Privacy policy

Contact

For privacy questions or to exercise your rights, email [email protected].

Visiting this website

This static website has no account registration, newsletter, contact form or checkout. Its source files do not include advertising trackers, analytics scripts or non-essential cookies. Purchases take place on Etsy, not on this website.

The hosting and network providers may process normal technical logs such as IP address, requested page, time, browser information and errors to deliver and protect the site. The legal basis is the legitimate interest in running a secure, reliable website. Log retention and any international processing depend on the hosting provider’s arrangements; contact me if you need details. I do not use these logs for advertising.

Orders and messages through Etsy

When you buy or contact me through Etsy, I receive the details Etsy makes available to sellers: your name, email address, order details and messages, together with any names, dates or other personalisation you provide. All products are digital downloads; I do not need a postal address to fulfil them.

I use this information to fulfil orders, create personalised files and answer questions (performance of a contract, or steps at your request before one); to keep tax and accounting records (legal obligation); and to resolve disputes and protect the business (legitimate interest).

Sharing and international processing

I do not sell your personal information. Orders, payments and buyer messages are handled through Etsy. Visiting this website does not create an Etsy order or send your order details to Etsy. If you follow an Etsy or Instagram link, that service handles your visit under its own policy.

Etsy acts under its own privacy terms and may process data outside the EEA using the safeguards described in Etsy’s privacy policy. Website delivery also involves hosting and network providers as described above.

How long information is kept

I keep order and accounting records for six years to meet Irish tax requirements, then delete them unless a longer legal requirement applies. Other correspondence and personalisation working files are kept only as long as necessary to fulfil the order, provide support or resolve a dispute. Technical logs follow the hosting provider’s retention arrangements.

Your GDPR rights

Depending on the circumstances, you can request access, correction, erasure, restriction of processing or a portable copy of your data. You may object to processing based on legitimate interests. Some records must be retained for legal reasons even if you ask for deletion. Contact me using the email above; GDPR requests are normally answered within one month.

You may complain to Ireland’s Data Protection Commission if you are unhappy with how your information is handled.

Go raibh maith agat,
James · CelticwonderDesign