Polityka prywatności

Privacy Policy

Last updated: September 30, 2026

This Privacy Policy explains how Atelier Cordelle collects, uses, shares and protects personal data when you visit https://cordelle-2.myshopify.com, place an order or contact us.

1. Who is responsible for your data

Data controller: Atelier Cordelle
Address: Vocabolo Raggiolo 71, 06033 Cannara (PG), Italy
Privacy contact: support@ateliercordelle.com

The store is hosted by Shopify, which processes data on our behalf to run the store and the checkout.

2. Data we collect

  • Identification and contact data: name, email, phone number, shipping and billing address.
  • Order data: items purchased, amounts, discounts applied, dates, order status, returns and refunds.
  • Payment data: payment method and transaction status. Card details are processed by the payment providers. We do not store complete card numbers.
  • Account data: if you create an account, your login email and order history.
  • Communication data: messages, photos and information you send to our support.
  • Technical and usage data: IP address, device and browser type, approximate location, pages viewed, products viewed or added to the bag, and referring site, collected through cookies, pixels and similar technologies.
  • Marketing preferences: whether you subscribed to or unsubscribed from our communications.

We collect data directly from you, automatically from your device, and from service providers such as payment, shipping and fraud prevention partners.

3. How we use your data and legal bases

  • To perform the contract: process orders and payments, ship and track parcels, handle returns, exchanges and refunds, and answer your requests.
  • To comply with legal obligations: tax, accounting, customs and consumer protection rules.
  • For our legitimate interests: prevent fraud and abuse, keep the store secure, respond to payment disputes, and measure and improve the store.
  • With your consent: send marketing emails or messages, and use non-essential cookies and advertising pixels where consent is required by law. You can withdraw consent at any time.

4. Cookies, pixels and similar technologies

We use:

  • Essential cookies: needed for the bag, checkout, login and security.
  • Shopify cookies: the platform that hosts the store may set cookies to run checkout, remember your session, prevent fraud, and measure store traffic in Shopify's own reports.

This store does not run third-party advertising pixels. If an advertising or analytics app is connected later, this section will name it, and where the law requires a choice it will run only after you accept non-essential cookies.

A banner at the bottom of the store lets you accept all cookies or keep essential cookies only. You can also block cookies in your browser settings. Blocking essential cookies may prevent the bag and checkout from working.

5. Who we share data with

  • Shopify, as the e-commerce platform.
  • Payment providers and financial institutions, to process payments and disputes.
  • Carriers, logistics and fulfillment partners, to deliver orders and process returns.
  • Email, customer support and marketing tools.
  • Analytics, advertising, security and fraud prevention providers.
  • Accounting, tax and legal advisers, when necessary.
  • Public authorities or courts, when required by law.

We share only the data needed for each purpose. We do not sell personal data for money, and we do not share it with advertising networks. If that changes, section 9 explains how to opt out.

6. International transfers

We serve customers worldwide and use providers located in different countries, so your data may be processed outside your country of residence. When data of people in the European Economic Area, the United Kingdom or Switzerland is transferred to countries without an adequacy decision, we rely on appropriate safeguards such as the Standard Contractual Clauses.

7. How long we keep data

  • Order, invoice and transaction data: for the period required by tax, accounting and consumer laws.
  • Support messages: for the time needed to resolve the case and to handle possible claims.
  • Marketing data: until you unsubscribe or withdraw consent.
  • Cookies and technical data: according to the duration of each cookie and your choices.

8. Your rights in the EEA, United Kingdom and Switzerland (GDPR)

You have the right to:

  • access your personal data and receive a copy;
  • correct inaccurate or incomplete data;
  • request erasure of your data;
  • restrict or object to processing, including objecting to direct marketing at any time;
  • data portability;
  • withdraw consent at any time, without affecting processing already carried out;
  • lodge a complaint with the data protection authority of your country.

9. Your rights in the United States (CCPA/CPRA and other state laws)

Depending on the state where you live, including California, you may have the right to:

  • know what personal information we collect, use and disclose, and receive a copy;
  • correct inaccurate personal information;
  • delete your personal information, with the exceptions allowed by law;
  • opt out of the "sale" or "sharing" of personal information and of targeted advertising;
  • not be discriminated against for exercising these rights.

To opt out of sale, sharing or targeted advertising, use the "Your Privacy Choices" page linked in the footer of the store. If you visit the store with the Global Privacy Control signal enabled, we treat it as an opt-out request for that browser and device.

We do not use or disclose sensitive personal information for purposes other than those allowed by law, and we do not knowingly sell or share the personal information of people under 16.

10. How to exercise your rights

Write to support@ateliercordelle.com with the subject "Privacy request". We may ask for additional information to confirm your identity before acting on the request. We respond within the period required by the applicable law. You may use an authorized agent where the law allows it. If we refuse a request, you may ask us to review the decision by replying to our answer.

11. Marketing communications

We send marketing emails or messages only when you subscribed or when the law allows it. Every message includes an unsubscribe link, and you can also ask us to remove you by email. Order and shipping notifications are service messages and are sent regardless of marketing preferences.

12. Security

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration or disclosure. No method of transmission or storage on the internet is completely secure, so we cannot guarantee absolute security.

13. Children

The store is not directed to people under 18, and we do not knowingly collect their personal data. If you believe a minor has given us personal data, write to us and we will delete it.

14. Automated decisions

We do not make decisions based solely on automated processing that produce legal effects for you. Payment and fraud prevention providers may use automated systems to detect suspicious transactions, which can result in an order being declined or reviewed. You may ask us for a human review.

15. Changes to this policy

We may update this policy to reflect legal, technical or operational changes. The version in force is the one published on this page, with the date of the last update.

16. Contact

Atelier Cordelle
Atelier Cordelle
Vocabolo Raggiolo 71, 06033 Cannara (PG), Italy
Email: support@ateliercordelle.com