1. Introduction

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit our website, place an order through our webshop, communicate with us, or otherwise interact with us.

We are established in the Netherlands and process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and related Dutch privacy legislation.

By using our website or purchasing from us, you acknowledge that your personal data will be processed as described in this Privacy Policy.

2. Who We Are

Atelier UMA is the controller of the personal data described in this Privacy Policy.

Our details are:

Atelier UMA
Erasmusweg 22
4834 AA Breda
The Netherlands
Email: info@atelieruma.com
Website: www.atelieruma.com

If you have any questions about this Privacy Policy or the way we process your personal data, you can contact us at info@atelieruma.com.

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Data you provide when placing an order

When you place an order through our webshop, we may collect:
• first and last name
• billing address
• shipping address
• email address
• phone number
• order details
• purchased products
• payment-related information
• delivery-related information
• any information you provide in connection with your order

3.2 Transaction and order data

We may process:
• order number
• invoice information
• payment status
• refund status
• shipping status
• fulfillment information
• communication about your order

3.3 Technical and website usage data

When you visit our website, we and our service providers may collect technical information such as:
• IP address
• browser type and browser version
• device type
• operating system
• language settings
• referring URL
• pages visited
• time spent on pages
• interaction data
• cookie preferences
• consent choices

3.4 Embedded content and third-party interaction data

If our website displays embedded content or third-party social media content, those third parties may collect information about your interaction with that content, subject to their own privacy and cookie practices.

3.5 Customer service and correspondence data

If you contact us, we may process:
• your name
• your email address
• your phone number, if shared
• the content of your message
• any records of correspondence relating to your order or request

4. How We Collect Personal Data

We collect personal data:
• directly from you when you place an order
• when you browse our website
• through cookies and similar technologies
• through our webshop and e-commerce platform provider
• through payment processing and delivery workflows
• through your communications with us
• through third-party services that support our webshop functionality, logistics, and website operation

5. Why We Process Your Personal Data

We process personal data for the following purposes:

5.1 To process and fulfill orders

We use your data to:
• process your purchase
• confirm your order
• arrange payment processing
• prepare and ship your order
• communicate about delivery, returns, or order-related issues
• keep accounting and transaction records

5.2 To perform our contract with you

We process your personal data where necessary to enter into and perform our agreement with you.

5.3 To comply with legal obligations

We may process and retain certain personal data in order to comply with applicable legal, tax, accounting, fraud prevention, consumer protection, and administrative obligations.

5.4 To operate, maintain, and improve our website

We may use technical and usage data to:
• ensure website functionality
• remember cookie preferences
• secure our website
• monitor performance
• improve user experience
• understand general website use patterns

5.5 To protect our business and prevent misuse

We may process personal data where necessary to:
• detect fraud or abuse
• protect our systems and website
• enforce our legal rights
• defend claims
• keep records relevant to disputes or complaints

6. Legal Bases for Processing

Under the GDPR, we rely on one or more of the following legal bases:

6.1 Performance of a contract

We process personal data where necessary to perform a contract with you or to take steps at your request before entering into a contract, including order handling, payment support, and delivery.

6.2 Legal obligation

We process personal data where necessary to comply with legal obligations, including tax, accounting, and consumer law obligations.

6.3 Legitimate interests

We may process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. These interests may include:
• operating our webshop
• securing our website and systems
• preventing fraud
• handling disputes or complaints
• improving website functionality and user experience
• maintaining business records

6.4 Consent

Where required by law, we rely on your consent, including for certain cookies and similar technologies. Where processing is based on consent, you may withdraw that consent at any time.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small text files placed on your device when you visit a website. They help websites function properly, remember settings, improve performance, and in some cases measure usage or support third-party content.

7.1 Cookie categories

We may use the following categories of cookies:

Strictly necessary cookies
These cookies are necessary for the website and webshop to function properly. They may enable essential functions such as page navigation, checkout, security, shopping cart functionality, and consent management.

Preference cookies
These cookies remember your settings and choices, such as language or cookie preferences.

Statistics or analytics cookies
These cookies help us understand how visitors use the website so we can improve performance, content, and usability.

Marketing or tracking cookies
These cookies may be used by third-party services or embedded content providers to track browsing behavior across websites or to personalize content or advertising.

7.2 Consent management

We use a cookie consent tool to manage cookie preferences. When you first visit our website, you may be asked to choose which non-essential cookies you allow.

You can change or withdraw your cookie preferences at any time through the cookie settings available on our website.

7.3 Third-party cookies

Our website may use third-party cookies or similar technologies in connection with:
• our e-commerce platform
• payment processing
• embedded content
• social media content
• website functionality
• analytics or performance tools, where applicable

We do not guarantee that all third-party services operate identically at all times, and their cookie practices may be subject to change.

7.4 Browser settings

You can also manage cookies through your browser settings. Please note that disabling certain cookies may affect website functionality, including checkout and embedded content.

8. E-Commerce Platform and Checkout

Our webshop is operated through a third-party e-commerce platform provider.

When you place an order, your data may be processed through that platform in order to:
• manage the webshop
• support checkout
• process orders
• administer transactions
• facilitate fulfillment and store operations

This may include storage of customer, transaction, and technical data required for the operation of the webshop.

9. Payments

When you make a purchase, your payment-related data may be processed by external payment service providers.

We do not store full payment card details ourselves unless explicitly stated otherwise. Payment transactions are generally handled by specialized third-party payment providers acting under their own privacy and security standards.

We may receive limited payment-related information such as:
• payment confirmation
• transaction reference
• payment status
• partial billing information where necessary for order administration

10. Shipping and Fulfillment

To deliver your order, we may share relevant personal data with shipping, logistics, fulfillment, or delivery partners.

This may include:
• your name
• delivery address
• contact details
• order reference
• shipment-related details

We share only the information reasonably necessary to complete delivery and related customer service.

11. Embedded Content and Third-Party Services

Our website may include or integrate content, functions, or services provided by third parties, including social media or other external content providers.

When you interact with such content, those third parties may collect personal data, technical data, or cookie data in accordance with their own privacy policies.

We do not control the privacy practices of third-party providers and encourage you to review their own privacy and cookie information where relevant.

12. Sharing of Personal Data

We may share your personal data with third parties where reasonably necessary for the purposes described in this Privacy Policy, including:
• our webshop and website service providers
• payment service providers
• shipping, logistics, and fulfillment partners
• cookie consent management providers
• hosting and technical service providers
• embedded content and third-party platform providers
• professional advisers where necessary
• authorities or regulators where legally required

We do not sell your personal data as part of ordinary business operations.

13. International Transfers

Some of our service providers or third-party partners may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred internationally, we take steps to ensure that such transfers are made in accordance with applicable data protection laws, including where appropriate by relying on:
• adequacy decisions
• standard contractual clauses
• other legally recognized safeguards

14. Data Retention

We keep personal data no longer than necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

In general:
• order and transaction data may be retained for as long as necessary for contract performance, customer service, and legal, tax, or accounting obligations
• correspondence may be retained for as long as necessary to handle requests, disputes, or follow-up matters
• technical and cookie-related data may be retained according to the relevant cookie duration, system configuration, or legal requirements
• data required for legal claims, compliance, or dispute handling may be retained for a longer period where necessary

Because retention periods may differ depending on the type of data and legal context, exact retention periods are determined case by case where appropriate.

15. Security

We take reasonable technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction.

However, no website, online environment, or electronic transmission can be guaranteed to be completely secure. For that reason, we cannot guarantee absolute security.

16. Your Rights

Subject to applicable law, you may have the right to:
• request access to your personal data
• request correction of inaccurate personal data
• request deletion of your personal data
• request restriction of processing
• object to certain processing
• withdraw consent where processing is based on consent
• request data portability where applicable
• lodge a complaint with a supervisory authority

If you wish to exercise any of these rights, please contact us at info@atelieruma.com.

We may ask for additional information to verify your identity before responding to your request.

If you are located in the Netherlands, you may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

17. Children

Our website, products, and services are not directed at children under the age of 16.

We do not knowingly collect personal data directly from children under 16. If you believe that personal data of a child has been provided to us unlawfully, please contact us so we can take appropriate action.

18. Third-Party Websites

Our website may contain links to third-party websites or services.

This Privacy Policy does not apply to third-party websites, platforms, or services. We are not responsible for their privacy practices, content, or policies.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any updated version will be posted on our website and will take effect from the date of publication unless otherwise stated.

We encourage you to review this Privacy Policy periodically.

20. Contact

If you have any questions about this Privacy Policy or about the processing of your personal data, please contact:

Atelier UMA
Erasmusweg 22
4834 AA Breda
The Netherlands
Email: info@atelieruma.com
Website: www.atelieruma.com