1. Data I collect
In order to fulfill your order, you will need to provide me with certain information (you have given Ecwid permission to provide it to me), such as your name, email address, mailing address, payment details and the details of the product you ordered. If you contact me directly (for example, when placing a custom order), you may also choose to provide me with additional personal information.
2. Why I need your data and how I use it
I rely on a number of legal bases to collect, use and share your data, including:
Where necessary to provide my services, such as when I use your information to fulfill your order, resolve disputes, or provide customer service; where you have given your express consent, which you can withdraw at any time, such as by signing up for my mailing list; As necessary to comply with a legal obligation or court order, or in connection with legal proceedings, such as retaining information about your purchases if required by tax law; and to the extent necessary for the purposes of my legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as
1 providing and improving my services. I use your information to provide the services you have requested and in my legitimate interest to improve my services; and
3 The third parties I share this infomation with.
3. Data sharing and disclosure
My customers' data is important to my business. I only share your personal information for very limited reasons and very specific situations, as follows:
4. How long I keep your personal data
5. Transfer of personal data to outside the EU
I may store and process your data through third party hosting services located in the United States and other jurisdictions. As a result, I may transfer your personal data to a jurisdiction with different data protection and governmental oversight laws than yours. If I am expected to transfer your data outside the EU, I rely on Privacy Shield as the legal basis for the transfer, as Google Cloud is Privacy Shield certified.
6. Your rights
If you live in certain areas, including the EU, you have a number of rights regarding your personal data. While some of these rights are general, some rights relate to particular, limited cases. I describe those rights below:
Access. You may have the right to access and receive a copy of the personal information I hold about you. You may contact me for this purpose using the information below. Modify, restrict, delete. You may also have the right to amend your personal information, restrict my use of it, or delete it. If there are no exceptional circumstances (such as where I need to store data for legal reasons) I will usually delete your personal data on request. Objection. You may object to (i) my processing of some of your data based on my legitimate interests and (ii) receiving marketing messages after giving your express consent to receive them. In such cases, I will delete your personal information unless I have compelling and legitimate reasons to continue using that information or if necessary for legal reasons. Complaints. If you live in the EU and wish to raise concerns about my use of your data (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.
How you can contact me
Under EU data protection law, I, Daria Kuvshinova, am the data controller of your personal data. If you have any questions or concerns, you can contact me at firstname.lastname@example.org.