Privacy Policy

Privacy Policy

Last updated: June 7, 2026

Introduction
This Privacy Policy explains how Aethereus Atelier (“we”, “us”, “our”) collects, uses, discloses, and protects personal information when you visit or make purchases from https://www.yourstore.com (the “Site”) or interact with our services. Replace bracketed placeholders with your company details.

  1. Controller & contact information
  • Controller: 
  • Privacy contact: 
  1. Personal data we collect
    We collect personal data you provide directly and data collected automatically:

a) Information you provide

  • Account details: name, email, password, phone number, billing/shipping address.
  • Order information: purchased items, size, personalization details, payment card tokens (not full card data), invoices.
  • Communications: messages, reviews, feedback, support requests.
  • Marketing preferences and consent choices.

b) Payment information
We use third‑party payment processors (e.g., Shopify Payments, Stripe, PayPal). We do not store full payment card numbers on our servers; payment details are processed by the payment provider and may be stored by them in accordance with their policies.

c) Device, usage & analytics data

  • Device and browser information, IP address, approximate location, timestamps, pages viewed, referrer, and interaction data collected via cookies and analytics tools.
  • Order and cart history, referral/source data, and purchase behavior for fraud prevention and business analytics.

d) Third‑party data

  • Information from social sign‑on (if used), advertising networks, identity verification services, or publicly available sources where permitted.
  1. How we use personal data (purposes and legal bases)
    We use personal data for the following purposes and legal bases:
  • To perform the contract (process and fulfill orders, shipping, returns, refunds). (Legal basis: performance of a contract)
  • To provide account services (create and manage your account, authenticate logins). (Performance of a contract / legitimate interest)
  • To communicate (order confirmations, customer service, updates). (Performance of a contract / legitimate interest)
  • To process payments and prevent fraud. (Performance of a contract / legitimate interest / legal compliance)
  • For marketing and personalization (newsletters, promotions, personalized recommendations) where you have consented; otherwise only with a lawful basis such as legitimate interest after balancing. (Consent / legitimate interest)
  • For analytics and site improvement (usage analytics, A/B testing). (Legitimate interest)
  • To comply with legal obligations (tax, customs, court orders) and law enforcement requests. (Legal compliance)
  • For recordkeeping, audits, and dispute resolution. (Legitimate interest / legal compliance)
  1. Cookies and tracking technologies
    We and third parties use cookies and similar technologies to enable the Site, remember preferences, analyze usage, and deliver marketing. Details are in our Cookie Policy and Your Privacy Choices pages.

  2. Sharing personal data with third parties
    We share personal data with service providers and other recipients as needed to provide services, including:

  • Payment processors and fraud prevention services.
  • Fulfillment, shipping and logistics providers.
  • Cloud hosting and IT providers (e.g., Shopify).
  • Analytics and marketing providers (e.g., Google Analytics, advertising platforms).
  • Professional advisors (legal, accounting).
  • Law enforcement, regulators, or courts when required by law.
  • Third parties in connection with a corporate transaction (sale, merger, asset transfer) subject to confidentiality and legal protections.

We do not sell personal information for monetary consideration. We may engage subprocessors; where required by law, we will obtain appropriate data‑processing agreements and safeguards.

  1. International transfers
    Data may be processed in countries outside yours (e.g., United States, other locations of service providers). We use appropriate safeguards for transfers (standard contractual clauses, adequacy decisions, or other lawful mechanisms) where required by law.

  2. Data retention
    We retain personal data as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Typical retention periods: order records and tax invoices (usually 4–10 years depending on jurisdiction), account data while account is active, analytics aggregated or pseudonymized data for as long as useful.

  3. Your rights (where applicable)
    Subject to local law, you may have rights including:

  • Access: request a copy of personal data we hold.
  • Correction: request correction of inaccurate or incomplete data.
  • Deletion: request deletion of personal data (subject to legal and contractual exceptions).
  • Restriction: request restriction of processing in certain circumstances.
  • Portability: request a machine‑readable copy of personal data provided by you.
  • Objection: object to processing based on legitimate interest or for direct marketing.
  • Withdraw consent: where processing is based on consent, withdraw consent at any time.
    To exercise rights, contact privacy@[yourstore.com]. We may require verification and will respond within applicable legal timeframes. Some rights may be limited by legal obligations (e.g., tax recordkeeping).
  1. Marketing communications and opt‑out
    We will send marketing emails only with your consent where required. You can opt out of marketing at any time by using the unsubscribe link in emails or adjusting your preferences in your account. Even if you opt out, we may still send non‑promotional service messages (order confirmations, safety notices).

  2. Data security
    We implement administrative, technical, and physical measures to protect personal data against unauthorized access, disclosure, alteration or destruction (e.g., encryption in transit, access controls, regular security reviews). No system is completely secure; we will notify affected individuals and authorities as required by law in the event of a data breach.

  3. Children’s privacy
    The Site is not directed to children under 16. We do not knowingly collect personal data from children under 16; if we learn we have collected such data, we will delete it in accordance with applicable law.

  4. Automated decision‑making and profiling
    We may use automated systems for fraud prevention, order screening, marketing personalization, and analytics. These systems do not make solely automated decisions with legal or similarly significant effects without human review, except as required for fraud prevention. You may request information about profiling and object where rights apply.

  5. Legal bases for processing (European users)
    If you are an EU/EEA user, our lawful bases include: contract performance, consent (for marketing and some cookies), legitimate interests (analytics, fraud prevention, service improvement) and compliance with legal obligations.

  6. Third‑party links and social features
    The Site may contain links, embeds or social widgets that direct you to third‑party sites. This Policy does not cover their practices. Review third‑party privacy policies before providing personal information.

  7. Changes to this Privacy Policy
    We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will post the revised policy on the Site with a new “Last updated” date. Material changes may be communicated by email where required.

  8. Dispute resolution & supervisory authority (EU users)
    If you are in the EU/EEA and have concerns about our processing, you may file a complaint with your local data protection supervisory authority. Contact details are available on the supervisory authority’s website.

  9. Contact us
    For privacy inquiries, to exercise rights, or to report concerns, contact:

  • Email: