Privacy policy

Last updated: 27/10/2026

Who we are

Atelier COSTÀ LLC (“Atelier COSTÀ”, “we”), 2915 Ogleton Road, #2930, Newark, DE 19713, USA. Contact email: info@ateliercosta.com.

Atelier COSTÀ LLC has not designated a representative in the European Union under Article 27 of the GDPR, since the processing of personal data of EU residents is occasional, is not carried out on a large scale and does not include special categories of data.

What data we process

• Trade contact form: name, company or brand, business email, country, type of client, type of project, expected quantities and message, plus the metadata needed to handle the request.
• Technical browsing data: IP address, user agent and pages visited, recorded in the hosting server logs for security and proper operation of the site.
• Audience measurement (only with your consent): pages viewed, where visits come from (for example Instagram or a newsletter), device and browser type, approximate country or region, and clicks to our contact, private label and catalogue pages, through Google Analytics 4.
• Aggregated visit statistics (no cookies): for each page viewed, only the date, the page address and a category of origin (search engine, social network, newsletter, other website or direct access). No IP address, identifier or cookie is kept.
• Communications: the exchanges you have with us by email.

Purposes and legal bases (Art. 6 GDPR)

• Responding to your request and reviewing your project → basis: legitimate interest in responding, or pre-contractual steps taken at your request.
• Managing the business relationship, invoicing and legal obligations → basis: contract and legal obligation.
• Abuse prevention and site security → basis: legitimate interest.
• Site audience measurement → basis: your consent, which you can withdraw at any time.
• Aggregated visit statistics → basis: legitimate interest in measuring the audience of our site, under the conditions set by the French data protection authority (CNIL) for consent-exempt audience measurement; you can object at any time.
• Commercial communications → only with your consent or within a contractual relationship, until you withdraw your consent.

Where we obtain the data from

Directly from you (contact form, emails) and, for technical data, from your browsing of the site.

Recipients and processors

• Infrastructure, hosting and email: Hostinger (servers, logs, security and email).
• Audience measurement (with your consent): Google Ireland Limited (Google Analytics 4).
• Aggregated visit statistics: processed only by Atelier COSTÀ on its hosting, never shared with third parties.
• Public authorities: when required by law or to defend our rights.

We do not sell your data.

International transfers

Atelier COSTÀ LLC is established in the United States and some providers may process data outside the EEA/UK. In such cases, recognised safeguards apply (for example, the EU-U.S. Data Privacy Framework or Standard Contractual Clauses).

Retention

• Visit statistics (Google Analytics): 14 months.
• Aggregated visit statistics: 25 months.
• Requests received through the form: up to 24 months after the case is closed.
• Business relationship and invoicing: during the applicable accounting and tax legal periods.
• Commercial communications: until you withdraw consent or 24 months pass without interaction.

Cookies and local storage

This site uses no advertising cookies. Only with your consent, it uses Google Analytics 4 to measure visits. The related cookies (_ga, _ga_*) are only set after you click “Accept” and last up to 13 months; if you decline, no measurement tool is loaded. Google signals and ad personalisation are turned off.

Your choice is remembered for 6 months in your browser’s local storage, as is your chosen language. You can change it at any time through the “Cookies” link at the bottom of the page. The contact form does not keep any data in your browser.

Cookie-free statistics. Regardless of your cookie choice, we count the pages viewed in aggregate form: the date, the page address and a category of origin, possibly refined by the parameters of our own campaign links. No cookie, IP address or identifier is kept, no journey is followed from one page to another and these statistics are never shared. They are used only to measure visits to this site and are kept for 25 months. You can object at any time; your browser’s “Do Not Track” and “Global Privacy Control” settings are also respected.

Do not count my visits

Your rights

• Access, rectification, erasure, restriction, portability and objection.
• Withdrawal of consent at any time, without affecting the lawfulness of prior processing.
• Complaint to the competent supervisory authority, in particular that of your country of residence (for example the CNIL in France – www.cnil.fr – or the AEPD in Spain – www.aepd.es).

Security

We apply reasonable technical and organisational measures to protect data against unauthorised access, loss or alteration.

Minors

Our services are intended for professionals and are not directed to children under 14 years old. If we detect data from minors without parental authorisation, we will delete it.

Changes to this policy

We may update this policy to reflect legal or service changes. Any new version will be published with its update date.

Contact

For any queries or to exercise your rights: info@ateliercosta.com.