How to write a privacy policy for your Etsy store
Creating a privacy policy is all about telling customers how and why you're going to use their personal information.
Because your privacy policy is a legal document. It's important to seek professional legal advice to ensure your policy is as accurate and transparent as possible.
Not every Etsy show works the same way, and you'll need to check which privacy laws apply to you based on your shop and depending on where you operate. With that said, a standard Etsy privacy policy should disclose the following information:
1. The types of personal data you collect from customers and visitors to your store
“Personal data” can include information such as names, email addresses, billing information, and purchase history. You should also explain why your business must collect each category of data listed in your Etsy privacy policy.
2. How you collect Etsy customer data
As a store owner, you primarily collect customer data when a buyer makes a purchase. Cookies are another common data collection tool used on websites and via third-party platforms like Google Analytics. If you have Google Analytics installed on your Etsy store, this should be disclosed in your privacy policy.
3. How you use any personal data collected by your business.
From fulfilling orders to communicating with buyers, you must clearly explain to customers how their data is being used or shared by your shop.
If you allow third-party services such as Erank, Marmalead, Mailchimp, or Mailfold to collect information about your customers, you must disclose how they use this data and ensure they can provide the same level of data protection as promised in your own privacy policy.
4. How customers can manage data collected about them.
Your policy should explain to users their rights around their personal data.
If a customer contacts you to access, correct or delete personal information held by Etsy, you may contact Etsy at Etsy.com/help for assistance, or request that the customer send a request directly to Etsy.
Major privacy laws such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) each contain a list of rights that citizens based in the EU and California are entitled to.
5. Business Transfers
If your business is bought by or merged with another company, you should explain how existing customers’ information will be handled and who will have ownership of the data.
6. Contact Details
Include your contact details so that customers can get in touch with you about any queries they may have about their data or privacy.
7. The effective date of your policy
Whenever your policy is updated, be sure to update the date your amended policy takes effect.
Building an Etsy privacy policy isn’t easy, but nailing your privacy and legal obligations early will help to reassure your customers and allow you to stay focussed on growing your business without worry.
Besides your responsibility to the law, maintaining the privacy and security of your customers' information is just good business.
Friendly disclaimer: This information is for educational and informational purposes only. The content should not be construed as legal advice. It is not intended to create, and receipt of it does not constitute a lawyer-client relationship. Alura.io disclaim all responsibility for any and all losses, damages, or causes of action that may arise or be connected with the use of these materials. Please consult a licensed lawyer in your area with specific legal questions or concerns.