Privacy Policy

1. Information We Collect

We collect information you provide directly when you place an order, contact us, or sign up for updates. This includes name, email address, billing and shipping address, phone number (if provided), and order history. Payment information is collected and processed by our payment processor (Shopify Payments and its underlying networks); we do not store cardholder data on our servers.

We also collect technical information automatically when you visit the Site, including IP address, browser type, device type, referring URL, pages viewed, and timestamps. This is collected through cookies, log files, and similar technologies.

For California residents, the categories of personal information we collect, as defined by the CCPA / CPRA (Cal. Civ. Code § 1798.140), include:

• Identifiers — name, postal address, email address, phone number, IP address
• Commercial information — records of products purchased, considered, or returned
• Internet or network activity — browsing history on the Site, interaction with the Site
• Geolocation data — approximate location derived from IP address
• Inferences — preferences and characteristics drawn from the above to improve the customer experience

We do not knowingly collect sensitive personal information as defined by the CPRA, and we do not use any personal information for purposes beyond those disclosed in this Policy.

2. How We Use Your Information

We use your information to:

• Process and fulfill orders, including pre-orders
• Communicate with you about your order, including shipping, delays, and post-purchase support
• Send marketing communications, where you have opted in
• Improve the Site, our products, and the customer experience
• Detect, prevent, and address fraud, abuse, or violations of our Terms
• Comply with legal obligations

3. How We Share Your Information

We share information only as necessary to operate the Site and fulfill orders. Categories of recipients include:

• Shopify Inc., which provides our e-commerce platform, hosting, and payment processing
• Shipping carriers (national and international, as appropriate to your delivery address) to deliver your order
• Service providers who help us operate the business (email delivery, analytics, customer support tools), each bound by confidentiality
• Legal authorities when required by law, subpoena, or to protect our rights or the safety of others

We do not sell your personal information.

4. Cookies and Similar Technologies

We use cookies and similar technologies that are strictly necessary to operate the Site (for example, maintaining your cart and session) and limited analytics technologies to understand how the Site is used. You can control cookies through your browser settings, including blocking or deleting them; disabling strictly necessary cookies may affect Site functionality such as the cart and checkout. We do not use cookies for advertising targeting at this time.

5. Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.

California residents have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, and limit the use of sensitive personal information. Residents of the EEA, UK, and Switzerland have rights under the GDPR or local equivalents.

You can opt out of marketing emails at any time using the unsubscribe link in any marketing message or by contacting us.

6. Data Retention

We retain personal information for as long as necessary to provide our services, comply with legal obligations (including tax and accounting requirements), resolve disputes, and enforce our agreements.

7. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission over the Internet is fully secure; we cannot guarantee absolute security.

8. Children’s Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it.

9. International Transfers

Your information may be processed in the United States and other countries that may have data protection laws different from those in your jurisdiction. Where required, we use appropriate safeguards for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Effective” date at the top of this page reflects the latest version. Material changes will be communicated through the Site or by email where appropriate.

11. Contact Us

Questions or requests related to this Privacy Policy can be sent to:

Desrosiers Atelier
info@desrosiersatelier.com