This is the privacy policy of Rokking, an online business based in Plano, TX, USA, selling rocks and minerals on Etsy since 2014. The owner is Jody Roberts of Plano, TX. The business is a sole proprietership. Rokking sells worldwide wherever it is legal to sell.

This Privacy Policy describes how and when Rokking (the "Business") can collect, use, and share information when you purchase an item, contact the Business, or otherwise use the Business's services through Etsy.com or its related sites and services.

This Privacy Policy does not apply to the practices of third parties not owned or controlled by the Business, including Etsy or any third party services you access through Etsy. You can reference the Etsy Privacy Policy to learn more about its privacy practices.

1. Personal information collected by the Business

To fulfill a buyer's order, the buyer must provide certain information (which the buyer authorized Etsy to provide to the Business), such as buyer name, email address, postal address, payment information, and the details of the product ordered. Buyer may also choose to provide the Business with additional personal information (for a custom order for stone polishing, for example), if buyer contacts Business directly.

2. Legality of collecting and sharing personal information

Why your information is required and how it is used

The Business requires your information:
- to fill your order (postal service requires a name and address)
- as needed to support buyer as a customer, answer questions, and maintain a record of conversations held
- to settle disputes
- when buyer requests subscription to a mailing list or requests additional information.
- to comply with legal orders or to cooperate with government or law enforcement agencies
- as required for tax and legal business reporting
- as necessary for the purpose of legitimate Business interests, if those legitimate interests are not overridden by buyer's rights or interests, such as 1) providing and improving services provided to Buyer. 2) Compliance with the Etsy Seller Policy and Terms of Use. Business uses buyer information as necessary to comply with obligations under the Etsy Seller Policy and Terms of Use.

Buyer may request at any time to remove personal information or to revoke use of personal information for marketing purposes (unsubscription) for which buyer has previously provided affirmative consent.

Information Sharing and Disclosure

The Business recognizes the value of buyer and customer informations and the importance of protecting privacy.
Buyer information is shared only for limited and specific reasons as follows:

1. Etsy. Business shares information with Etsy as necessary to provide services and comply with seller obligations under both the Etsy Seller Policy and Etsy Terms of Use.
2. Service providers. Business engages certain trusted third parties to perform functions and provide services to the Business's shop operations, such as delivery companies. Business may share buyer personal information with these third parties, but only to the extent necessary to perform specific services provided by and contracted with the Business.
3. Business transfers. If the Business is sold or merged, the Business may disclose buyer information as part of that transaction, only to the extent permitted by law.

4. Compliance with laws. Business may collect, use, retain, and share buyer information if there is a reasonable need in good faith to: (a) respond to legal process or to government requests; (b) enforce Business's agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of Business's customers, or others.

Data Retention

Business may retain buyer personal information only for as long as necessary to provide services and as described in this Privacy Policy. Business may be required to retain this information to comply with legal and regulatory obligations, to resolve disputes, and to enforce my agreements. Transaction information, including buyer name and address, conversation records of custom orders, notes and other information exchanged between Business and buyer, is maintained as a permanent journal for the life of the Business.

Transfers of Personal Information Outside the EU

Business may store and process buyer information through third-party hosting services in the US and other jurisdictions. As a result, Business may transfer buyer personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction.

Your Rights

Buyers residing in certain territories, including the EU, have specific rights in relation to their personal information. While some of these rights apply generally, certain rights apply only in certain limited cases.

- Access. Buyer may have the right to access and receive a copy of the personal information Business holds about buyer by contacting the Business using the contact information below.
- Change, restrict, delete. Buyer may also change, restrict Business's use of, or delete personal information. Unless an exceptional circumstance prevails, such as a legal requirement, Business will generally delete buyer's personal information upon request. "Deletion" is taken up as 1) destroying any written, paper, or physical representation of buyer information, such as shredding, 2) deleting files or data in files representing personal information, which is the deletion process as defined by the computer's operating system to normally delete files. If necessary, Business will contact Etsy to comply with buyer's request to change, restrict, or delete the information.

- Object. Buyer may object to (i) Business's processing of any buyer information based on Business's legitimate interests and (ii) receiving marketing messages from Business after providing buyer's express consent to receive them. In such cases, Business will delete buyer personal information unless needed for legal reasons.

- Complain. EU buyers who wish to raise a concern about Business's use of buyer information (and without prejudice to any other buyer rights), buyer may complain with buyer's local data protection authority.

How to Contact Business Owner

For purposes of EU data protection law, I, Jody Roberts, am the data controller of buyer's personal information. If buyer has any questions or concerns, I may contacted at astrojr1@tx.rr.com. Alternately, buyer may send postal mail at:

Jody Roberts
6005 Pinto Circle
Plano, TX 75023
United States