Privacy Policy

This Privacy Policy explains how Crimson Atelier — Individual Entrepreneur Tetiana Anatoliivna Karmazina (ФОП Кармазіна Тетяна Анатоліївна), tax ID 2478916267, registered at 11-B Yevhena Sverstiuka Street, Kyiv, Ukraine — collects, uses and protects your personal data when you use crimsonatelier.store. We process personal data in accordance with the Law of Ukraine “On Personal Data Protection” and, where it applies to you, the EU General Data Protection Regulation (GDPR).

We collect only what we need to sell and deliver our pieces: • Contact details — first and last name, email address, phone number. • Delivery details — the Nova Poshta branch or parcel locker you select, and your city. • Order data — items, sizes, colours, quantities, order value and order history. • Account data — if you register: your email, your password (stored only as a cryptographic hash), and optionally date of birth and gender. • Sign-in data — if you use Google sign-in, we receive your name, email address and profile identifier from Google. We never receive your Google password. • Technical data — IP address, browser and device type, and pages visited. We do not collect or store your full bank card number. Card details are entered on the payment provider’s secure page and never reach our servers.

We use your data to: • process, fulfil and deliver your orders; • send transactional email — order confirmations, payment failure notices and password resets; • manage your account, wishlist and order history; • respond to your enquiries; • keep accounting and tax records as required by law; • detect and prevent fraud, and keep the site secure.

We rely on: • Performance of a contract — to process and deliver your order. • Legal obligation — to keep accounting and tax records. • Your consent — where you have given it, for example for marketing email. You may withdraw consent at any time. • Our legitimate interests — site security, fraud prevention and improving our service.

We share data only where necessary to run the store, and we never sell it. Our processors are: • Nova Poshta — recipient name, phone number and chosen branch, in order to deliver your parcel. • WayForPay — to process card payments. They handle your card details directly under PCI DSS. • Resend — to deliver transactional email. • Google — only if you choose to sign in with Google. • Vercel and Neon — website hosting and database. We may also disclose data where required by Ukrainian law or in response to a lawful request from a state authority.

We use cookies that are strictly necessary for the site to work — keeping you signed in, remembering the contents of your cart, and protecting forms against cross-site request forgery. These cannot be switched off without breaking core functionality. You can delete cookies in your browser settings at any time, but you may then be unable to sign in or complete a purchase.

We keep order and accounting records for as long as Ukrainian tax law requires. Account data is kept while your account is active. When you delete your account we remove your personal details, though completed orders are retained for accounting purposes.

You have the right to: • know whether we hold data about you, and to obtain a copy of it; • have inaccurate data corrected; • have your data deleted, subject to our legal retention obligations; • restrict or object to processing; • withdraw your consent at any time; • lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights. You can update most of your details yourself in your account settings. For anything else, write to support@crimsonatelier.store and we will respond within 30 calendar days.

We serve the entire site over HTTPS, store passwords only as cryptographic hashes, and limit access to personal data to those who need it. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

Our store is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy from time to time. The current version is always published on this page together with its effective date. We will announce material changes on the site.

Questions about this policy or about your data: support@crimsonatelier.store Individual Entrepreneur Tetiana Anatoliivna Karmazina (ФОП Кармазіна Тетяна Анатоліївна) 11-B Yevhena Sverstiuka Street, Kyiv, Ukraine