Your Data, Your Rights, Our Commitment
Last Updated: 8.03.2025
Who We Are
Welcome to Artisan Chest. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://artisanchest.com/ (the "Site"). We are committed to protecting your privacy and ensuring compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
Legal Basis for Processing Personal Data (GDPR Compliance)
We process your personal data based on the following legal grounds:
Legal obligation – when we need to comply with applicable laws.
Contractual necessity – when processing is necessary to fulfill an order.
Consent – when you agree to receive marketing communications or optional services.
Legitimate interest – to improve our services, prevent fraud, or analyze website performance.
What Data We Collect
We collect the following types of personal data when you interact with our website:
✅ Personal Identification Data – Name, email, billing/shipping address, phone number.
✅ Order and Payment Data – Purchase history, transaction details (processed via Stripe, PayPal).
✅ Technical Data – IP address, browser type, device type, operating system.
✅ Cookies and Tracking Data – Information collected via cookies (see "Cookies" section below).
How We Use Your Data
We use your personal data for the following purposes:
- To process and fulfill your orders
- To provide customer support and answer inquiries
- To manage and improve our website and services
- To send promotional emails (only with your consent)
- To comply with legal and tax obligations.
Who We Share Your Data With
We do not sell or rent your data. However, we share it with third-party service providers to fulfill your orders:
- Payment Processors (Stripe, PayPal) – to handle secure transactions
- Shipping Providers (USPS, FedEx, Deutsche Post, DHL) – to deliver your orders
- Anti-Spam Services – to protect against fraud and spam.
These third parties only receive the necessary data to perform their services and are required to comply with GDPR regulations
International Data Transfers
As we operate in both the USA and the EU, some of your personal data may be processed outside the European Economic Area (EEA). If data is transferred internationally, we ensure it is protected by:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Privacy Shield Framework (for US-based providers, where applicable)
Your Rights Under GDPR
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
- Right to Access – You can request a copy of the personal data we hold about you.
- Right to Rectification – You can ask us to correct inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten") – You can request the deletion of your personal data.
- Right to Restrict Processing – You can request that we limit how we process your data.
- Right to Object – You can object to processing based on legitimate interest.
- Right to Data Portability – You can request a transfer of your data to another service provider.
To exercise your rights, contact us via our Contact Form
Cookies
We use cookies to enhance your experience on our website.
- Essential Cookies – Required for site functionality.
- Analytical Cookies – Used to track website performance and visitor behavior.
- Marketing Cookies – Used for personalized ads (only if consent is given).
You can control cookie settings through your browser.
How Long We Retain Your Data
- If you place an order, we retain order details for at least 5 years to comply with tax regulations.
- If you leave a comment, the comment and its metadata are stored indefinitely.
- If you request account deletion, your data will be erased unless required for legal reasons.
Security Measures
We take data security seriously and implement the following safeguards:
- SSL encryption for secure transactions.
- Limited access to personal data (only authorized employees can access it).
- Compliance with PCI-DSS standards for payment security.
Returns & Refunds
We accept returns within 30 days of receiving your order. Once we receive the returned item, we will either issue a full refund or send a replacement, based on your preference.
Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page.
Contact Us
If you have any questions about this Privacy Policy or your data, you can contact us via our Contact Form