Privacy policy.
[YOUR COMPANY] ("we", "our", "us") operates the website at [yourdomain.com]. This policy explains how we collect, use, and protect personal information when you use our site, place an order, or write to us. We take privacy seriously and keep what we collect to the minimum needed to run the shop.
What we collect
Information you give us
- Name, email, delivery address and phone number when you place an order or create an account
- Payment information — processed by our payment provider; we never store card numbers
- Correspondence you send us, including fitting notes and bridal briefs
- Email address, if you subscribe to letters from the atelier
Information collected automatically
- Browser type, pages visited, and time spent — via first-party analytics only
- IP address and approximate location (country/city level)
- Cookies — see our Cookie policy for details
How we use it
We use the information we hold to process and fulfil orders; communicate about your order status; respond to your correspondence; send occasional letters if you have subscribed; and improve the site. We do not sell your data to third parties, and we do not use it for advertising.
Legal basis
For customers in the EEA and UK, we process personal data on the following bases: performance of a contract (order fulfilment); legitimate interests (fraud prevention, site improvement); and consent (newsletter subscription). You may withdraw consent at any time.
Data sharing
We share data only with the service providers needed to run the shop — our payment processor (Stripe), shipping carriers (DHL, DPD), and our email platform (Postmark). All processors are bound by data processing agreements and may not use your data for their own purposes.
Retention
Order data is retained for seven years for tax purposes. Newsletter subscription data is held until you unsubscribe. Account data is held until you request deletion.
Your rights
You have the right to access, correct, or delete the personal data we hold about you. You may also request that we restrict processing or provide a portable copy. To exercise any of these rights, write to us at privacy@[yourdomain.com] and we will respond within 30 days.
Cookies
We use a small number of strictly necessary cookies (session management, shopping bag persistence) and one analytics cookie (first-party, anonymised). We do not use advertising or third-party tracking cookies. You may decline non-essential cookies via the banner on your first visit.
Contact
If you have questions about this policy or about how we handle your data, write to us at privacy@[yourdomain.com] or by post to [YOUR COMPANY], [YOUR ADDRESS].
