Legal
Privacy policy.
Last updated: October 2026
ÉLORA Atelier (“ÉLORA”, “we”, “us”) respects your privacy. This policy explains what we collect when you use this store, why we collect it, and the choices you have. It applies to this website and to orders placed through it.
Information we collect
- Account details — your name, email address, phone number and password (stored as a one-way hash or handled by our authentication provider).
- Order details — delivery and billing addresses, items purchased, order notes and correspondence about your order.
- Payment information — the payment method chosen and payment status. We do not store full card numbers. Bank transfer and cash-on-delivery orders are recorded without card data.
- Technical information — IP address, browser type and pages visited, used in aggregate for security and to keep the store working.
- Marketing preferences — whether you have asked to receive notes from the atelier.
How we use it
We use your information to:
- create and secure your account;
- process, pack, deliver and support your orders;
- send transactional messages such as order confirmations and delivery updates;
- respond to enquiries, returns and repair requests;
- send marketing emails where you have opted in;
- prevent fraud and abuse, and meet our legal obligations.
Legal bases
Where data-protection law requires a legal basis, we rely on performance of a contract (to fulfil your order), our legitimate interests (to run and secure the store), your consent (for marketing emails and optional cookies), and legal obligation (for tax and accounting records).
Cookies and local storage
We use essential cookies to keep you signed in, remember your bag and protect forms against cross-site requests. Optional analytics or marketing cookies are only set with your consent, where required. You can clear cookies in your browser at any time; some parts of the store will then stop working.
Sharing
We share only what is necessary with service providers who help us operate the store: hosting and database providers, authentication and file-storage providers, email delivery and support tools, and delivery carriers. They act on our instructions and are bound by confidentiality obligations. We do not sell your personal information.
Retention
Account and order records are kept for as long as your account is active and for the period required by tax and consumer-protection law afterwards. Marketing preferences are kept until you withdraw consent. Support messages are kept for up to three years.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your information, to port it, and to withdraw consent. To exercise any of these rights, write to [email protected]. You may also complain to your local data-protection authority.
Security
Passwords are never stored in plain text. Access to customer data is limited by role, database row-level security and server-side authorisation. All traffic is encrypted in transit. No system is perfectly secure, but we work to protect your information and will notify you and the relevant authority if a breach affecting your rights occurs.
Children
This store is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us and we will delete it.
International transfers
Our providers may process data in countries other than yours. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses.
Changes
We may update this policy from time to time. The date at the top shows the latest version; material changes will be announced on this page or by email.
Contact
ÉLORA Atelier · 14 Rue des Petits Champs, 75001 Paris · By appointment
[email protected] · +1 (212) 555-0148