Privacy Policy

This Privacy Policy governs the collection, usage, and protection of your data when you engage with my personal website, particularly when acquiring my unique art dolls. Please be aware that this policy doesn't extend to third-party operations beyond my control. Now, let's get into the specifics:

To process your order, I'll need essential details such as your name, email, shipping address, and payment info. For custom orders, you're welcome to share more preferences directly. Rest assured, your data is secure with me.

I employ various legal grounds to collect, utilize, and share your data, including:

1. Providing services, including order fulfillment, dispute resolution, and customer support.
2. With your explicit consent, like when subscribing to my mailing list (which you can withdraw at any time).
3. To meet legal obligations, court orders, or legal claims, such as retaining purchase data as required by tax law.
4. For legitimate interests, not infringing on your rights, to enhance my services and adhere to relevant policies.

Customer information is pivotal, and I handle your personal data with care:

1. I may share information with third-party service providers (e.g., shipping companies) as necessary.
2. In case of business transfers, your information may be disclosed in accordance with the law.
3. I'll collect, use, retain, and share data as required: to respond to legal processes, enforce agreements, prevent fraud or illegal activities, and protect rights, property, and safety.

I typically retain your data for 4 years to comply with legal and regulatory requirements, resolve disputes, and enforce agreements.

I use third-party hosting services located in the US and other regions, which may involve transferring your data to locations with different data protection laws. For data transferred outside the US, I rely on the Privacy Shield framework, considering Google Cloud's certification.

If you're in specific regions, like the US, you have rights regarding your data:

1. Access: You can request your data and a copy by contacting me through the provided contact details.
2. Modify, Limit, Delete: You can request changes, restrictions, or deletion of your data, except where legal obligations dictate otherwise.
3. Object: You may object to data processing based on my legitimate interests or receiving marketing messages, and I'll delete your data unless required for legal purposes.

For EU and US data protection compliance, I, Isabel Anderson, am your data controller. Feel free to reach out to me at isabelandersondolls@gmail.com with questions or concerns.