route du Petit Pont
76690 Saint Germain sous Cailly
FRANCE