Privacy Policy

1. Who We Are

El Pirate Atelier ("we", "our", "us") is a jewelry brand and online store operating at elpirate.com. We are the data controller responsible for your personal data.

Contact: hello@elpirate.com

2. What Data We Collect

• Order data: Name, email, shipping address, phone number, order details

• Communication data: Messages you send us via email or contact forms

• Technical data: IP address, browser type, pages visited (via analytics)

• Cookie data: Session cookies, preference cookies (see Cookie Policy)

We do not collect or store payment card data. Payments are processed by third-party providers.

3. Why We Use Your Data (Legal Basis)

Contract Performance — Processing your order, shipping your jewelry, sending order confirmations.

Legitimate Interest — Preventing fraud, improving our website, responding to your inquiries.

Consent — Marketing emails and newsletters — only if you explicitly opt in. You can withdraw consent at any time.

Legal Obligation — Tax records, accounting obligations under applicable law.

4. How Long We Keep Your Data

• Order records: 7 years (tax/legal obligation)

• Customer communications: 3 years after last contact

• Marketing: Until you unsubscribe

• Technical logs: 90 days

5. Who We Share Data With

We only share your data with trusted third parties necessary to fulfill your order: shipping carriers, payment processors (Stripe, PayPal), Cloudflare (hosting and CDN), and email service providers.

We never sell your personal data to third parties.

6. Your Rights (GDPR — EU Residents)

Under GDPR, you have the right to: Access, Rectification, Erasure, Restriction, Portability, Object, and Withdraw consent.

To exercise any right, email us at hello@elpirate.com. We respond within 30 days.

7. Your Rights (California — CCPA/CPRA)

California residents may request to know what data is collected, request deletion, and opt out of sale (we do not sell data).

8. Contact

El Pirate Atelier — hello@elpirate.com

Last updated: April 2026