Privacy policy
Privacy Policy
1. Data Collection & Contact Information
Thank you for visiting our website. This Privacy Policy explains how we handle your personal data. Personal data refers to any information that can be used to identify you as an individual.
Data Controller: Sarah Atelier Email: info@sarahatelier.com Website: sarahatelier.com
All personal data and sensitive content transmitted via our website is protected using SSL/TLS encryption (indicated by "https://" and the padlock icon in your browser).
2. Data Collected When You Visit Our Website
When you browse our website, we automatically collect the following data sent by your browser to our server (server log files):
- Page visited
- Date and time of access
- Amount of data transferred (in bytes)
- Referring source (where you came from)
- Browser type
- Operating system
- IP address (anonymised where possible)
This processing is based on our legitimate interest in maintaining the stability and functionality of our website.
3. Cookies
We use cookies to:
- Enable core website functionality
- Recognise returning visitors
- Simplify the ordering process (e.g. saving your shopping cart)
Cookies can be:
- Session cookies – automatically deleted when you close your browser
- Persistent cookies – stored on your device for a set period of time
You can manage or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain parts of our website.
4. Contact Forms & Enquiries
When you contact us via our contact form or by email, we collect the information needed to respond to your enquiry (such as your name, email address, phone number, and message).
The legal basis for this processing is our legitimate interest (Art. 6(1)(f) GDPR). Where the purpose of contact relates to entering into a contract, the additional legal basis is Art. 6(1)(b) GDPR.
Your data will be deleted once your enquiry has been fully addressed, unless legal retention periods require otherwise.
5. Account Creation & Orders
When you create an account or place an order, we collect the following information:
- Full name
- Delivery address
- Email address
- Phone number
- Billing information
- Login credentials (if you create an account)
This data is used solely for the purpose of fulfilling your order. Once your order is complete and any applicable legal retention periods have expired, your data will be deleted or restricted.
6. Direct Marketing & Newsletter
If you subscribe to our newsletter, we use your email address to send you information about our products and promotions. We use a double opt-in process to confirm your subscription.
If you have previously made a purchase and provided your email address, we may send you similar product recommendations based on our legitimate interest (Art. 6(1)(f) GDPR). You can unsubscribe from marketing communications at any time.
7. Order Processing & Third Parties
To fulfil your order, we may share your data with:
- Delivery and logistics providers
- Payment service providers (Visa, Mastercard, American Express, Apple Pay, Google Pay, PayPal)
This processing is based on the performance of a contract (Art. 6(1)(b) GDPR).
8. Product Review Reminders
With your consent, we may send you a one-time email reminder to leave a review for your order. You can withdraw your consent at any time.
9. Social Media Plugins
Our website includes social media buttons (Facebook, Instagram, Google), implemented using the Shariff solution:
- Buttons are integrated via HTML links, so no data is transmitted automatically
- Clicking a button opens a new page on the respective social media platform
- Data is then processed in accordance with each platform's own privacy policy
10. Online Advertising
We use the following advertising tools:
- Facebook Pixel – for audience analysis and remarketing
- Google Ads – for conversion tracking
- DoubleClick – for ad targeting and campaign analysis
All data is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR).
11. Web Analytics
We use Google Analytics with IP anonymisation enabled (_anonymizeIp) and User-ID tracking to analyse visitor behaviour on our website. This data is used for statistical analysis and to improve our website experience.
12. Remarketing & Retargeting
We use the following remarketing tools:
- Facebook Custom Audiences (via Facebook Pixel)
- Google Ads Remarketing
Data is processed anonymously unless you have given your consent to personalised ad targeting. Consent for targeted advertising may only be given by users aged 13 and over.
13. Your Rights
You have the right to:
- Access, correct, delete, or restrict the processing of your personal data
- Data portability
- Object to processing (including direct marketing)
- Withdraw your consent at any time
- Lodge a complaint with the relevant data protection authority in your country
To exercise any of these rights, please contact us at info@sarahatelier.com.
14. Data Retention
Your personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Once this period has expired, your data is routinely deleted, unless there is a legitimate interest in retaining it further.
Last Update: 04/21/2026