Handcrafted to order. Estimated lead time: 3 weeks.
Login

Country

Cart

Your cart is empty

Privacy policy

Atelier de Rys — Privacy Policy

Last updated: 14 August 2025

At Atelier de Rys, we are committed to protecting the privacy and security of our customers and visitors. This Privacy Policy explains how we collect, use, and share your personal information when you visit our website [atelierderys.com], make a purchase, or otherwise interact with us (collectively, the “Services”).

We operate in compliance with the General Data Protection Regulation (GDPR), the EU ePrivacy Directive, and all other applicable data protection laws. By using our Services, you agree to the terms of this Privacy Policy.

1. Personal Information We Collect

We may collect the following types of personal information:

  • Contact Information: name, billing address, shipping address, email address, phone number.

  • Order & Transaction Information: products purchased, payment method, order history, returns, exchanges, cancellations.

  • Account Information: username, password, saved preferences, wishlist items.

  • Payment Information: securely processed through our payment providers; we do not store full card details.

  • Device & Usage Information: IP address, browser type, device identifiers, referring pages, time spent on site, navigation patterns.

  • Communications: emails, contact form submissions, customer service interactions.

  • Cookies & Tracking Technologies: data collected through cookies, pixels, and similar technologies (see Section 6).

2. How We Collect Your Information

We collect personal information:

  • Directly from you — when you place an order, create an account, subscribe to our newsletter, or contact us.

  • Automatically — when you use our website (via cookies, analytics tools, and similar technologies).

  • From service providers — including payment processors, delivery partners, and analytics providers.

  • From partners or third parties — if you interact with us via external services or platforms.

3. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on:

  • Contract — to process and fulfil your order.

  • Consent — for marketing communications and non-essential cookies.

  • Legal Obligation — to comply with tax, accounting, and other regulatory requirements.

  • Legitimate Interests — to improve our services, prevent fraud, and ensure website security (only where your rights do not override our interests).

4. How We Use Your Personal Information

We may use your personal information for:

  • Order Fulfilment — processing orders, arranging shipping, providing tracking, handling returns.

  • Personalisation & Improvement — tailoring your shopping experience and improving services.

  • Marketing (with consent) — sending you promotions, product news, and event invitations.

  • Security & Fraud Prevention — detecting and preventing fraudulent or illegal activity.

  • Legal Compliance — fulfilling legal and regulatory obligations.

You can opt out of marketing at any time via the “unsubscribe” link in emails or by contacting us.

5. Consent Management

We comply with GDPR requirements for freely given, informed consent:

  • Cookie Consent: Non-essential cookies (analytics, advertising) are disabled until you explicitly accept them via our cookie banner.

  • Form Consent: Forms collecting personal data include an unticked checkbox linking to this Privacy Policy.

  • Proof of Consent: Records of consent are stored securely for audit purposes.

6. Cookies & Tracking Technologies

We use cookies to:

  • Operate the site (essential cookies).

  • Analyse usage (performance cookies).

  • Remember your preferences (functional cookies).

  • Deliver personalised ads (advertising cookies — only with consent).

You can manage or withdraw consent via our cookie banner or browser settings. For full details, see our Cookie Policy [link].

7. How We Share Your Personal Information

We never sell your data. We may share it with:

  • Service providers — payment processors, couriers, IT providers.

  • Shopify — our e-commerce platform, which securely hosts our store.

  • Legal authorities — if required by law or to protect our rights.

  • Business partners — for collaborative custom product orders (with your agreement).

All third parties must comply with GDPR and process data only for agreed purposes.

8. Your Rights

If you are in the EEA or UK, you have the right to:

  1. Access your personal data.

  2. Correct inaccurate data.

  3. Request deletion (“right to be forgotten”).

  4. Restrict or object to processing.

  5. Receive a portable copy of your data.

  6. Withdraw consent at any time (without affecting prior lawful processing).

  7. Lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

We will respond to rights requests within 30 days. To exercise your rights, contact us at info@atelierderys.com.

9. Data Retention

We keep personal data only as long as necessary to:

  • Provide our Services.

  • Comply with legal obligations.

  • Resolve disputes and enforce agreements.

10. International Data Transfers

Our store is hosted on Shopify, which may store data in Canada and the United States. We rely on EU Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework to ensure equivalent protection.

11. Security

We use industry-standard measures to safeguard your data against unauthorised access, alteration, disclosure, or destruction.

12. Changes to This Privacy Policy

We may update this policy at any time. The “Last updated” date reflects the latest version. Significant changes will be announced on our website or via email.

13. Contact Us

Atelier de Rys
Tiendstraat 26, Born, 6121 KG, Netherlands
KvK: 97796891
VAT: NL003816537B07
Email: info@atelierderys.com
Phone: +31 6 25657587