Private Policy

At Seren Atelier (https://www.serenatelier.com/), protecting the privacy and personal data of our customers and website visitors is a top priority. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit or make a purchase from our website.

Data Controller

The data controller responsible for the collection and processing of your personal data is Seren Atelier. For any privacy-related inquiries, please contact us at [insert contact email, e.g., hello@serenatelier.com].

Personal Data We Collect

We collect personal information when you browse our site, make a purchase, create an account, subscribe to our newsletter, or contact customer support. This information includes:

Identity Data: First name, last name.
Contact Data: Email address, phone number, billing address, and shipping address.
Financial & Transaction Data: Tax Identification Number (VAT/NIF) if provided for invoicing, and payment transaction details (processed securely via encrypted third-party payment gateways).
Technical Data: IP address, browser type, device information, browsing patterns, and cookies (see our Cookies Policy).

How and Why We Use Your Personal Data

We process your personal data for the following purposes and legal bases:

Order Processing & Delivery: To fulfill your purchases, process payments, and ship your products (Contractual necessity).
Customer Support: To respond to your questions, custom requests, and order updates (Legitimate interest).
Legal & Tax Compliance: To issue invoices and comply with applicable tax laws (Legal obligation).
Marketing Communications: To send you newsletters, promotions, and updates if you have explicitly opted in (Consent). You may unsubscribe at any time.

Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We only share necessary data with trusted service providers to ensure our operations run smoothly:

Shipping and courier companies to deliver your orders.
Payment processors to securely handle payments.
IT and website hosting service providers.
Tax and legal authorities when required by law.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, or to satisfy legal, accounting, or reporting obligations (e.g., maintaining billing records for required tax retention periods).

Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have the following rights:

Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request the deletion of your personal data ("right to be forgotten").
Restriction or Objection: Restrict or object to the processing of your data.
Data Portability: Request the transfer of your data to another party.
Withdraw Consent: Withdraw your consent for marketing communications at any time.

To exercise any of these rights, please contact us at [insert email address].