Last update: [15/09/2025]

Who we are
Atelier COSTÀ LLC (“Atelier COSTÀ”, “we”).
Contact email: info@ateliercosta.com
Postal address: 2915 Ogleton Road, #2930 Newark DE 19713-USA

Atelier COSTÀ LLC has not designated a representative in the European Union under Article 27 of the GDPR, since the processing of personal data of EU residents is occasional, not carried out on a large scale and does not include special categories of data.

What data we process

• Browsing/usage data: IP, user agent, language, time zone, pages visited, referrals, cookie identifiers or similar technologies.

• Account and communications data: name, email, phone, preferred language.

• Order data: billing and shipping addresses, items purchased, amounts, order status, incidents.

• Payments: processed through external gateways (e.g., Stripe, PayPal, Klarna, Apple Pay). We do not store full card data; the gateways act as controllers of that data and apply their own policies. We link at the end.

• Customer service and forms: messages, attachments and metadata necessary to handle the request.

What we use your data for and on what legal basis (Art. 6 GDPR)

• Sell and deliver products, manage orders and returns (basis: contract).

• Respond to queries and support (basis: legitimate interest in responding; or contract if you are already a customer).

• Billing, taxes and legal obligations (basis: legal obligation).

• Fraud prevention and security (basis: legitimate interest).

• Analytics and site improvement (basis: consent when it involves non-essential cookies/identifiers).

• Marketing (newsletters, personalized ads) only if you gave your consent and while you do not withdraw it.

Where we obtain the data from
Directly from you (forms/checkout), from your browsing (cookies/SDKs) and from payment/delivery providers when necessary to complete your purchase.

With whom we share data (recipients/processors)

• Infrastructure and hosting: Hostinger (servers, logs and security).

• Web/shop platform: WordPress + WooCommerce (e-commerce functions).

• Analytics: Google Analytics 4; your consent choice is respected and EU-focused functions are used.

• Payment gateways (independent controllers): Stripe, PayPal, Klarna, Apple Pay—receive the necessary data to process your payment; see their policies: Stripe, PayPal, Klarna, Apple Pay.

• Logistics and courier providers: only the data required to deliver your order.

• Public authorities: when required by law or to defend our rights.

International transfers
Some providers may process data outside the EEA/UK. In such cases, recognized safeguards apply (e.g., the EU-U.S. Data Privacy Framework or Standard Contractual Clauses).

Retention

• Orders and billing: during the applicable accounting/tax legal periods.

• Support/queries: up to 24 months after closing the case.

• Marketing: until you withdraw consent or 24 months pass without interaction.

• Cookies: according to their lifespan (see Cookie Policy).

Cookies and similar technologies
We use our own and third-party cookies. Non-essential ones (analytics/marketing) are only loaded if you accept in the banner. You can change your choice at any time from “Cookie preferences”. More details in the Cookie Policy.

Your rights
You may request access, rectification, erasure, restriction, portability and objection, as well as withdraw your consent at any time without affecting the lawfulness of the prior processing. You may also lodge a complaint with the AEPD (www.aepd.es) if you consider your rights have been violated.

Security
We apply reasonable technical and organizational measures to protect data against unauthorized access, loss or alteration.

Minors
Our products and services are not directed to children under 14 years old. If we detect data from minors without authorization, we will delete it.

Changes to this policy
We may update the policy to reflect legal or service changes. We will publish the new version with update date.

Contact
For any queries or to exercise your rights: info@ateliercosta.com