Do small sellers really have to do this? Here is a hint: basic identity data like names and addresses are included under these new regulations.
This is what Etsy says:
How to do it
"We only use customer information to fulfill orders. We do not store or use customer information for any other purpose. Information such as name, address, and email address is not stored on our computers. If and when required, we will communicate with you about your order status using the Etsy platform."Here is a longer one:
"We only use customer information to fulfill orders. Your personal information (name and address) as provided to me by Etsy will only be used by me as needed to provide my services. I may use your information to fulfil your order, to settle disputes, or to provide customer support. I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests (i.e. taxes) (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers or others. If and when required, we will communicate with you about your order status using the Etsy “convo” platform.
"I have no access to your payment account details: Etsy Payments and PayPal process your financial information independently of me.
"Your transaction information will be stored on the Etsy system as long as I have my store on Etsy or until Etsy deletes it. I will not spam you or solicit you using the information provided to me."Here is another template to consider.
To adjust shop policies, go to your public shop page. Find the orange "Edit shop" button. (It is right under your shop's star rating next to your shop avatar.) Scroll down, down, down to where it says "shop policies" on the left side. Opposite that, on the right side, is the button to edit your shop policies.
There are some unknowns in this process. For example, the EU law requires that companies provide a "reasonable" level of protection for personal data. But it does not specify exactly what “reasonable” means.
Those who sell in the European Union will need privacy policies beyond the scope of this blog post. (Thanks for noting that this blog post is for informational purposes only and is not intended to be legal advice.) Here is a blog post with more information.
Concerns over privacy policies have changed the landscape of online selling. It is wise for sellers to do their homework.