Privacy policy

Privacy Policy

Last updated: 16 October 2026

1. Introduction and Data Controller

Atelier Eli Créations operates this online store and website, including its content, products, features, tools and services (collectively referred to as the “Services”).

Our store uses the Shopify technology platform, which enables us to offer our products and manage online purchases.

This Privacy Policy explains how we collect, use, retain and share personal data when you visit our store, place an order, request a personalised product, subscribe to our communications or contact us.

The data controller responsible for processing personal data is:

Atelier Eli Créations
Owner: Elisabet Valenzuela Sáez
Belgian Enterprise Number (KBO/BCE): 1038.482.196
De Voerman 28
8980 Zonnebeke, Belgium

Email: info@atelierelicreations.be
Telephone: +32 471 85 67 83
Website: https://atelierelicreations.be

For certain processing activities, Shopify and other service providers may act as independent data controllers, depending on the purposes and terms of their respective services.

2. Personal Data We Collect

Depending on how you interact with our store, we may collect and process the following categories of personal data:

  • Identification and contact details: first name, surname, billing address, shipping address, email address and telephone number.

  • Order and transaction information: purchased products, requested personalisations, order history, amounts, payment methods, payment status and shipping information.

  • Payment information: transaction details, payment confirmations and payment references. Complete payment card details are generally processed by the relevant payment service providers.

  • Account information: information and preferences associated with a customer account, where applicable.

  • Personalisation information: names, text, photographs, images, illustrations, logos, designs and other files provided for the creation of personalised products.

  • Communication information: messages, enquiries, requests, complaints and files submitted through forms, email, WhatsApp, Messenger or other communication channels.

  • Subscription information: email address, subscription date, subscription confirmation and unsubscribe status relating to our marketing communications.

  • Technical and browsing information: IP address, browser, device, technical identifiers, cookie preferences and information about the use of our store, depending on the applicable settings and consent.

We collect only the data necessary for the relevant purposes.

3. Sources of Personal Data

We may obtain personal data from the following sources:

  • Directly from you, when you place an order, provide information for a personalised product, create an account, subscribe or contact us.

  • Automatically through our store, using technical features, cookies and similar technologies, where applicable.

  • From service providers, when they are involved in processing orders, payments, deliveries or operating the store.

  • Through external platforms, when you choose to communicate with us using services such as WhatsApp or Messenger.

4. Purposes and Legal Bases for Processing

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable legislation.

4.1. Order Management and Personalised Products

We use personal data to:

  • Process and manage orders.

  • Prepare designs and request approval when necessary.

  • Manufacture and personalise products.

  • Process payments and arrange deliveries.

  • Communicate information relating to orders.

  • Handle returns, complaints and statutory warranties.

Legal basis: performance of a contract or taking pre-contractual steps at the customer's request.

4.2. Customer Service

We process the information necessary to answer enquiries, resolve issues and maintain communications relating to our products and services.

Legal basis: performance of a contract or legitimate interest in providing appropriate customer service, depending on the circumstances.

4.3. Legal Obligations

We process and retain certain information to comply with tax, accounting, administrative and other legal obligations.

Legal basis: compliance with a legal obligation.

4.4. Security and Fraud Prevention

We may process technical and transaction data to protect our store, prevent unauthorised access, detect fraudulent transactions and defend our rights.

Legal basis: legitimate interest in security and fraud prevention or compliance with legal obligations, as applicable.

4.5. Marketing Communications

When someone subscribes to our newsletter, we use their email address to send news, product information, promotions and marketing offers.

For subscriptions made through our SendWILL form, we use a double email confirmation system (double opt-in).

Legal basis: consent.

Consent may be withdrawn free of charge at any time using the unsubscribe link included in our marketing emails.

4.6. Analytics and Advertising

We may use analytics and advertising tools to understand how our store performs, improve our services and measure advertising campaigns.

Where non-essential cookies or other tracking technologies are used, we request the necessary consent in accordance with applicable legislation.

Legal basis: consent for non-essential tracking. Other strictly necessary technical processing activities may rely on a different legal basis.

5. Photographs, Designs and Files for Personalised Products

Atelier Eli Créations offers personalised products that may require photographs, names, text, illustrations, logos or other files provided by customers.

These materials are used to prepare, design and manufacture the requested products and to manage communications relating to the order.

Files may be received and temporarily stored through Shopify, forms, email, WhatsApp, Messenger and computer equipment used for our business activities.

When customers provide images or personal data relating to other individuals, they must ensure that they have the necessary authorisation or another valid legal basis to provide such information for that purpose.

This applies particularly to photographs and personal data relating to minors.

Retention of Photographs and Designs

As a general rule, we retain personal photographs and design files that we manage directly for a maximum of 12 months after delivery of the order, unless a legal obligation, complaint, dispute or other legitimate reason justifies a longer retention period.

This period allows us to facilitate repeat orders or additional personalisations requested by the customer.

Once the applicable retention period has expired, personal files under our control must be deleted from the systems and communication channels where they have been stored.

External service providers may apply their own technical retention periods and backup procedures.

Customers may request earlier deletion of their files by contacting info@atelierelicreations.be. Such requests will be handled in accordance with the GDPR and applicable legal obligations.

6. Use of Photographs on Social Media and in Advertising

Personal photographs provided for an order are not automatically used for advertising purposes.

When we wish to publish images of personalised products containing identifiable personal data, we will request separate authorisation for that use.

For images of minors, we will request authorisation from the appropriate legal representative.

Where appropriate, we may conceal or pixelate faces to reduce the identifiability of individuals. This measure alone does not guarantee that an image is completely anonymous.

Authorisation for promotional use is separate from the purchase and may be withdrawn at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7. Sharing Personal Data with Third Parties

To provide our services, we may share certain personal data with external service providers, only where there is a legitimate purpose and an appropriate legal basis.

These providers include:

Shopify

We use Shopify to host our store and manage orders, customer accounts, payments, purchasing features and related technical services.

Payment Service Providers

Depending on the payment method selected, payments may be processed by bank card payment providers, Bancontact, PayPal, Klarna or other payment services available in our store.

These providers may process the data necessary to authorise, execute and secure transactions.

Shipping Companies

We share the information necessary for delivery with the relevant shipping companies, including bpost and DPD.

SendWILL (CWILL)

We use SendWILL to manage subscription forms, confirmation emails, welcome discounts and marketing communications.

Google

We use Google services, including Google Analytics and tools associated with Google & YouTube, for analytics, advertising, measurement and product listings, depending on the applicable settings and consent.

Meta

We use Meta services associated with Facebook and Instagram for advertising campaigns and performance measurement, in accordance with the applicable settings and consent.

Communication Platforms

When customers use WhatsApp, Messenger or other external services to communicate with us, their data may also be processed by those platforms in accordance with their own privacy policies.

We do not sell databases containing our customers' personal data.

8. Our Relationship with Shopify

Our store uses Shopify's technology infrastructure.

Shopify collects and processes certain personal data to provide e-commerce services, manage technical features, improve security and deliver platform functionality.

In certain circumstances, Shopify may process personal data for its own purposes and act as an independent data controller.

Additional information is available at:

9. Cookies and Similar Technologies

Our store uses cookies and similar technologies to ensure its proper operation and, depending on the consent provided, enable personalisation, analytics and marketing activities.

Shopify's cookie preferences panel allows visitors to manage the following categories:

Necessary Cookies

These cookies are essential for the operation of the store and may be used to manage the shopping cart, checkout process, security and certain technical preferences.

Personalisation

These technologies may be used to adapt certain features or content to visitors' preferences and interactions.

Marketing

These technologies may be used to measure campaigns, manage advertising and display relevant advertisements through services such as Shopify, Google, Meta or other enabled providers.

Analytics

These technologies help us understand how the store is used and identify potential improvements, for example through Google Analytics.

Managing Consent

Visitors can use the cookie preferences panel to:

  • Accept optional categories.

  • Reject optional categories.

  • Configure their preferences individually.

Preferences can be changed later using the “Cookie Preferences” link in the footer of our store. The wording may vary depending on the selected language.

The specific cookies, their providers and retention periods may vary depending on the active services and settings.

Additional information is available in the privacy and cookie documentation of the relevant providers.

Non-essential tracking technologies must be used in accordance with applicable legal consent requirements.

10. Newsletter and Welcome Discount

Atelier Eli Créations offers visitors the opportunity to subscribe to a newsletter containing news and special offers.

Subscriptions made through the SendWILL form use a double confirmation process:

  1. The visitor enters their email address.

  2. They receive an email requesting confirmation of their subscription.

  3. The subscription is confirmed when the corresponding confirmation link is used.

  4. After confirmation, the subscriber receives information about the 10% welcome discount, subject to the applicable promotional terms.

Subscription is voluntary and is not required to make a purchase.

Subscribers can unsubscribe free of charge at any time using the link included in our marketing emails.

After unsubscribing, we may retain the minimum information necessary to respect the unsubscribe request or demonstrate compliance with our obligations.

11. Personal Data Retention Periods

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations.

We apply the following criteria:

  • Order and billing information: for the periods required by tax, accounting and other applicable legislation.

  • Personal photographs and design files under our control: as a general rule, for up to 12 months after delivery, unless a legitimate reason justifies longer retention.

  • Customer communications: for as long as necessary to manage orders, enquiries, complaints and potential disputes.

  • Subscription information: while the subscription remains active and, where necessary, afterwards to retain evidence of consent or unsubscription.

  • Technical and cookie information: in accordance with the applicable purposes, settings and retention periods.

Certain information may be retained for longer where necessary to comply with legal obligations or to establish, exercise or defend legal claims.

12. International Data Transfers

Some technology service providers may store, process or allow access to personal data from countries outside the European Economic Area.

Where international transfers take place, the safeguards required by the GDPR must be applied, such as European Commission adequacy decisions or Standard Contractual Clauses, where applicable.

For further information about a specific transfer, please contact info@atelierelicreations.be.

13. Personal Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or unlawful disclosure.

However, no electronic storage or transmission system can guarantee absolute security.

We recommend that customers avoid sending unnecessary sensitive information through communication channels that do not provide adequate security.

14. External Links and Services

Our store may contain links to websites or services operated by third parties.

When visitors access an external website, the processing of their personal data is subject to that provider's terms and privacy policy.

We recommend reviewing those policies before providing personal information.

15. Personal Data Relating to Minors

Our store is not specifically directed at minors.

However, some personalised products may contain photographs, names or other information relating to children, provided by their parents, legal representatives or authorised customers.

Such information is used to manufacture the requested products and for the other lawful purposes described in this Privacy Policy.

We do not knowingly request independent newsletter subscriptions from children or specifically target minors with our marketing communications.

Parents or legal representatives may contact us with enquiries or to exercise the applicable rights.

16. Data Protection Rights

Under the General Data Protection Regulation, individuals may exercise the following rights where the legal requirements are met:

  • Right of access: to find out which personal data we process.

  • Right to rectification: to request correction of inaccurate data.

  • Right to erasure: to request deletion of personal data where applicable.

  • Right to restriction: to request that certain processing activities be restricted.

  • Right to data portability: to receive certain data in a structured format and request its transfer where the legal conditions are met.

  • Right to object: to object to certain processing activities based on legitimate interests.

  • Right to object to direct marketing: to request that personal data no longer be processed for direct marketing purposes.

  • Right to withdraw consent: to withdraw previously given consent at any time.

These rights are not absolute and may be subject to legal exceptions.

Requests can be sent to info@atelierelicreations.be.

Where necessary, we may request reasonable information to verify the applicant's identity.

We will respond within the time limits established by the GDPR, generally within one month, subject to legally permitted extensions.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

17. Complaints to the Data Protection Authority

If you have any questions or complaints regarding the processing of your personal data, you may contact Atelier Eli Créations directly.

You also have the right to lodge a complaint with the competent supervisory authority.

In Belgium, this is:

Belgian Data Protection Authority (APD/GBA)

Website: https://www.dataprotectionauthority.be

You may also contact another competent supervisory authority in accordance with applicable legislation.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, service providers, data processing practices or legal obligations.

The current version will be available on our store, indicating the date of its last update.

Where required by law, we will communicate changes through appropriate channels.

19. Contact

For any questions regarding privacy, data protection or the exercise of your rights, please contact:

Atelier Eli Créations
Owner: Elisabet Valenzuela Sáez
Belgian Enterprise Number (KBO/BCE): 1038.482.196
De Voerman 28
8980 Zonnebeke, Belgium

Email: info@atelierelicreations.be
Telephone: +32 471 85 67 83
Website: https://atelierelicreations.be