Andrea Clement Artist
When I sell items online through my website and Etsy I take payments via PayPal and Etsy payments. Occasionally I receive enquiries and take custom orders via email, my website contact page, facebook/messenger, and direct messaging on Instagram and Twitter. This policy covers data collected through any of these platforms (and additionally section 5 shows where to find their privacy policies). I currently do not have a marketing mailing list or subscriber newsletter.
2. What information will I use and how will I use it?
If you place an order on etsy, I will have access to your name and postal address. I require these to fulfill your order. I take payments via PayPal and Etsy payments - I do not see your card/account details only how you paid eg: "Paid via Etsy Payments". The legal basis for collecting this data is “contractual”. I do not download or store this data anywhere myself. It is held for me on etsy and I do not have any control over how long it is held for. I do not use this data for anything other than fulfilling your order.
If you purchase an item outside of etsy, and pay for it using PayPal, I will have access to your name, postal address and email address. This information is provided by the PayPal system and is required to fulfill your order. The legal basis for collecting this data is “contractual”. I do not download or store this data anywhere myself. It is held for me on the paypal system and I do not have any control over how long it is held for. I do not use this data for anything other than fulfilling your order.
If you contact me with an enquiry about a custom item, or for any other reason, you may provide me with some/all of the following:- name, email address, postal address, phone number, as required to address your enquiry. The legal basis for collecting this data is “legitimate interest”. The data is held within the system used to make the enquiry. For email enquiries it will be held on the email server by my provider – Gmail – and also downloaded onto my desktop. My desktop is used only by me, and both my user account and the email account are password protected. For facebook/messenger enquiries, the data will be held on the facebook/messenger system and will not be downloaded or stored anywhere else by me. For enquiries received via Instagram direct messaging, the data will be held on the Instagram system and will not be downloaded or stored anywhere else by me. I would not normally delete these messages in case the enquiries are followed up at a later date, but I can do so, if requested. (see section 4 for how to request this). I will not use this data for any purpose other than addressing your enquiry.
My website is hosted by Wix. A standard Wix service is used to collect anonymous information about users on the site, for example the number of users viewing pages on the site, and to monitor and report on the effectiveness of the site. If you use the contact form on my website, Wix forward your message to me and I therefore will see your email address. I use this to respond to your message and do not download or keep your information for any other reason. I do not have control over how long Wix retain this information.
3. Who do I share your data with?
I do not share your data with anyone, unless legally required to do so, e.g. by the police, or HM customs and excise.
4. Your choices and rights
You have the right to know what information I hold about you, to correct that information and to request that the information be deleted. You have the right to restrict how that information is used and shared. If you are concerned about how your information is used, please contact me using the contact page.
You also have the right to complain to a supervisory authority if you think your data has been collected/used or shared inappropriately. In the UK, this is the ICO (ico.org.uk).
5. Links to privacy polices for third party data processors named within this document (all GDPR compliant)
facebook/messenger/instagram - https://www.facebook.com/about/privacy/update
Twitter - https://twitter.com/en/privacy