Information Collected:
The information collected is only what is needed to fulfill your order and meet legal requirements. This includes (which you authorized Etsy to provide):
• Your name
• Postal Address
• Payment information (limited to payment type; Etsy does not share account information with sellers)
• Product details
• Email Address
• Personal information for customized orders (if applicable)

How Your Information is Used:
• To provide you with paid services (fulfill your order), customer support, contact based on your request or to complete your order, and address account concerns
• To comply with a legal obligation, such as tax collection or legal dispute
• As necessary for legitimate business interests, such as how to improve services (as long as this is not overridden by your rights and interests)

Information Sharing and Disclosure:
Your personal information is shared for limited reasons and in limited circumstances, as follows:
• Etsy—as is necessary to provide you with services and comply with obligations under both the Etsy Seller Policy and Etsy Terms of Use
• Service providers—to the extent necessary to fulfill your order
• Compliance with legal requirements

Data Retention:
Your personal information is retained only for as long as necessary to provide you with services and as described in the Privacy Policy. This includes retention to comply with legal and regulatory obligations, to resolve disputes, and to enforce agreements. Your data is generally kept for 7 years. Please refer to Etsy’s Privacy Policy for information on how long they will retain your information. Etsy’s data retention may provide additional access to information beyond the timeframe outlined here.

Transfers of Personal Information Outside the EU:
Your information may be stored and transferred through third-party hosting services in the US and other jurisdictions. As a result, it may be transferred to a jurisdiction with different data protection and government surveillance laws than your jurisdiction. If it is deemed that information about you is transferred outside of the EU, KaztielKrafts relies on Privacy Shield as the legal basis for the transfer, as Google Cloud is Privacy Shield certified.

Your Rights:
If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. These rights are described below:
• Access. You may have the right to access and receive a copy of the personal information held about you by using the contact information below.
• Change, restrict, delete. You may also have rights to change, restrict use of, or delete your personal information. Absent exceptional circumstances (such as being required to store data for legal reasons) generally your personal information is deleted upon request.
• Object. You can object to the processing of some of your information based on legitimate business interests and receiving marketing messages after providing your express consent to receive them. In such cases, your personal information will be deleted, unless there are compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
• Complain. If you reside in the EU and wish to raise a concern about the use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.

How to Contact Me:
For purposes of EU data protection law and any other applicable law, I, Arianna “Kaz” Unciano, am the data controller of your personal information. If you have any questions or concerns, you may contact me at kaztiel@ ymail.com or by mail at:
418 Greenville Rd., San Jacinto, CA 92582