1. Data controller
Atelier Hecate, house of esoteric creations — contact@atelierhecate.com.
2. Data collected
We collect only the data needed to process your order and manage the customer relationship: name, shipping address, email address, order history. Payment data is processed by our payment providers and never stored on our servers.
3. Purposes
- Order processing and shipping
- Customer service and return handling
- Newsletter (only with your explicit consent)
- Website improvement (anonymized statistics)
4. Legal basis
Processing is based on contract performance (orders), consent (newsletter) and legitimate interest (service improvement).
5. Retention
Order data is kept for 10 years (accounting obligation). Newsletter data until unsubscription. Session cookies are deleted when the browser closes.
6. Cookies
The website uses technical cookies (cart, session) required for the store to function, and anonymized audience measurement cookies if enabled.
7. Your rights
Under the GDPR (EU Regulation 2016/679), you have rights of access, rectification, erasure, restriction, objection and portability. To exercise them: contact@atelierhecate.com. You may also lodge a complaint with the CNIL (cnil.fr).
8. Security
Data is hosted by Pressable on secure servers, accessible only to authorized persons.
9. Contact
For any question: contact@atelierhecate.com.