📜 Privacy Policy

Welcome to my little corner of the forest — your trust means everything to me. This Privacy Policy explains how I collect, use, and share your information when you purchase something, reach out to me, or wander through enchantedartstudio.com and any related sites.

Your privacy is sacred here. 🌙✨ Please know this policy doesn’t cover any third-party practices I don’t own or control.

🌙 Information I Collect

To bring a piece of my enchanted world to your doorstep, I’ll need a few details from you — like your name, email address, shipping address, payment information, and the details of what you’re ordering.

You might also choose to share extra information if you reach out to me directly — and that’s always kept safe and handled with care.

🌙 Why I Need Your Information & How I Use It

I rely on a few important reasons (called “legal bases”) to collect, use, and share your information:

• To fulfill your order — I use your information to create, package, and deliver your piece, help with any questions, and resolve any issues that may arise. 🌿

• When you’ve given your consent — like when you sign up for my mailing list (which you can unsubscribe from anytime). ✉️

• To comply with legal obligations — such as keeping records of your purchases if required by tax law or court orders. 🗝️

• When it’s necessary for my legitimate interests — like providing and improving my services, but never in a way that overrides your rights or comfort.

🌙 Information Sharing & Disclosure

Your trust means the world to me, and I only share your information when it’s truly needed:

• Service Providers. I may work with trusted third-party helpers — like delivery companies — to make sure your art arrives safely. They only get the information needed to perform their part of the magic. 🌿✨

• Business Transfers. If I ever sell or merge my business, I may share your information as part of that process, but only as allowed by law.

• Compliance with Laws. I may collect, use, keep, or share your information if I believe in good faith that it’s needed to:

(a) respond to legal requests,

(b) uphold my agreements,

(c) prevent or investigate fraud or security issues, or

(d) protect the rights, safety, and property of my customers — or others. 🗝️

🌙 Data Retention

I keep your personal information only for as long as needed to provide my services and as described here in this Privacy Policy. Sometimes, I may also need to hold onto certain details to meet legal or regulatory requirements, resolve any disputes, or uphold my agreements.

I generally keep your data for about 2 years, and then it’s gently released back into the forest. 🍃✨

🌙 Transfers of Personal Information Outside the USA

Sometimes I may store or process your information through trusted third-party hosting services in the US or other countries. 🌍✨ This means your personal information could be transferred to a place with different data protection or government rules than where you live.

If I’m ever required to transfer your information outside the US, I rely on Privacy Shield as the legal basis for doing so — for example, Google Cloud is Privacy Shield certified, which helps keep your information safe and sound wherever it travels. 🗝️💫

🌙 Your Rights

If you live in certain places — including the USA — you have important rights when it comes to your personal information. While some of these rights apply broadly, a few may apply only in special cases. Here’s what they mean:

• Access. You can request to see and receive a copy of the personal information I hold about you. Just reach out using the contact details below. ✨

• Change, Restrict, Delete. You may have the right to change, limit, or ask me to delete your personal information. (Unless there are rare circumstances where I must keep it for legal reasons, I will gladly honor your request.) 🌙

• Object. You can object to me processing your information for my legitimate interests or receiving marketing messages from me after you’ve given consent. If you do, I’ll stop using your information unless there are compelling reasons I’m legally required to keep it.

• Complain. If you ever have concerns about how I handle your information, you have the right to reach out to your local data protection authority. 🗝️