Privacy Policy
atelierreview.com collects as little as it can. This page explains what, why, and how to ask us about your data.
Last updated
1. Who we are
This policy covers atelierreview.com (“we”, “us”). Under India's Digital Personal Data Protection Act 2023 we act as Data Fiduciary; under GDPR and UK GDPR, as Controller, for the data we process.
2. What we collect
- Automatically: anonymised IP address, device and browser, pages visited, referrer and approximate region, through server logs and, when switched on, analytics.
- Storage on your device: a theme preference (light or dark) in your browser's local storage. See Cookies.
- If you contact us: your name, email address and message.
3. Why (lawful bases)
Legitimate interests (running, securing and improving the site); consent (non-essential cookies and personalised ads, where required); legal obligation.
4. Who else handles data
Cloudflare (hosting, security and the Turnstile spam check on our form). When switched on: Google Analytics 4 and Google AdSense (see Cookies; ad personalisation can be opted out of at adssettings.google.com). We will update this page before either is enabled.
5. Transfers
Data may be processed outside your country, for example in the United States, under standard contractual clauses or applicable frameworks.
6. Retention
Analytics data: up to 14 months at user level. Contact messages: up to 3 years.
7. Your rights
DPDP: information, correction, erasure, grievance redressal and nomination. GDPR and UK GDPR: access, rectification, erasure, restriction, objection, portability and the right to complain to a supervisory authority. US state rights: notice and opt-out of sale or sharing; we honour Global Privacy Control where feasible.
8. How to exercise your rights or raise a grievance
Use the contact form and choose “Privacy / data request / grievance”. We acknowledge requests within 7 days and resolve them within 30 days, or sooner where the law requires.
9. Children
atelierreview.com is not directed at children and we do not knowingly collect their data. DPDP requires verifiable parental consent for anyone under 18.
10. Security and changes
We use reasonable measures; no method is completely secure. The “last updated” date shows when this policy changed.
11. Governing law
India. See the Terms for dispute resolution.