What you need to know about GDPR and Etsy

GDPR and Etsy, what’s the hype all about?  Anyone in the blog world has seen “GDPR” plastered all over everything for the last few months but did you know that GDPR may also apply to your Etsy shop? It’s a real and serious thing and if it applies to your Etsy shop you MUST comply. Good news is I’m going to help you figure out if your Etsy shop needs to comply and what steps you need to take if it does.

First of all, what is GDPR (General Data Protection Regulation)?

The GDPR is a regulation for governing data privacy in the EU (European Union). Very simply put this give members of the EU much more control over how their private data (IP Address, Email Address, Personal Info) is used online and who it is shared with. GDPR is a GOOD thing and most countries are moving toward something similar to protect their citizens from internet predators.

 

GDPR and Etsy, does it effect you?

Well, maybe yes and maybe no but before we get stated I want to let you know that I am not an attorney and you should always seek legal advice for major business dealings, which this is. Okay, so here’s the skinny; If you live in the US or Canada and ONLY sell to the US and or Canada and you DO NOT use Google Analytics (or any other 3^rd party analytic software) to collect data or email addresses from your visitors then you most likely will not have to make any GDPR compliant changes to your Etsy shop. Etsy absolutely does collect this data but I assure you, they are now GDPR compliant and you don’t have to worry about the data they collect.

Even if you do not have to comply with GDPR in your Etsy shop, you should still update your Shop Policies as more and more countries are requiring stricter data retention guidelines. Read this article from Etsy for a copy and paste privacy policy you can use in your shop and more info on GDPR and Etsy straight from Etsy themsleves.

Regardless of where you live, if you use Google Analytics or any other third party software to collect analytic data and or emails then you must comply with GDPR in your Etsy shop.  If you live in any of the 28 EU countries or any of the 3 additional member countries included in the European Economic Area or you sell to any of these areas (including digital downloads) then GDPR definitely applies to your Etsy shop and you must become GDPR compliant. For a list of the EU and EEA countries, click here.

 

How do I become GDPR compliant in my Etsy Shop?

The first thing you need to do to become GDPR compliant is to update your shop policies.  Check out this article from Etsy on how to do that. You can even copy and paste the data into your shop policy and just change the information as needed to fit your specific uses. Once you’ve filled out your new privacy policy, follow it. If someone asks you to delete their information, just delete it and send them verification that you’ve done so. Simple as that.

 

Although GDPR and Etsy sounds complicated and hard to follow, in reality it’s pretty simple. If you run an above board shop then you really have nothing to worry about. Let people know how you will be using their personal information (and then actually use it that way). Don’t use someone’s info without their permission and most certainly don’t sell their info to a 3^rd party company.

 

There are some other really great articles on GDPR from Christine at Cutting for Business. She is ON HER GAME when it comes to the legal stuff. I highly recommend you check them out.

The GDPR and Your Etsy Shop: How to Make it Compliant

The GDPR for Craft Businesses

 

 

[yikes-mailchimp form=”2″ title=”1″ description=”1″ submit=”sign me up!”]