Privacy Policy

KSM Atelier (“KSM Atelier”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you visit our website, create an account, place an order, contact us, or otherwise interact with our services.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and all other applicable data protection laws.

The Data Controller responsible for processing your personal data is:

KSM Atelier
Via Stefano Viale 50A
12010 Roccasparvera (CN)
Italy

Email: info@ksmatelier.com

Depending on your interaction with our website, we may collect the following categories of personal data.

Identity Data

• First name
• Last name
• Title (where applicable)
• Date of birth (if voluntarily provided)

Contact Data

• Billing address
• Shipping address
• Email address
• Telephone number

Payment Data

Payments are securely processed by trusted payment providers, including Shopify Payments and Stripe. KSM Atelier does not store complete payment card numbers or payment security codes.

Transaction Data

• Orders placed
• Purchases
• Returns
• Refunds
• Payment status

Technical Data

• IP address
• Browser type and version
• Device information
• Operating system
• Language settings
• Time zone
• Website usage data

Profile Data

• Account information
• Purchase history
• Preferences
• Wishlist (where available)
• Customer feedback
• Survey responses

Marketing Data

• Newsletter subscriptions
• Communication preferences
• Marketing consent records

We collect personal data in the following ways.

Information You Provide

You may provide personal data when you:

• place an order;
• create an account;
• subscribe to our newsletter;
• contact customer support;
• complete forms on our website;
• participate in promotions or surveys.

Automatically Collected Information

When you browse our website, we automatically collect certain technical information using cookies and similar technologies.

For further information, please consult our Cookie Policy.

Information from Third Parties

We may receive information from trusted third-party service providers involved in payment processing, fraud prevention, shipping, analytics and website operation.

Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

We share personal data only where necessary to operate our business or where required by law.

Recipients may include:

• Shopify (website hosting and ecommerce platform)
• Shopify Payments and Stripe (payment processing)
• Shipping and logistics providers
• IT infrastructure and cloud hosting providers
• Customer service providers
• Fraud prevention and cybersecurity providers
• Google LLC (Google Analytics 4 — web analytics, subject to analytics consent)
• Professional advisers
• Tax authorities, regulators and other public authorities where legally required

All third-party service providers are required to process your personal data securely and only in accordance with our instructions and applicable law.

Some of our service providers may process personal data outside the European Economic Area (“EEA”), including in countries that may not provide the same level of data protection.

In particular, the following providers operate or store data in the United States:

• Shopify Inc. (Canada and United States)
• Stripe, Inc. (United States)
• Google LLC — Google Analytics 4 (United States)

Whenever international transfers occur, we implement appropriate safeguards as required by the GDPR, including:

• European Commission Standard Contractual Clauses (SCCs);
• adequacy decisions adopted by the European Commission; or
• other legally recognised transfer mechanisms.

We maintain appropriate technical and organisational security measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Access to personal data is restricted to authorised personnel and trusted service providers who require such information to perform their duties.

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law.

Typical retention periods include:

• Order and transaction records: up to 10 years where required for tax and accounting purposes.
• Customer accounts: until the account is deleted or becomes inactive for a reasonable period.
• Marketing information: until consent is withdrawn or you unsubscribe.
• Technical information: in accordance with our Cookie Policy and applicable legal requirements.

When personal data is no longer required, it will be securely deleted or anonymised.

Subject to applicable law, you have the right to:

• access your personal data;
• request correction of inaccurate or incomplete information;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• request data portability;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with your competent data protection authority.

We will respond to requests without undue delay and within the time limits established by applicable law.

Certain personal data is necessary for us to fulfil our contractual obligations, including processing orders, delivering products and providing customer support.

If you choose not to provide mandatory information, we may be unable to process your order or provide certain services.

KSM Atelier does not make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on individuals.

Our website uses cookies and similar technologies to ensure proper functionality, improve user experience, analyse website performance and, where applicable, personalise content and marketing.

For complete information regarding the cookies we use and how to manage your preferences, please consult our Cookie Policy.

Our website is not directed to children under the age of 16.

We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to remove such information where required.

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements or services.

The revised version will always be published on this page together with the updated revision date.

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:

KSM Atelier
Via Stefano Viale 50A
12010 Roccasparvera (CN)
Italy

Email: info@ksmatelier.com

If you are not satisfied with our response, you have the right to lodge a complaint with the competent data protection authority in your country of residence or where the alleged infringement occurred.