To the Nines Jewelry takes the privacy of its customers very seriously. This policy explains how and when I collect, use, and share your information when you purchase from my shop or contact me through Etsy.

This Privacy Policy does not apply to third party sites or parties affiliated with Etsy which I do not control. You can refer to Etsy's own privacy policy to learn more about its privacy-related practices.

Information I Collect:

In order for me to fulfill your order, you will need to provide me with certain specific pieces of information, such as your name, email address, postal/mailing address, payment information, and details on the item that you are purchasing. You may also choose to provide me with additional information regarding your order when contacting me directly.

Why I Need Your Information & How It is Used:

1. To fulfill your order or provide services which you have requested

2. To provide customer service (ex: settle dispute, respond to questions or concerns regarding your order)

3. When you have provided your affirmative consent to receive marketing information (such as my Jewelerista Club Email List), which you can revoke at any time

4. When necessary, to comply with a legal obligation or court order (ex: responding to a legal claim or compiling/reporting information for tax purposes)

5. For the purpose of my legitimate interests as necessary when those interests are not overriden by your your rights and interests (ex: to improve my services or compliance with the Etsy Seller Policy and Terms of Use)

Information Sharing and Disclosure:

I share your information only in a limited number of circumstances, which include:

1) Etsy (to comply with Etsy Seller Policy and Terms of Use and provide you with my services)

2) Service providers - I use trusted third parties to perform functions relating to my shop, such as shipping/delivery services. I only share your information with these parties to the extent necessary in order to provide my shop services.

3) Business transfers - If I should sell or merge my business in the future, I may disclose your information during this transaction, but will do so only to the extent required or permitted by law.

4) Compliance with laws - I may use, retain, or collect your information only as necessary to respond in a legal process or address government requests, enforce my agreements, terms and policies, prevent, investigate or address fraud or illegal activity, security, or technical issues, or protect the rights, and safety of my customers or others.

Retaining Information:

I will retain your personal information only as long as it is necessary to provide you with my services and as outlined in my privacy policy. However, I may also be required to retain this information to comply with legal or regulatory requirements, to disputes, and to enforce my agreements. I generally keep your data for a period of 5 years.

I may store and process your information through third-party hosting services in the US and other jurisdictions that have a high level of secuity. I may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction. If I transfer information about you outside of the EU, I rely on Privacy Shield as the legal basis for the transfer.

Depending on the circumstances, you may have the following rights regarding your information:

Access. You may have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below.

Change, restrict, delete. You may also have rights to change, restrict my use of, or delete your personal information. Absent exceptional circumstances (like where I am required to store data for legal reasons) I will generally delete your personal information upon request.

Object. You can object to (i) my processing of some of your information based on my legitimate interests and (ii) receiving marketing messages from me after providing your express consent to receive them. In such cases, I will delete your personal information unless I have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.

Complain. If you reside in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.

For purposes of EU data protection law, I, Kristi Waters, am the data controller of your personal information. If you have any questions or concerns, feel free to contact me at kristi@totheninesjewelry.com.