GDPR and Crimson Moon
The General Data Protection Regulation (GDPR) is a new, EU-wide privacy and data protection law. It calls for more granular privacy guardrails, more nuanced data protection agreements, and more consumer-friendly and detailed disclosures about a buisnesses privacy and data protection practices.

WHAT PERSONAL DATA IS HELD BY MYSELF CRIMSON MOON CSP
- Customer name, address, phone numbers and email address. 
- Order information including product description and cost.

PERSONAL DATA I DO NOT HOLD THAT ARE HELD BY THIRD PARTIES FOR LEGITIMATE REASONS
- I use third parties to collect payment which are currently PayPal and Stripe, I do not have access to you credit cards, debit cards, bank details, or other personal banking or finacial details 
- Paypal and Stripe both adhere to strict laws and regulations to protect your personal Data
- I have passwords that no third partied have access to for both my stripe and paypal accounts
Paypals Data Protection Policy
https://www.paypal.com/en/webapps/mpp/ua/privacy-full
Stripe Data Protection Policy 
https://stripe.com/guides/general-data-protection-regulation

THE PERSONAL DATA WE COLLECT WILL BE USED 
- To fulfil your order and to comply with my obligations under the Etsy Seller and Wix Policy and Terms of Use.
- To provide customer support 
- To settle disputes

CONSENT 
- By purchasing from Crimson Moon you have given consent for us to hold personal data for a time which is deemed nessesary,. 
- We hold records for 6yrs to fulfil our obligations to UK tax laws and obligations.
PASSING ON YOUR INFORMATION 
Under no circumstances do we pass your personal details on to anyother buisnesses or organisations for marketing purposes. We do share with the above mentioned legitimate third parties to be able to take payment, process and to fulfil orders (Paypal and Stripe). We may also be chosen by HMRC for a full company audit which will include information of all orders for tax purposes which includes customer invoices for a period of 5yrs prior to audit.
CONTACTING YOU 
- We may have to contact you for information to fullfil your order 
- Customers will only be contacted for marketing purposes to those who have chosen to sign up to our mailing list on the Crimson Moon website at
https://www.crimsonmooncsp.com/
I will only send you information relating to the Crimson Moon website, products, sales and exclusive discount codes that will be limited to a maximum of 12 per annum
YOUR RIGHTS 
Our customers have the right to know that their personal data is processed by us and how personal data about them is being processed, and what the data processing operations are.
Customers can request we withdraw held information at any time with legitimate and compelling reasons to do so such as for direct marketing purposes. However legally some information must be held for a minimum of 5yrs

Etsy - I share information with Etsy as a third party. 
Wix - I hold information on our website which is hosted by Wix
Facebook - Information you give give to me will not be shared 
Instagram - Information you give to me will not be shared 
Paypal - Payment processing 
Stripe - Payment Processing

For any further information please contact me at 
jan@crimsonmooncsp.com