Privacy policy
Last Updated: July 2026
Atelier Chatelaine Ltd ("we," "us," "our") respects your privacy and is committed to protecting your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains how we collect, use, and safeguard information when you visit our website, make a purchase, or interact with our services.
By using this website, you agree to the terms outlined in this policy.
Data Controller
Atelier Chatelaine Ltd is the data controller responsible for your personal information. For any questions or to exercise your rights, contact us at info@atelierchatelaine.com.
Information We Collect
Personal Information You Provide
When you make a purchase, sign up for our newsletter, or complete a form, we may collect: name, email address, billing and shipping address, phone number, payment information, and travel information relevant to services or events.
Automatically Collected Information
When you browse our website, we may automatically collect: IP address, browser type, device type, pages visited, and referring websites. This helps us understand how visitors use the site and improve the user experience.
Our Legal Basis for Processing
Under UK GDPR, we only process your personal data where we have a valid legal basis, including:
- Contract — to process and fulfil purchases, bookings, and service delivery
- Consent — for marketing emails and certain cookies (which you may withdraw at any time)
- Legal obligation — to comply with tax, accounting, and other legal requirements
- Legitimate interests — to improve our website and services, provided this doesn't override your rights
Email Marketing
If you subscribe to our newsletter or updates, we may send occasional emails about new products, travel experiences, workshops or buying trips, and educational content. We only send marketing emails with your consent, in line with the Privacy and Electronic Communications Regulations (PECR). You may unsubscribe at any time via the link in our emails.
We use Klaviyo as our email marketing platform, which processes data according to its own privacy policy.
Third-Party Services
To operate our business, we use trusted third-party providers including Shopify (website and ecommerce platform), payment processors, Klaviyo (email marketing), scheduling and form providers, and analytics services. These providers may collect or process data necessary to perform their functions. Each maintains its own privacy policy governing how your information is handled.
Cookies & Analytics
Our website uses cookies and tracking technologies to improve your browsing experience and analyze site performance, including to remember preferences, analyze traffic, and measure marketing effectiveness. You may manage or disable cookies at any time through your browser settings. We are in the process of implementing a cookie consent management tool to give visitors more granular control over non-essential cookies, in line with UK requirements under PECR.
Data Security
We take appropriate technical and organisational measures to protect your personal information from loss, misuse, unauthorized access, or disclosure. Payments are processed through secure encrypted systems that comply with PCI-DSS security standards. While we take steps to protect data, no online transmission can be guaranteed to be completely secure.
Data Retention
We retain personal information only as long as necessary to fulfil purchases or services, comply with legal obligations, and maintain business records. When information is no longer required, it is securely deleted or anonymised.
Your Privacy Rights
Under UK GDPR, you have the right to:
- request access to your personal data
- request correction of inaccurate information
- request erasure of your data
- request restriction of processing
- object to processing, including for direct marketing
- request data portability
- withdraw consent for marketing communications at any time
To exercise any of these rights, contact us at info@atelierchatelaine.com.
If you're not satisfied with how we've handled your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or the relevant supervisory authority in your EU member state if you are an EU resident.
EU Visitors
If you are located in the EU, your personal data is also processed in accordance with the EU General Data Protection Regulation (EU GDPR) where applicable.
International Data Transfers
Because Atelier Chatelaine operates internationally, your information may be transferred to and processed in countries outside the UK or EU, including Canada and the United States, where our service providers are based. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or transfers to jurisdictions covered by an adequacy decision.
Children's Privacy
This website and our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in business practices, technology, or legal requirements. The updated version will always be posted on this page with the revised date.
Contact
Atelier Chatelaine Ltd
info@atelierchatelaine.com