A note about privacy…
When we talk about sharing your personal information, please know that protecting your privacy is very important to me! To be as transparent as possible, please note that I may share your personal information for very limited reasons and in very limited circumstances as follows: I share information with Squarespace as necessary to provide you my services (fulfilling your order!) and to comply with my obligations under Squarespace policies. I use certain trusted third parties to perform functions and provide services to my shop (primarily shipping companies). I share the minimal amount of information with these parties, and only as necessary in order for me to perform my services. I may collect, use, retain and share your information if I have a good faith belief that it is reasonably necessary to respond to legal process or government requests; enforce my agreements, terms and policies; prevent, investigate and address fraud or other illegal activity, security or technical issues; and to protect the rights, property and safety of my clients or others. I retain your personal information only as long as necessary to provide you with my services, as described above. I may be also required to retain certain information to comply with my legal and regulatory obligations. I generally keep your data for the following time period: 7 years. I may store and process your information through third-party hosting services in the US and other jurisdictions. This means that I may transfer your personal information to a jurisdiction with different data protection and government surveillance laws.
When accessing information about you outside of the EU, I rely on Privacy Shield as the legal basis for my access, as Google Cloud is Privacy Shield certified. If you are one of my friends from the EU (hi there!), you have a number of rights related to your personal information and privacy. While some of these apply generally, certain rights apply only in limited cases: You may have the right to request and receive a copy of the personal information that I hold about you by contacting me using the information below. You may also have the right to change, restrict my use of, or delete your personal information. Other than cases where I am required to store data for legal reasons (such as taxes!), I will happily delete your information at your request. You can object to my processing some of your data based on my legitimate interests as a shop owner, and you can object to receiving marketing messages from me any time after you first consent to receive them. Again, I will delete your personal information unless I have compelling and legitimate grounds to use the information, or I need it for legal purpose. Lastly, if you reside in the EU and you wish to raise a concern about the ways that I use your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority. For the purposes of EU data protection law,
I, Kristin Field, am the data controller of your personal information. If you have any questions or concerns, please contact me at firstname.lastname@example.org.