Privacy Policy

Effective Date: 23 June 2025

This Privacy Policy describes how L’Atelier Saràf, a company based in Italy, collects, uses, and protects your personal information when you visit our website and purchase our products.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679).

1. Information We Collect

We may collect and process the following types of personal data:

  • Identity Information – name, surname

  • Contact Information – email address, phone number, billing and shipping address

  • Transaction Data – purchase history, payment method (note: we do not store payment details; they are processed securely by third-party providers)

  • Technical Data – IP address, browser type, operating system, device type

  • Usage Data – how you use our website (pages visited, time spent, interactions)

2. How We Use Your Data

We use your data for the following purposes:

  • To process and deliver your orders

  • To communicate with you about your purchase

  • To manage your account

  • To improve our website and services

  • To send marketing emails (only with your consent)

  • To comply with legal obligations

3. Legal Bases for Processing

Under the GDPR, we rely on the following legal bases:

  • Performance of a contract – to fulfill your orders

  • Legal obligation – to meet legal and tax obligations

  • Legitimate interests – to improve our services, prevent fraud

  • Consent – for marketing and non-essential cookies (you can withdraw at any time)

4. Sharing Your Data

We may share your data with:

  • Payment processors (e.g. Stripe, PayPal)

  • Shipping providers

  • IT service providers (hosting, email services)

  • Legal or governmental authorities if required by law

We never sell or rent your personal data to third parties.

5. International Data Transfers

Your data is stored and processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs).

6. Data Retention

We retain your personal data only as long as necessary:

  • For the purposes stated above

  • As required by law (e.g. tax/accounting requirements)

  • Or until you request deletion (subject to our legal obligations)

7. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Request deletion ("right to be forgotten")

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

To exercise these rights, please contact us at lateliersaraf@gmail.

8. Cookies

We use cookies to improve your browsing experience. For detailed information, see our [Cookie Policy].

You can manage your cookie preferences at any time via your browser settings or our cookie banner.

9. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

10. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us.