security GDPR & CCPA Data Governance

Privacy Policy

SATURN ATELIER values the discretion and trust of our architectural clients and patrons. This Privacy Policy details our practices concerning personal data collection, processing, and storage in full compliance with the UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

lock PCI-DSS Level 1 Encryption no_encryption_gmailerrorred No Card Details Stored gavel Patron Rights Protected

credit_card_off

Zero Payment Storage

Raw credit card numbers, CVVs, and banking credentials are never received, stored, or processed by our local database servers. All transactions execute within Stripe's certified environment.

Stripe PCI Compliance

block

Never Sold or Leased

We strictly do not sell, rent, monetize, or trade client personal information or project specifications to third-party advertisers, data brokers, or marketing consortiums.

Complete Discretion

manage_accounts

Full Data Control

Patrons retain full rights under GDPR and CCPA to inspect, export, correct, or request permanent deletion of their account records and order history at any time.

Patron Empowerment

01

Data Controller & Official Contact

The data controller responsible for the collection, retention, and processing of patron personal data across the website is:

SATURN ATELIER

Customer Support & Concierge

Customer Support Email: huzaifahanzala004@gmail.com

Studio Operating Hours: Monday – Friday, 09:00 – 18:00 GMT / CET

02

Categories of Personal Data Collected

We collect only the minimum data required to facilitate luminaire specification, white-glove logistics, and account administration:

Contact & Account Information: Full name, architectural firm name (if applicable), email address, telephone number, and encrypted password hash (salted via Bcrypt).
Delivery & Billing Records: Street address, city, state/county, postal code, country, and specific delivery appointment notes.
Order & Invoicing History: Fixtures purchased, custom drop length specifications, alloy finish selections, order amounts (USD), and issued letterpress PDF invoices.
Concierge Communications: Messages submitted through our Contact inquiry forms and live chat transcripts conducted via our real-time concierge system.
Technical Metadata: IP address, browser type, and essential session identifiers required for cart persistence and secure login authentication.

03

Payment Card Security & PCI-DSS Architecture

Security of cardholder financial data is paramount. All credit and debit card transactions are processed utilizing Stripe, Inc., a certified PCI-DSS Level 1 Service Provider (the most stringent level of security available in payment processing).

check_circle Zero Local Storage: SATURN ATELIER servers never store, log, or transmit 16-digit card numbers, security CVV codes, or PINs.
check_circle End-to-End Encryption: Card data is encrypted in transit using Transport Layer Security (TLS 1.3) directly between your web browser and Stripe's tokenized infrastructure.
check_circle Tokenization: For authorized card orders, we receive only a cryptographically secure token and truncated card summary (e.g. "Visa ending in 4242") to print on your invoice.

04

Legal Basis & Purpose of Processing (GDPR)

Under UK and European data privacy laws, we process personal information pursuant to lawful bases:

Performance of a Contract: To fabricate, crate, and deliver commissioned luminaires to your address and process order administration.
Legal Obligation: Maintaining accounting, VAT, sales tax records, and commercial transaction ledgers as required by international fiscal authorities.
Legitimate Interests: Protecting the storefront against automated fraud, managing account authentication, and resolving customer concierge inquiries.
Consent: When you voluntarily submit a bespoke architectural commission brief or opt into trade communications.

05

Cookies & Local Session Storage

SATURN ATELIER employs only strictly necessary cookies and local storage tokens. We do not use third-party behavioral advertising cookies or cross-site tracking pixels:

Storage Mechanism	Functional Purpose	Duration
`saturn_session` / Cart State	Preserves items added to your Atelier Bag as you navigate catalog pages	Browser Session
`auth_token`	Authenticates your secure patron login to access order history and RMA tools	7 Days or until Sign Out
`concierge_socket_session`	Maintains live WebSocket continuity during real-time chat consultations	Active Chat Session

06

Your Data Rights (GDPR & CCPA/CPRA)

Regardless of your geographic location, SATURN ATELIER grants you comprehensive privacy rights:

Right to Access & Portability

You may request an electronic copy of all personal information and order records stored regarding your account.

Right to Erasure ("Right to be Forgotten")

You may request the permanent deletion of your patron profile, except where fiscal law mandates retention of tax receipts.

Right to Rectification

You may update incorrect contact names, shipping addresses, or telephone numbers directly from your account settings.

Non-Discrimination

We will never discriminate against you, alter catalog pricing, or restrict access for exercising your privacy rights.

To exercise any of these statutory rights, please send an inquiry to huzaifahanzala004@gmail.com. We respond to all formal verified privacy requests within 30 days without fee.

Data Protection Officer

Have a Privacy or Security Inquiry?

Our data governance officer is available to answer any questions regarding how your records are protected across our digital systems.

Email Privacy Officer View Terms & Conditions