Privacy policy

Last Updated: February 9, 2026

Effective Date: February 9, 2026

This Privacy Policy describes how AtelierOrna Shop (“we,” “us,” or “our”) collects, uses, shares, and protects the personal information you provide when you visit our website (https://atelierorna.com/) and use our services (collectively, the “Services”). This policy applies to all users, including customers, visitors, and others who interact with our Services.

We are committed to protecting the privacy and security of your personal information, especially in compliance with the privacy laws and regulations of the European Economic Area (EEA), the United States, and other target markets where we operate.

1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we update the policy, we will post the revised version on our website with a new “Last Updated” date. We encourage you to review this policy periodically to stay informed about how we protect your information.

2. How We Collect Your Personal Information

We collect personal information only as necessary to provide and improve our Services, and our website does not operate with the primary purpose of collecting user personal information. We collect information in the following ways:

2.1 Information You Provide Directly

When you interact with our Services, you may choose to provide us with personal information, including:

Contact details: Name, email address, phone number, and shipping/billing address.
Order information: Payment details (collected via secure SSL-encrypted pages), order history, and delivery preferences.
Account information: Username, password, and security question answers (if you create an account).
Shopping activity: Items you view, add to cart, save to your account, or review.
Customer support information: Messages, inquiries, or feedback you submit to our support team.

2.2 Information Collected Automatically

We use cookies, pixels, and similar technologies to automatically collect information about your use of our Services, including:

Device information (e.g., device type, operating system, browser type).
Network and connection information (e.g., IP address, location data).
Usage data (e.g., pages visited, time spent on the site, interactions with our Services).

2.3 Information from Third Parties

We may receive personal information from trusted third parties, including:

Payment processors (to facilitate secure transactions).
Shipping and logistics providers (to fulfill orders).
Service providers that support our website operations (e.g., hosting, analytics).

3. How We Use Your Personal Information

We use your personal information only for the purposes disclosed to you and as permitted by law. Key uses include:

Processing orders and providing services: To fulfill purchases, manage your account, send order confirmations, and handle returns/exchanges.
Customer support: To respond to your inquiries, resolve issues, and improve our support services.
Service improvement: To analyze usage patterns and enhance the functionality and user experience of our Services.
Compliance: To meet legal, regulatory, or contractual obligations.
Security: To detect, prevent, and address fraud, unauthorized access, or other malicious activities.

Important Restrictions:

No sale of contact information: We do not sell your contact information (e.g., name, email, phone number) to third parties for any purpose.
No unauthorized advertising use: We will not use your personal information or images for advertising purposes without your explicit consent. Any advertising use of your data will only occur after you provide opt-in consent.
Free gifts and incentives: We only offer free gifts or incentives in the following scenarios:
- As part of a purchase transaction (e.g., a free gift with a qualifying order).
- As part of a legitimate marketing campaign where the primary purpose is not to collect personal information.
- In compliance with all applicable laws and regulations.

4. How We Protect Your Personal Information

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, use, or disclosure. Specifically:

Secure payment processing: All credit card and payment information is collected on SSL-encrypted pages to ensure secure transmission and storage.
Data security protocols: We use industry-standard encryption, access controls, and secure server infrastructure to protect your data.
Limited access: Only authorized personnel have access to personal information, and they are bound by confidentiality obligations.

While we strive to protect your information, no data transmission or storage system is completely secure. We cannot guarantee absolute security, but we will promptly notify you of any data breach in accordance with applicable law.

5. How We Disclose Your Personal Information

We may share your personal information only in the following limited circumstances:

Service providers: With third parties who perform services on our behalf (e.g., payment processors, shipping carriers, analytics providers), subject to strict confidentiality and data protection obligations.
Legal requirements: To comply with legal obligations, respond to valid legal requests (e.g., court orders, subpoenas), or protect our rights, property, or safety.
Business transactions: In connection with a merger, acquisition, or sale of all or part of our business, subject to applicable privacy laws.
With your consent: With your explicit opt-in consent for any other purpose not described in this policy.

6. Your Rights Regarding Personal Information

Depending on your location, you may have the following rights under applicable privacy laws (e.g., GDPR in the EEA, CCPA/CPRA in California):

Access: Request a copy of the personal information we hold about you.
Correction: Request correction of inaccurate or incomplete personal information.
Deletion: Request deletion of your personal information (subject to legal exceptions).
Data portability: Request a copy of your personal information in a machine-readable format.
Restriction: Request restriction of processing of your personal information.
Objection: Object to processing of your personal information for certain purposes (e.g., direct marketing).
Withdraw consent: Withdraw any consent you previously provided for processing your personal information.

To exercise these rights, please contact us using the information provided in Section 9. We will respond to your request within the timeframe required by applicable law.

7. Children’s Privacy

Our Services are not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will delete it promptly.

8. Applicable Law

This Privacy Policy is governed by the laws of the State of Wyoming, United States, and we comply with the privacy laws of the countries where we operate, including:

General Data Protection Regulation (GDPR) for users in the EEA.
California Consumer Privacy Act (CCPA/CPRA) for users in California, USA.
Other applicable national and regional privacy laws.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: info@atelierorna.com
Address: 30 N Gould St Ste R, Sheridan, WY 82801, USA
Phone: +1 (307) 222-4298

All contact information provided is accurate and consistent with the information displayed on other pages of our website.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. You can manage your cookie preferences through your browser settings. For more details about our use of cookies, please contact us using the information provided in Section 9.

Key Compliance Notes for Your Reference:

SSL Protection: Explicitly stated in Section 4 for payment information.
No Sale of Contact Info: Explicitly stated in Section 3.
No Unauthorized Advertising Use: Explicitly stated in Section 3.
Primary Purpose Clarification: Stated in Section 2 (website does not exist to collect personal info).
Free Gifts/Incentives: Restricted use cases outlined in Section 3.
Applicable Laws: Clearly listed in Section 8 (aligned with your US-Wyoming base).
Contact Information: Valid, consistent details provided in Section 9.