As a business, Shy Red Fox collects various personal data information through Etsy Orders and Conversations. This section of the policies describes what kind of data is processed, how is it stored and how it's used. By purchasing from Shy Red Fox you consent to me using your personal information in the ways described below.

Why does this policy exist? For one, to ensure that Shy Red Fox is compliant with the EU Laws and current personal data regulations. It’s also here to protects the rights of my customers and inform you about possible use of your data, when you interact with this Etsy store. This privacy policy is written in compliance with GDPR.

The type of data Shy Red Fox has access to:
• First and last name
• Shipping address
• Address email
• Public information from your Etsy profile
• Usage data (geographical location, IP address, browser type etc.)

The data will be processed for following reasons:
• Order fulfillment
• Communication
• Legal reasons
• Analytics

Third party sharing:
Some of your information is processed by third parties on my behalf. The companies are listed below along with a legal basis for this type of processing.
• Analytics: Google Analytics
Legal basis for a disclosure of this data is the company’s legitimate interest – in this case, the sharing of data is necessary to maintain and monitor the shop’s performance and improve it’s functionality.
• Shipping providers: USPS, UPS, FED EX
Legal basis for a disclosure of this data is fulfillment of the Sales Agreement between the Seller and Buyer.
• Accounting Services: Intuit Quickbooks
Legal basis for a disclosure of this data is the company’s lawful obligation, namely accounting and record keeping for tax purposes.
• Email Marketing: MailChimp
Legal basis for a disclosure of this data is the user’s consent – if you sign up for my email subscription, you will be asked to agree for the use of your data. Sign up is not necessary to place an order. Purchases in the Shy Red Fox shop do not result in email marketing opt in. It's voluntary sign up only, so I can communicate about what's happening in my shop to those who are interested in the information.
• Payment processing: Etsy Direct Checkout, Square (if sales are in person)
Legal basis for a disclosure of this data is the Sales Agreement between the Seller and Buyer. I will only disclose data that is necessary for the purposes of payment processing, refunds or complaints and queries related to these payments. If you’re unsure about how the data is stored by these payment services, I encourage you to visit their websites at links above an read more about the measures they take to protect your personal data.
• Additionally, I may disclose some of your personal data to insurers and professional advisers, as long as it’s necessary, for example to manage risks, receive professional business advice or proceed with legal claims in or outside court.

Any data shared with third party is forwarded using encrypted internet connection (SSL). The service providers working with Shy Red Fox are GDPR compliant. Physical copies of your personal data (for example shipping labels, invoices) are stored in my studio in Sioux Falls, SD, USA and destroyed as soon as no longer required.

The information I keep or delete:
Your personal data is not kept indefinitely, it's only stored as long as necessary for legal reasons or for order fulfillment. US law requires me to store any transactional information at least until the end of the calendar year plus 7 full years.
In some cases it's not possible to specify how long your data will be kept. The period of retention will be set based on the company’s legal obligations and legitimate interests – such as maintenance of this shop.
I may also keep your personal records longer than specified, if it’s to protect your vital interests or the vital interests of another natural person.

Your rights:
You have the right to review and correct your personal data.
The admin of your personal data on Etsy is Etsy itself. If you'd like to remove your personal data from Etsy, please contact support.
You can also request that I delete all records of your personal data stored by Shy Red Fox. I’m happy to honor the request and will do my best to erase your information, whenever possible, however there are certain situations, when I’m not able to delete all of your information, due to legal obligations. For example, if you have previously placed orders in the Shy Red Fox shop, I may be required to keep your personal data for tax purposes.