Privacy Policy

What we collect and why

Inquiry form: name, email, piece type, metal and stone preferences, an optional requested date, your reference-image preference and your project description — used solely to respond to your inquiry and prepare design proposals. Website image upload is currently disabled.

WhatsApp: if you contact us there, we process your phone number and message content to conduct the design conversation. We do not add you to marketing broadcasts; we reply only within your conversation.

Analytics: with your consent, we record pseudonymous usage events (page views, button clicks, traffic source). Without consent, no analytics scripts are loaded.

Anti-abuse and consent records: when you submit the inquiry form, your IP address is processed transiently in memory to derive a keyed-HMAC pseudonymous identifier used for rate limiting and abuse prevention. The raw IP address is not written to the inquiry record. We store the privacy-consent text you accepted, its policy version and the UTC timestamp, together with that identifier.

Reference images

Website image upload is currently disabled. After submitting an inquiry, you may choose to share reference images through WhatsApp using your inquiry code.

Images shared through WhatsApp are processed through that service and are subject to the final privacy notice and applicable processor terms. We do not publish them without separate, explicit permission.

If a first-party upload feature is enabled later, its security controls, retention period, deletion process and backup lifecycle will be disclosed before collection.

Analytics and cookies

We use a privacy-respecting analytics system that does not set cookies and does not store your raw IP address; a pseudonymous session identifier is derived from your IP and browser. Whether it may run before consent is determined by the rules of your market — until our counsel finalises this, it runs only after you accept.

Advertising pixels (Google, Meta) are disabled by default and load only if you accept non-essential cookies.

The consent banner offers “Accept” and “Reject non-essential” with equal prominence. Your choice is stored on your device and can be changed by clearing site data.

Who processes your data

Transactional email: Resend delivers inquiry confirmations and our replies.

Inquiry storage: our own system running on a virtual private server operated for us (a Directus administration interface is planned and will be listed here when enabled).

Analytics: Umami, self-hosted on the same server; it runs only after you accept analytics.

DNS and network: Cloudflare provides DNS resolution for this domain; if proxy/CDN features are enabled later, Cloudflare also processes traffic as our processor.

Messaging: WhatsApp (Meta), if you choose to contact us there.

Each processes data under its applicable terms and safeguards; a current list with retention periods is maintained in our records of processing activities. We do not sell your personal data, and we do not share it for third-party marketing.

How long we keep data

Inquiry records and correspondence: up to 24 months after our last exchange, unless a project or a legal obligation requires longer. (Draft schedule — final values are fixed in the final version of this policy.)

Undelivered inquiry spool files (a safety net used only if email delivery fails): deleted after successful delivery; files that need manual review are kept no longer than 90 days.

Analytics events: up to 13 months.

Backups rotate automatically under a fixed schedule; deleted data disappears from backups when the rotation cycle ends.

Where your data is stored and accessed

Our systems run on a virtual private server operated for us; its location is stated in the final version of this policy. Our team accesses inquiry data from China and Hong Kong.

Our processors may process data in other countries under their own terms and safeguards.

Children

This website and our services are not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it.

Security and incident contact

We apply reasonable administrative and technical safeguards: encrypted transport, access-limited storage, and key-based pseudonymisation of network identifiers.

If a data incident affects your personal data, we will assess it and, where required by applicable law, notify you and the competent authority. To report a security concern, email the address in the footer.

Your rights

Depending on your market you may have rights to access, correct, delete, restrict or port your data, and to object to processing. Email us at the address in the footer and we respond within 30 days.

A deletion request covers our database records, stored files and signed access links. Backup copies disappear when the backup lifecycle ends (a fixed number of days, disclosed in the final policy) — this backup exception follows standard GDPR practice and will be confirmed by counsel.

Intellectual property in what you send

You confirm you have the right to share any reference material. We never reproduce third-party branded designs, and we will decline requests to copy protected work.

Unless agreed otherwise in writing, sketches, CAD files and unchosen design directions remain the atelier’s intellectual property; you receive the finished piece and personal usage rights. Unchosen concepts may not be taken to another maker for production.