Privacy Policy
Last updated: July 2026
1. Introduction
Sa Fusta Atelier ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at sa-fusta-atelier-380876866120.europe-west1.run.app, use our services, or interact with us through third-party platforms.
By using our services, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Personal Information
We may collect personal information that you provide directly to us, including:
- Name and contact information (email address, phone number, postal address)
- Payment and billing information
- Order history and preferences
- Communications with us (emails, inquiries, commission requests)
- Account credentials if you create an account
2.2 Automatically Collected Information
When you visit our website, we automatically collect certain information, including:
- Device information (browser type, operating system, device type)
- IP address and approximate location
- Pages visited and time spent on our site
- Referring website or source
- Cookies and similar tracking technologies
2.3 Third-Party Platform Data
When you interact with us through third-party platforms (such as Etsy, eBay, Instagram, Pinterest, or other marketplaces), we may receive information provided by those platforms in accordance with their privacy policies and your privacy settings.
3. How We Use Your Information
We use the information we collect to:
- Process and fulfill your orders
- Communicate with you about your orders, inquiries, and custom commissions
- Send you marketing communications (with your consent)
- Improve our website, products, and services
- Analyze usage patterns and trends
- Prevent fraud and enhance security
- Comply with legal obligations
- Manage our presence on third-party marketplaces
Newsletter. If you sign up for Letters from the workshop, we keep your email address, your language, the wording you agreed to and when you agreed and confirmed. We only add you after you confirm by clicking the link we email you. We use your address only to send the newsletter, through our email provider. Every newsletter has a link to unsubscribe, and you can ask us to delete your record at any time.
4. Third-Party Services and Integrations
We use various third-party services to operate our business and provide you with a better experience. These include:
- Payment Processors: Stripe for secure payment processing
- Analytics: Google Analytics to understand website usage
- Advertising: the Meta Pixel and Google Ads, only if you accept marketing cookies, to show our pieces on Facebook, Instagram and Google and measure which ads lead to an order. When you order, they also receive your email and name in hashed (scrambled) form, with your postcode and country, so they can match the order to an ad you saw
- Marketplaces: Etsy, eBay, Wallapop, and other platforms where we list products
- Social Media: Instagram, Pinterest for marketing and engagement
- Cloud Services: Google Cloud Platform for hosting and data storage
- AI Services: For product description generation and image analysis
Each third-party service has its own privacy policy. We encourage you to review their policies to understand how they handle your data.
5. Data Sharing and Disclosure
We may share your information with:
- Service Providers: Third parties who help us operate our business (payment processing, shipping, analytics)
- Marketplace Partners: When fulfilling orders placed through third-party marketplaces
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We do not sell your personal information to third parties for their marketing purposes.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, secure credential storage, and regular security assessments.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Order information is retained for accounting and legal compliance purposes.
8. Your Rights (GDPR)
If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR):
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Request limitation of processing
- Portability: Request transfer of your data to another service
- Objection: Object to certain processing activities
- Withdraw Consent: Withdraw previously given consent
To exercise these rights, please contact us at the email address below.
9. International Transfers
Your information may be transferred to and processed in countries other than your own, including the United States (where some of our service providers are located). We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
10. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us: