Etsy Privacy Policy Generator

Free tool

The policy updates as you type.

Your shop

Shop name

Owner or businessWho runs it

Contact emailFor requests

Mailing addressOptional, shown in policy

Where you are basedSets the law

Effective date

Keep order data forCheck tax rules

What your shop does

Ships with a carrierUSPS, Royal Mail, UPS, DHL and similarMakes personalized itemsBuyers send names, text or photosCollects details off EtsyOwn website or mailing list signupSends marketing emailsNewsletters and offers, with opt-inUses buyer emails for ad remarketingFacebook or Google audiences, with consentRuns Etsy Ads or Offsite AdsPromoted listings on and off EtsyUses website analyticsOn your own site; EU visitors need a cookie bannerOffers items to EU or UK buyersAny listing that ships there; adds GDPR and UK GDPR wording

Services you use

Named in the policy as third parties that handle buyer data.

Your policy

Replace the [bracketed] placeholders before you publish.

[Shop name] Privacy Policy

Last updated [Effective date].

About This Policy

This Privacy Policy describes how and when [Shop name] ("I", "me", "my") collects, uses, and shares information when you purchase an item from [Shop name] ([Shop URL]), contact me, or otherwise use my services through Etsy.com or its related sites and services. [Shop name] is run by [Your name or business name].

You agree that by purchasing an item from [Shop name] or otherwise interacting with [Shop name], you have read, understood, and agree to be bound by all of the terms of this Privacy Policy. If you do not agree, you must leave [Shop name] immediately.

I may change this Privacy Policy from time to time. If I make changes, I will notify you by revising the date at the top of the page. When you buy from me, Etsy's receipt e-mail includes a copy of my shop policies as they were at the time of purchase.

This Privacy Policy does not apply to the practices of third parties that I do not own or control, including Etsy or any third party services you access through Etsy or through [Shop name]. You can reference the Etsy Privacy Policy (etsy.com/legal/privacy) to learn more about Etsy's privacy practices.

Additionally, I will make every reasonable effort to inform you when I interact with third parties with your information; however, you are solely responsible for reviewing, understanding, and agreeing to or not agreeing to any third-party privacy policies.

Information I Collect

To fulfill your order, you must provide me with certain information (which you authorized Etsy to provide to me), such as your name, e-mail address, postal address, payment information, and the details of the product that you're ordering. You may also choose to provide me with additional personal information from time to time if you contact me directly.

Why I Need Your Information and How I Use It

I collect, use and share your information in several legally-permissible ways, including:

As needed to provide my services, such as when I use your information to fulfill your order, to settle disputes, or to provide you with customer support;
When you have provided your affirmative consent, which you may revoke at any time, such as by signing up for my mailing list or to receive notifications from me;
If necessary to comply with a court order or legal obligation, such as retaining information about your purchases if required by tax law; and
As necessary for my own legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as (a) providing and enhancing my services; and (b) compliance with the Etsy Seller Policy and Etsy Terms of Use.

Information Sharing and Disclosure

Protecting my customers' personal information is crucially important to my business and something I take very seriously. For these reasons, I share your personal information only for very limited reasons and in limited circumstances, as follows:

With Etsy. I share your information with Etsy as necessary to provide you my services and comply with my obligations under both the Etsy Seller Policy and Etsy Terms of Use;
With Third-Party Service Providers. I engage the following trusted third parties to perform functions and provide services to my shop: shipping carriers such as the postal service, UPS, FedEx or DHL, which receive your name and address to deliver your order. I share your personal information with these third parties, but only to the extent necessary to perform these services;
In the Event of a Business Transfer. If I sell or merge my business, I may disclose your information as part of that transaction, only to the extent permitted by law.
In Compliance with Laws. I may collect, use, retain, and share your information if I have a good faith belief that doing so is reasonably necessary to: (a) respond to legal process or to government requests; (b) perform legal obligations to which I am bound by agreements; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.

How Long I Store Your Information

I retain your personal information only for as long as necessary to provide you with my services and as otherwise described in my Privacy Policy. However, I may also be required to retain this information to comply with my legal and regulatory obligations, to resolve disputes, and to enforce or perform under my agreements. I generally keep your data for the following time period: five (5) years.

Transfers of Personal Information

I may store and process your information through third-party hosting services in the US and other jurisdictions. As a result, I may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction has.

Your Rights

If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. Your rights are as follows:

Right to Access. You may have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below.
Right to Change, Restrict, or Delete. You may also have rights to change, restrict my use of, or delete your personal information. Absent exceptional circumstances (such as where I am required to store information for legal reasons) I will generally delete your personal information upon your request.
Right to Object. You can object to (a) my processing of some of your information based on my legitimate interests and (b) receiving marketing messages from me. In such cases, I will delete your personal information unless I have compelling and legitimate grounds to continue storing and using your information or if it is needed for legal reasons. If you object to marketing messages, I will always stop sending them.
Right to Complain. If you reside in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.

If you live in California or another US state with a privacy law, you may have the right to know what personal information I collect, to correct or delete it, and to opt out of its sale or sharing. I do not sell your personal information or share it for cross-context behavioral advertising. I will not treat you differently for exercising your rights.

To exercise any of these rights, e-mail me at [your@email.com] or message me through Etsy. For your Etsy account itself, use your account settings on Etsy or contact Etsy, since Etsy controls that data.

Children

My shop is not directed at children, and I do not knowingly collect personal information from children. If you believe a child has given me personal information, contact me and I will delete it.

How to Contact Me

You may reach me with any concerns relating to privacy at [your@email.com]. You can also send a message to [Shop name] through Etsy.

A starting point, not legal advice. Based on Etsy's Help Center as of Oct 15, 2026. Every sentence is a promise to your buyers, so change anything that is not true for your shop and ask a lawyer if you are unsure. Etsy's shop policies guide

View all tools

What is an Etsy privacy policy?

An Etsy privacy policy tells buyers what personal information your shop collects, why you need it, who you share it with and how they can ask you to correct or delete it. It lives in your shop policies, next to returns and cancellations, and Etsy attaches a copy to every receipt.

Etsy already has a privacy policy of its own that covers accounts, checkout and payments. Yours covers what happens after Etsy hands you an order: the name and address on the label, the messages, the photo a buyer sends for a custom mug, the email they typed into your newsletter form. Once you receive that information you are responsible for it.

Does Etsy require a privacy policy?

Yes, for many sellers, and recommended for the rest. Etsy's shop policies guide says that if you are based in the EU or offer items to buyers there, you are required to create and comply with a policy that satisfies the GDPR. For everyone else, Etsy recommends one because many other countries have adopted similar laws.

Etsy's policies also set rules for the information you receive. Etsy's Privacy Policy, for example, requires a buyer's consent before you use their information for marketing. A published policy is how you tell buyers you do those things.

What to include

A good shop privacy policy is short and specific. Cover these points in plain language:

Who you are. Your shop name, the person or business behind it and an email for privacy questions.
What you collect. Order details from Etsy, messages, and anything extra: personalization text and photos, newsletter signups, website analytics.
Why you use it. To fulfill orders, support buyers, keep tax records and, only with consent, send marketing.
Who you share it with. Etsy, your shipping carrier, any email or website provider, and the law when required.
How long you keep it. As long as the order and tax rules need, then delete.
Buyer rights. How to ask for access, correction or deletion, and where to complain.
An effective date. Update it every time you change the text.

The generator above produces each of these sections and drops the ones your shop does not need.

The GDPR applies to EU and EEA buyers, and the UK GDPR applies to buyers in the United Kingdom. Both reach any shop that sells to those buyers, wherever the shop is based. Etsy's GDPR guidance boils it down to three duties for sellers:

publish a GDPR-compliant privacy policy in your shop policies;
be transparent about any buyer information you store or use outside Etsy, such as an email address on a newsletter list, and about analytics, marketing and third parties;
stop using a buyer's information when they ask you to.

In practice that means naming a legal basis for each use (contract, legal obligation, consent or legitimate interests), explaining how data may be transferred abroad, and listing the rights buyers have: access, correction, deletion, portability, objection and the right to complain to a data protection authority. Pick EU or UK as your location, or switch on Offers items to EU or UK buyers if any listing ships there, and the generator adds all of this.

US state privacy laws

The United States has no single federal privacy law for shops. Instead, California's CCPA and a growing list of state laws give residents rights to know, delete and opt out of the sale of their personal information.

Most of these laws apply only to businesses above revenue or data-volume thresholds, which the typical Etsy shop does not reach. A clear policy is still expected by buyers and by Etsy, and it costs nothing to say what you do. The generator includes a short state-law paragraph for US shops: buyers can ask to see, correct or delete their information, and the policy says whether you use it for ad remarketing.

Where to add it in your Etsy shop

Policies can only be edited on the Etsy website, not in the Etsy Seller app. On a desktop or the mobile web:

Open Shop Manager and select Settings.
Choose Policy Settings.
Open the Privacy tab and select Create a policy, or the pencil icon to edit an existing one.
Paste your policy and select Publish.

Etsy shows a timestamp for the last change, and buyers get the version that was live when they ordered. If you also run a Pattern site or a standalone store, it needs a privacy policy too, written for that site's own practices.

What this generator does not cover

The policy is a starting point, not legal advice. It leaves out a few things on purpose:

Cookie banners and consent tools for your own website;
terms of sale, returns and cancellation policies, which Etsy handles in their own tabs;
wholesale, Pattern sites and shops that handle health, financial or children's data;
country-specific extras, such as naming an EU or UK representative or registering with a regulator, which some sellers need depending on where they are based and who they sell to.

Guidance was checked against Etsy's Help Center on October 15, 2026. Laws change, so read the text, make sure it matches how your shop really works and ask a lawyer if you are unsure.

Go further with Alura

A privacy policy is part of running a compliant shop. Alura helps it grow: keyword research, listing optimization, customer follow-ups and email marketing that collects consent the right way, all connected to your Etsy shop.

Start for free or see pricing.

Share tool

FAQ