PRIVACY POLICY
I am committed to processing personal information about customers in a way that is safe, secure and non-invasive. Under the EU General Data Protection Regulation (GDPR) 2018 this document sets out what data I collect and store when you buy from me, why I collect it, who the information is shared with and the rights of the customer to have the information changed or deleted.

WHAT INFORMATION IS COLLECTED:
Name and address
Email

I have no access to your debit/credit card details as this information is collected separately by Paypal or Etsy's payment processor, depending on the payment method you chose. Your information will be stored on the Etsy system as long as I have my store on Etsy or until Etsy deletes it.

WHO THE INFORMATION IS SHARED WITH:
I share your personal information for very limited reasons and in limited circumstances, as follows:
Etsy - I share information with Etsy as necessary to provide you my services and comply with my obligations under both the Etsy Seller Policy and Etsy Terms of Use.
Postal services - I will share your name and address with these third parties, but only to the extent necessary to perform these services.
Complying with the law - (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; (d) protect the rights, property, and safety of my customers or others

WHY AND HOW THE INFORMATION IS COLLECTED:
Your personal information, provided to me by Etsy, will only be used by me, as needed to fulfill your order, to communicate about customs orders over email or through Etsy's messaging system, to provide customer support or to settle any disputes should they arrive.

KEEPING PERSONAL INFORMATION SECURE:
I am committed to keeping customer's personal information secure. It will not be sold, inappropriately shared or accidentally used. All technology in use by me is kept up to date with current security software and is not made available for use by anyone else.

ACCESS TO PERSONAL INFORMATION:
You have the right to know what personal data I hold about you and to ask for that data to be changed or deleted as long as it does not interfere with the obligations of the business, e.g. submitting taxes. You also have the right to complain to your if local data protection authority if you believe there is a problem with the way I handle your data.

HOW LONG PERSONAL INFORMATION IS KEPT:
Under UK law, business records must be kept for seven years. In the case of invoices and receipts, customer information is also included. This information will be securely disposed of as soon as practical

For purposes of EU data protection law MyCottonHouse is the data controller of your personal information. If you have any questions or concerns, you may contact me at mycottonhousemail@gmail.com