Privacy Policy for atelier-luire.com
At Atelier Luire, accessible at https://atelier-luire.com, we are committed to upholding the highest standards of data privacy and user security. This Privacy Policy outlines how we collect, use, store, and safeguard your personal data, and informs you of your rights under applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We are dedicated to protecting your privacy and ensuring that your personal information is processed transparently, lawfully, and securely.
1. Scope and Role of Data Controller
This Privacy Policy applies to all visitors, users, and customers of atelier-luire.com and governs the processing of personal data collected through or in connection with our website and services.
For purposes of applicable data protection legislation, Atelier Luire is the “data controller,” determining the purposes and means of processing personal data collected via atelier-luire.com. In specific scenarios where we act as a data processor on behalf of another organization, individuals should direct their inquiries to the relevant data controller.
2. Categories of Personal Data We Process
We may collect and process the following categories of personal data, either directly from you, automatically via our website, or through third-party service providers:
A. Usage Data
Information about how you interact with atelier-luire.com, such as browser type and version, IP address, operating system, time zone setting, location data, referral source, length of visit, and page views.
B. Account Data
When you create an account or place an order, we may collect your name, email address, billing and delivery address, phone number, and login credentials.
C. Profile Data
This includes your preferences, order history, wishlists, shopping behavior, and interactions with products, services, and features on our website.
D. Communication Data
Any data you provide when contacting us via email, contact forms, live chat, or direct message, including support queries and communication history.
E. Technical Data
Information collected through your device, including your internet connection, screen resolution, language settings, device identifiers, and system configurations.
F. Transaction Data
Details related to orders you place with us, payment confirmations, delivery tracking, and transaction identifiers. Please note that payment data may be processed by our third-party processors and is not stored by us directly.
G. Preference Data
Marketing and communication preferences, opt-in/opt-out choices, and your stated interests regarding our products and newsletters.
3. Legal Bases for Processing
We process your personal data based on the following lawful grounds:
– Performance of a Contract: To fulfill our contractual obligations to you, including processing orders, delivering products, and providing support.
– Legal Obligation: To comply with applicable legal and regulatory requirements.
– Legitimate Interests: To administer our website, prevent fraud, develop and enhance our services, and ensure network and information security, provided such interests are not overridden by your data protection rights.
– Consent: Where required by law for specific processing activities such as marketing communications or analytics, we will obtain your explicit consent. Consent may be withdrawn at any time.
4. Your Data Protection Rights
As a data subject under the GDPR or a consumer under the CCPA, you have specific rights including:
– Access: Request access to the personal data we hold about you.
– Rectification: Correct inaccurate or incomplete personal data.
– Erasure: Request deletion of your personal data (“right to be forgotten”), subject to certain legal exceptions.
– Restriction: Ask us to temporarily or permanently limit processing under specific circumstances.
– Data Portability: Receive a copy of your personal data in a commonly used, machine-readable format and request transmission to another controller where feasible.
– Objection: Object to processing based on legitimate interest or direct marketing.
– Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
California residents have additional rights under the CCPA:
– The right to know what personal information we collect and how it is used.
– The right to request deletion of personal data.
– The right to opt-out of the sale of personal data (Note: Atelier Luire does not sell personal data).
– The right to non-discrimination for exercising your privacy rights.
To exercise any of your rights, please contact us at [email protected].
5. Security Measures
We implement appropriate technical and organizational security measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:
– Secure transmission via HTTPS and TLS/SSL encryption.
– Access controls based on roles and responsibilities.
– Regular data backups with redundancy and failover systems.
– Secure hosting environments and vulnerability monitoring.
– Employee awareness and data protection training.
6. International Data Transfers
Where necessary, your personal data may be transferred to and processed in countries outside of your country of residence, including to countries that may not provide the same level of data protection as your jurisdiction.
In such cases, we ensure appropriate safeguards are in place, including the use of Standard Contractual Clauses approved by the European Commission, adequate regulatory mechanisms recognized under applicable law, or your explicit consent, to ensure an equivalent level of data protection.
7. Data Retention
We retain personal data only for as long as it is necessary for the purposes for which it was collected, unless a longer retention period is legally required or permitted. The retention periods per data category are generally as follows:
– Usage and Technical Data: up to 26 months
– Account and Communication Data: as long as your account remains active, or up to 5 years after last contact
– Transaction Data: 7 years for tax and legal compliance
– Profile and Preference Data: 3 years from last interaction or consent update
Upon expiration of these periods, data is securely deleted or anonymized in accordance with best industry practices.
8. Cookie Policy
Atelier-luire.com uses cookies and similar technologies to improve your browsing experience, analyze trends, and deliver personalized content. Categories of cookies include:
– Essential Cookies: Required for the proper functionality of our website (e.g., authentication, security).
– Functional Cookies: Enhance usability and settings personalization (e.g., remembering language preferences).
– Analytics Cookies: Help us understand user behavior and improve website performance (e.g., Google Analytics).
– Performance Cookies: Track interaction with website content and measure site performance.
Where required by applicable laws, non-essential cookies will only be used with your express opt-in consent.
9. Cookie Management and Compliance
Upon your first visit to atelier-luire.com, a cookie banner will inform you about our use of cookies and your rights to manage preferences. You may accept, reject, or customize cookies using the banner or by modifying your browser settings. You may also withdraw consent or change preferences at any time.
CCPA and GDPR-compliant mechanisms allow you to:
– Access cookie details (purpose, duration, provider).
– Customize consent per cookie category.
– Disable non-essential cookies without impacting essential functions.
10. Protection of Children’s Privacy
Our website and services are not directed at, nor do we knowingly collect personal data from, children under the age of 13. If we become aware that we have collected personal data from a child without verifiable parental consent, we will take steps to delete such information promptly.
If you believe we may have collected data from a child without appropriate consent, please contact us immediately at [email protected].
11. Policy Changes
We may update this Privacy Policy to reflect changes in legal, technical, or business developments. We will provide notification of material changes where required by law through our website or direct communication. Users are advised to review this Policy periodically to remain informed of how we protect your data.
12. Contact Us
If you have any questions, concerns, or wish to exercise your data protection rights, please contact our privacy team at:
Email: [email protected]
Website: https://atelier-luire.com
We are committed to ensuring full transparency and compliance with applicable privacy regulations. Your trust is important to us, and we are always available to assist you with any privacy-related concerns.