Privacy policy
This policy covers this website (emmasmapart.com) and EmmasMapArt Shop Sync, the private app we use to manage our own Etsy shop. Purchases themselves happen on Etsy, so Etsy's own privacy policy also applies to anything you do there.
Who we are
Emma's Map Art is an independent shop. We are responsible for the data described here. Contact: hello@emmasmapart.com.
Visiting this website
The site sets no cookies, runs no analytics and loads nothing from third parties: no ads, no tracking pixels, no external fonts. Like any web host, Cloudflare processes technical request data (such as IP address, browser type and the page requested) to deliver the site and protect it from abuse. We don't use that data to identify or profile visitors.
Data we read from Etsy
When the shop owner connects EmmasMapArt Shop Sync, Etsy lets it read and update information about our own shop only. For the personal data of Etsy members in that information, we act as a service provider to the seller and use it only to provide the app's service.
- Shop and listing data: our listings, prices, stock levels, shop sections and settings.
- Order data: for orders placed in our shop, the buyer's name, shipping address, the items ordered, personalisation notes and order status. We use this only to make and ship the order (including passing made-to-order prints to our print partner) and to handle returns or questions about it.
- Connection tokens: the access and refresh tokens Etsy issues to the shop owner, stored encrypted.
We don't get, and never ask for, buyers' payment details or anyone's Etsy password. We request only the minimum data the work needs.
What we use it for, and what we don't
We use it to fulfil orders you place with us on Etsy (the legal basis under the GDPR is performance of a contract) and to manage our own listings (our legitimate interest in running the shop).
We don't send it to advertising or marketing platforms, don't use it to send marketing, don't use it for analytics or to train AI models, and don't send buyers order, shipping or tracking messages ourselves; Etsy does that.
How long we keep it
- Freshness: listing details we show are never more than 6 hours older than on Etsy, and other Etsy information never more than 24 hours older.
- Order data: kept until the order is delivered and any return or question about it is settled, then deleted from our tools within 90 days. Etsy keeps its own record of the order.
- Listing and shop data: refreshed from Etsy whenever the app runs and removed when a listing is deleted or the connection is switched off.
- Connection tokens: kept while the connection is active and deleted as soon as the owner disconnects or revokes access on Etsy.
We never keep Etsy data longer than is reasonably necessary to do the work described here.
Who we share it with
We don't sell, rent, trade or otherwise transfer Etsy data, and we don't share it with third parties for their own use. Only these service providers receive data, and only what they need:
- Cloudflare hosts this site and the encrypted tokens.
- Our print partner makes made-to-order map prints. For those orders it receives the items ordered, any personalisation and the shipping name and address, so it can make and ship them.
- The shipping carrier needs your name and address to deliver the order.
How we protect it
All traffic is HTTPS only. Tokens are encrypted with AES-256-GCM before they are stored, and the key is kept separately as a secret. The app's admin pages need the owner's password. API credentials are never shared with other software or people.
If something goes wrong
If Etsy member data accessed through the app is compromised, or we suspect it is, we will notify Etsy and the affected seller within 24 hours of discovering it, tell the people affected as the law requires, and fix the cause.
Your rights
You can ask what data we hold about you, ask us to correct it, or ask us to delete it. Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California) you may have further rights, including the right to complain to your data protection authority. Email hello@emmasmapart.com and we will reply within 30 days. You can also manage your data through your Etsy account.
Children
This site and our shop tool aren't directed at children, and we don't knowingly collect data from them.
Changes to this policy
If we change how we handle data, we will update this page and the date at the top before the change takes effect.