1// The information I collect

To process your order, you must provide me with certain information (which you have authorized Etsy to transmit to me), including your name, email, mailing address, payment details, and the description of the product you are ordering. You can also decide to provide me with some additional personal information (for a custom illustration order for example), by contacting me directly.

2// Why I need your information and how I use it

I rely on a number of legal bases to collect, use and share your information, including:

- to provide you with my services, for example when I use your information to process your order, resolve a dispute or provide customer service;
- when you have given your explicit consent, which you can revoke at any time;
- if necessary, in order to comply with a legal obligation, a legal ruling or in connection with a legal request, such as, for example, keeping information about your purchases in the context of tax legislation; and
- if necessary, to serve my legitimate interests, in the event that these legitimate interests are not invalidated by your rights or interests, such as
1) provide and improve my services.
I use your information to provide the services you have requested and in my legitimate interest to improve these services;
2) compliance with the Seller’s Rules and the Etsy Terms of Use. I use your information, if necessary, to comply with my obligations set out in the Seller’s Rules and the Etsy Terms of Use.

3// Information sharing and dissemination

Information about my clients is important to my business. I only share your personal information for a very limited number of reasons, as well as in a limited number of circumstances such as:

- Etsy. I share your information with Etsy when necessary to provide you with my services and to comply with my obligations set out in the Seller’s Rules and the Etsy Terms of Use.
- Service providers. I use certain third parties that I trust to carry out certain actions or provide certain services for my shop - for example, transport companies.I may have to share your personal information with these third parties, but only those that are essential to the performance of these services.
- Transfers of activity. If I sell my business or merge it with another one, I may have to disclose your information in this transaction but only to the extent permitted by law.
- Compliance with legislation. I may have to collect, use, store and share your information if I believe in good faith that it is necessary and reasonable to: (a) respond to a legal process or state request; (b) enforce my agreements, my terms or regulations; (c) prevent, investigate or manage any fraud or other illegal activity, or any technical or security issues; or (d) protect the rights, property and security of my clients or others.

4// Retention of data

I retain your information only as long as necessary to provide you with my services and for the purposes set out in my privacy policy. I may also have to retain this information to comply with legislative and legal obligations, resolve disputes and enforce my commitments. I usually keep them for 4 years.

5// Transfers of personal information outside the EU

I can potentially store and process your information via third-party hosting providers located in the United States or other countries. It may therefore happen to me to transfer your personal information to a jurisdiction where the legislation regarding data protection and government surveillance is different from that of your country. If I have to transfer your personal information outside the European Union, I rely on the Privacy Shield (Privacy Shield) as the legal basis for this, with Google Cloud benefiting from the Privacy Shield certification.

6// Your rights

If you are a resident of certain territories, including the European Union, you have certain rights regarding your personal information. Some of these rights apply generally, and others only in limited cases. These rights are described below:

- Access. You may have the right to access the personal information I hold about you and to receive a copy by contacting me. You will find my contact details below.

- Modify, restrict, delete. You may also have the right to modify your personal information, restrict my use of it or delete it. Apart from exceptional circumstances (for example, if I had to keep data related to my shop for legal reasons), I will generally delete your personal information upon request.
- To oppose. You may object to 1) that I process some of your information in the course of my legitimate interests and 2) to receiving marketing messages from me after explicitly agreeing to receive them.

In these specific cases, I will delete your personal information unless I have legitimate reasons to continue using it, or in cases where it is necessary for legal reasons.
- Complaining. If you are a resident of the European Union and you wish to express concern about my use of your information (and without infringing on other rights you may have), you can do so with your local data protection authorities.

// How to contact me

Within the framework of the European Data Protection Act, I, the undersigned Charline Moreau, am the data controller with regard to your personal information. If you have any questions or concerns, please contact me at my email cmoreauart@gmail.com. You can also send mail to:

Charline Moreau, rue des logis, 44430 LA REMAUDIERE, FRANCE