ATÉSE Studio Ltd (“ATÉSE,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit atesestudio.com (the “Site”), make a purchase, subscribe to our communications, or otherwise interact with us.

Please read this Policy carefully. If you do not agree with its terms, please do not use the Site.

ATÉSE Studio Ltd is a company incorporated in England and Wales, with its registered office at 251 Gray's Inn Road, London, United Kingdom (company number 16945581). ATÉSE is the “data controller” of the personal data described in this Policy for the purposes of UK and EU data protection law.

Our garments are designed in London and made in Italy. We sell to customers in the United Kingdom, the European Union, and the United States.

Data protection contact: contact@atesestudio.com

This Policy applies to personal data we collect through the Site, through customer service interactions, and through related marketing activities (including email and social media). It does not apply to third-party websites or platforms that may be linked from our Site, which are governed by their own privacy policies.

Identity and contact data: name, email address, postal address, telephone number, and account credentials if you create an account.

Order and transaction data: products purchased, order value, order history, billing and shipping addresses, and payment confirmation details. Full card numbers are never received or stored by us — payments are processed directly by Stripe (see Section 7).

Marketing and communication preferences: your email subscription status, communication preferences, and engagement with our marketing emails (opens, clicks) via Klaviyo.

Technical and usage data: IP address, browser type and version, device information, referring URLs, pages viewed, and time spent on the Site, collected via cookies and similar technologies and through Google Analytics.

Correspondence: records of communications you send us, including customer service inquiries.

We do not knowingly collect any special category data (such as health information, religious beliefs, or biometric data) through the Site.

●      Directly from you — when you place an order, create an account, subscribe to our newsletter, or contact us.

●      Automatically — through cookies and similar tracking technologies as you browse the Site.

●      From our service providers — including order and account data processed via Shopify, payment confirmation from Stripe, and email engagement data from Klaviyo.

We use your personal data for the following purposes, and rely on the legal bases indicated (as required under UK and EU GDPR):

To process and fulfil orders (contract performance) — including payment processing, shipping, customs documentation for international orders, and customer service.

To manage your account (contract performance) — including maintaining order history and preferences.

To send marketing communications (consent, where required, or legitimate interest for existing customers) — including new collection announcements. You may opt out at any time by using the unsubscribe link in any email or by contacting us.

To operate and improve the Site (legitimate interest) — including analysing usage patterns via Google Analytics, diagnosing technical issues, and improving site content and functionality.

To prevent fraud and ensure security (legitimate interest / legal obligation) — including verifying payment and delivery details.

To comply with legal obligations (legal obligation) — including tax, accounting, and customs requirements in the UK, EU, and US.

We use cookies and similar technologies to operate the Site and to understand how it is used. These include:

Essential cookies: required for core Site functionality, such as maintaining your shopping cart and enabling secure checkout (set via Shopify).

Analytics cookies: used by Google Analytics to help us understand how visitors use the Site, on an aggregated and anonymised basis where possible.

Marketing cookies: used by Klaviyo to track email engagement and, where you have consented, to personalise marketing communications.

Where required by UK or EU law, we will request your consent to non-essential cookies via a cookie banner when you first visit the Site. You can manage or withdraw your cookie preferences at any time through the cookie settings tool on the Site or through your browser settings.

We do not sell, rent, or share your personal information — including your mobile opt-in and SMS consent data — with third parties for advertising purposes. We share personal data only with the service providers below, each acting under contractual data protection obligations, solely to operate the Site and fulfil orders:

Shopify — our e-commerce platform, which hosts the Site and processes order, account, and customer data.

Stripe — our payment processor, which handles payment card data directly. Stripe is PCI-DSS compliant and acts as an independent controller for payment processing and fraud prevention purposes.

Klaviyo — our email and SMS marketing platform, which processes contact, opt-in, and engagement data solely to send marketing and transactional messages on our behalf.

Google Analytics — used to analyse Site traffic and usage.

Shipping and logistics partners — to fulfil and deliver orders, including customs authorities for international shipments.

Professional advisers and authorities — including legal, tax, and regulatory bodies, where required by law.

We do not sell, rent, or share your personal information with any third party for advertising purposes, under any circumstances.

As a UK-based company selling to customers in the EU and the United States, your personal data may be transferred to and processed in countries outside the UK or European Economic Area (EEA), including the United States, where our service providers (Shopify, Stripe, Klaviyo, Google) operate infrastructure.

Where we transfer personal data outside the UK or EEA, we rely on appropriate safeguards recognised under UK and EU data protection law, including the UK International Data Transfer Addendum, EU Standard Contractual Clauses, or the EU-U.S. and UK-U.S. Data Privacy Framework where applicable to the recipient.

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, including to satisfy legal, accounting, or reporting requirements. Order and transaction records are retained for 6 years from the date of the transaction, in line with UK tax and accounting record-keeping requirements. Marketing data is retained until you unsubscribe or request deletion, and account data is retained for as long as your account remains active plus 2 years of inactivity, after which it is deleted or anonymised.

If you are located in the UK or the EEA, you have the following rights under UK GDPR and/or EU GDPR, subject to certain exceptions:

●      Access — request a copy of the personal data we hold about you.

●      Rectification — request correction of inaccurate or incomplete data.

●      Erasure — request deletion of your personal data in certain circumstances.

●      Restriction — request that we limit how we use your data.

●      Portability — request your data in a portable format.

●      Objection — object to processing based on legitimate interest, including direct marketing.

●      Withdraw consent — where processing is based on consent, at any time, without affecting prior lawful processing.

To exercise any of these rights, contact us at contact@atesestudio.com. If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or, if you are in the EU, with your local data protection authority.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the right to know what personal information we collect, to request deletion of your personal information, to correct inaccurate information, and to opt out of the “sale” or “sharing” of personal information. As stated in Section 7, we do not sell or share your personal information with third parties for cross-context behavioural advertising or any other advertising purpose.

Residents of other US states with applicable privacy laws may have similar rights. To exercise any of these rights, contact us at contact@atesestudio.com. We will not discriminate against you for exercising your privacy rights.

The Site is not directed to individuals under the age of 18, and we do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete it promptly.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including relying on the security measures of our PCI-DSS compliant payment processor and our hosting provider. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

The Site may contain links to third-party websites or social media platforms, including Instagram. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing any personal data.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Last updated” date at the top of this Policy indicates when it was last revised. Material changes will be notified through the Site or by email where appropriate.

If you have questions about this Privacy Policy or how we handle your personal data, please contact us at:

ATÉSE Studio Ltd

Email: contact@atesestudio.com

Website: atesestudio.com

Instagram: @atese.studio