Privacy Policy

ARTICLE 1 – PERSONAL INFORMATION COLLECTED

When you make a purchase on our online store, we collect certain personal information necessary for processing your order, including:

  • Your name, first name, mailing address, email address, and phone number.
  • Payment-related information (e.g., type of credit card, expiration date, but never your complete credit card details, except through secure providers).

This data is used for:

  • Managing your orders and deliveries.
  • Ensuring quality customer support.
  • Informing you about new products, special offers, or events (if you have given your explicit consent).

The collected data is processed in accordance with the principles of minimization and relevance. It is retained for a limited period of 36 months, unless otherwise required by law.

During your browsing, we also collect technical data:

  • IP address.
  • Browser type and operating system.
    These data are used to improve your user experience and to ensure the security of our platform.

ARTICLE 2 – CONSENT

How do we obtain your consent?
When you provide us with your personal information to complete an order or benefit from a service, you implicitly consent to these data being used solely for that transaction.

For any other use (e.g., signing up for a newsletter), we will ask for your explicit permission.

How to withdraw your consent?
You can withdraw your consent for the use or processing of your personal data at any time by contacting us by email at contact@l-atelier-des-j.fr.

ARTICLE 3 – DISCLOSURE

Your personal information is only shared with:

  • Service providers involved in processing your orders (carriers, secure payment systems).
  • The competent authorities in case of legal obligation (e.g., fraud, dispute).

Under no circumstances will your data be sold, rented, or transferred to third parties for commercial purposes.

ARTICLE 4 – PLATFORM AND HOSTING

Our store is powered by PrestaShop, a recognized e-commerce solution that complies with data protection standards (GDPR).

Data storage and security
Your personal information is hosted on secure servers and protected by advanced technologies (firewalls, SSL encryption). We apply best practices to prevent any loss, misuse, or unauthorized access.

Payments
Bank transactions are managed by PCI-DSS certified service providers (e.g., PayPal, Stripe). Your payment information is encrypted and processed in a secure environment.

ARTICLE 5 – SERVICES PROVIDED BY THIRD PARTIES

We work with third-party service providers to ensure the proper functioning of our store and to offer complementary services (e.g., payment systems, carriers).

Processing by third parties
The third-party providers used are required to collect, process, and protect your data in accordance with applicable regulations. However, their privacy policies may differ from ours. We recommend that you consult these policies directly on their websites.

Common examples:

  • Secure payment gateways: These providers collect the necessary information to process your payments (credit card, fraud checks).
  • Carriers: Your name, address, and phone number are transmitted to them to deliver your orders.

Foreign providers
If some of these providers are located outside the European Union, your data may be subject to the laws of their jurisdiction. By proceeding with a transaction requiring their involvement, you implicitly accept this transfer.

ARTICLE 6 – SECURITY

To protect your personal information, we apply strict technical and organizational measures, such as:

  • Data encryption: Sensitive data (e.g., payment) is encrypted using the SSL protocol and stored with advanced encryption (AES-256).
  • Limited access: Only authorized persons can access your data, within the strict scope of their mission.
  • Proactive monitoring: Our site is regularly updated and audited to detect and fix any security vulnerabilities.

Although no electronic transmission or storage method is completely foolproof, we make every effort to ensure a high level of security.

ARTICLE 7 – COOKIES

The cookies used on our site help improve your browsing experience and personalize our services.

List of main cookies:

  1. session_id: Unique identifier to track your browsing session (duration: session).
  2. cart: Your cart identifier, persists for 14 days.
  3. analytics_cookie: Used to collect anonymous statistics on site traffic (duration: 12 months).

You have the option to disable all or some of the cookies via your browser settings, but this may affect some functionalities of our site.

ARTICLE 8 – AGE OF CONSENT

By using our site, you declare that you are of legal age or have obtained permission from a legal guardian to access our services and share your personal information.

ARTICLE 9 – CHANGES TO THE PRIVACY POLICY

We reserve the right to modify this privacy policy at any time by notifying you with an update on this page. Changes take effect immediately upon publication.

In the event of a major change, you will be informed by email (if you have agreed to receive our communications) or during your next visit.