Privacy policy

PRIVACY POLICY — THE REFINED ATELIER
1. OVERVIEW
The Refined Atelier ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy sets out how we collect, store, process, share, and protect your personal data when you visit our website, use our services, or make a purchase from our storefront.
For the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is The Refined Atelier, operating out of the United Kingdom at:
  • Business Address: 12 Riverdale Road, London, DA8 1PX
2. DATA WE COLLECT
We collect several types of information from and about users of our Services, including:
  • Identity Data: First name, last name, username, or similar identifier.
  • Contact Data: Personal billing address, delivery address, email address, and telephone numbers.
  • Financial Data: Payment card details and billing bank accounts (processed via secure third-party payment gateways like Shopify Payments).
  • Transaction Data: Details about payments to and from you and other details of products and services you have purchased from us.
  • Technical Data: IP address, your login data, browser type and version, time zone setting, operating system, and platform.
  • Usage Data: Information about how you use our website, products, and services.
3. HOW WE USE YOUR DATA
We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:
  • Performance of a Contract: To process and deliver your order, manage payments, and collect money owed to us.
  • Legitimate Interests: To improve our storefront, manage our relationship with you, prevent fraudulent transactions, and maintain website security.
  • Compliance with Legal Obligations: To comply with tax laws, customs reporting requirements, and corporate financial accounting rules.
  • Consent: To deliver targeted marketing communications to you via email. You can withdraw your consent at any time.
4. DATA TRANSFER OUTSIDE THE UK AND EEA
Because The Refined Atelier is powered by Shopify and serves international customers, your personal data will be transferred to, stored at, and processed outside the United Kingdom and the European Economic Area (EEA), primarily in Canada and the United States.
Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
  • We transfer data to countries that have been deemed to provide an adequate level of protection for personal data by the UK Secretary of State (such as Canada, under Shopify's corporate structures).
  • We use specific Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum (IDTA) approved for use in the UK, which give personal data the same protection it has in the UK.
5. DATA SHARING
We share your personal data with trusted third parties who help us provide our Services, including:
  • Shopify: Our e-commerce platform provider.
  • Payment Processors: To securely handle payment authorizations over an SSL-encrypted server connection.
  • Shipping & Courier Companies: To physically deliver your products internationally.
  • Analytics Providers: To help optimize our website performance.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not sell, rent, or lease our customers' personal information or contact details to third parties for marketing purposes. We do not allow our third-party service providers to use your personal data for their own purposes.
6. DATA RETENTION
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By UK law, we must keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax and corporate accounting purposes.
7. YOUR LEGAL RIGHTS
Under the UK GDPR and international data protection laws, you have rights in relation to your personal data, including the right to request access, correction, erasure, restriction, or transfer of your data, as well as the right to object to processing or withdraw consent.
To exercise any of these rights, please contact our Data Protection Compliance team:
  • Email: info@theredefinedatelier.com
  • Phone: +447546568171
If you are unsatisfied with our response, you have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).