Privacy Policy

Last updated: 22 January 2026

Birmingham Atelier ("we", "us", or "our") operates this online store and website (birminghamatelier.co.uk), including related content, features, tools, products, and services (collectively: the "Services"). Our Services are hosted on the Shopify platform, which enables us to run our store and process your orders.

This Privacy Policy explains how we collect, use, and share your personal data when you visit or use our Services, make a purchase, or communicate with us. By using our Services, you acknowledge that you have read this Policy and understand how we process your information.

1. Data We Collect and Process

"Personal data" refers to information that identifies you or can reasonably be linked to you. Depending on how you use our Services, we may process the following categories:

• Contact and Delivery Information: First and last name, delivery and/or billing address, phone number, and email address.

• Payment and Transaction Data: Payment method, payment confirmation, and transaction details. Please note: card details are generally processed by authorised payment service providers; we do not store full card data.

• Order Information: Items in your basket, products purchased, order history, and any returns, refunds, or cancellations.

• Support Communication: Content of your messages, requests, and reports of any issues.

• Technical and Usage Data: IP address, device type, browser, operating system, cookie identifiers, and site interactions (e.g., pages visited, clicks, time spent, and referral sources).

2. Sources of Data

We may obtain data:

• Directly from you: Through purchases, contact forms, or email.

• Automatically: Through your use of the website (cookies, logs).

• From service providers: Payment processors, delivery services, analytics, and IT providers.

• From marketing partners: Such as campaign measurement tools, in accordance with your preferences/consent.

3. How We Use Your Data (Purpose and Legal Basis)

We process your data lawfully, transparently, and for specific purposes:

• Order Fulfillment: Processing orders, payments, packaging, delivery, and communicating order status. Legal basis: Performance of a contract.

• Website Improvement: Maintaining store functionality, analytics, and performance statistics. Legal basis: Legitimate interest and/or consent (for specific cookies).

• Marketing and Advertising: Newsletters and promotions (where opted-in), personalised ads, and remarketing. Legal basis: Consent and/or legitimate interest.

• Security and Fraud Prevention: Protecting accounts, payments, and ensuring safe site usage. Legal basis: Legitimate interest and/or legal obligation.

• Legal Obligations: Accounting/tax requirements and responding to requests from authorities. Legal basis: Legal obligation.

4. Disclosure of Your Data

We share data only when necessary to provide our services and in accordance with regulations:

• Shopify (our store platform) and related technical services.

• Payment Providers for transaction processing.

• Courier and Logistics Services for delivery.

• Marketing and Analytics Partners for campaign optimisation, subject to your consent.

• Authorities when legally required to protect our rights.

• We do not sell your personal data as "customer lists".

5. Relationship with Shopify

Our store runs on the Shopify platform. Shopify may process data to provide and improve their platform, and in some cases acts as an independent controller according to their own rules.

6. Cookies and Similar Technologies

We use cookies for:

• Essential operations: Basket functionality, checkout, and security.

• Performance and Analytics: Improving how our site works.

• Marketing: Remarketing efforts (only where permitted by your consent).

• You can manage your choices via our cookie banner or browser settings.

7. Third-Party Links

Our site may contain links to third-party websites. We are not responsible for their privacy policies and recommend you read them independently.

8. Children’s Data

Our Services are not intended for children. We do not knowingly collect data from minors. If you believe a child has provided us with data, please contact us for deletion.

9. Security and Retention

We apply appropriate technical and organisational measures, though absolute online security cannot be guaranteed. We retain data as long as necessary for contract fulfillment, legal obligations (e.g., accounting), or dispute resolution.

10. Your Rights

In accordance with data protection laws (UK GDPR), you may have the following rights:

• The right to access, correct, or delete your data.

• The right to restrict or object to processing (e.g., direct marketing).

• The right to data portability.

• To opt-out of marketing: Use the "unsubscribe" link in any promotional email.

• To lodge a complaint: You have the right to contact the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

11. International Data Transfers

Some service providers (including Shopify) may process data outside of the UK/EEA. In such cases, appropriate safeguards are applied, including standard contractual clauses.

12. Changes to This Policy

We may update this Policy occasionally. The updated version will be posted on the site with a revised "Last updated" date.

13. Contact Us

For privacy questions or to exercise your rights: Email:

info@birmingham-atelier.uk