Privacy notice.

The data controller is atéa. Full legal details are listed in our Legal notice. You can contact us about privacy at hello@ateasthml.com.

• Contact details, delivery details, order details, payment status, and customer service messages.
• Technical information such as device, browser, IP address, security logs, and cookie choices.
• Marketing preferences only if you choose to receive updates.

• To process orders, payment status, delivery, returns, exchanges, and customer service requests.
• To meet accounting, tax, consumer-law, product-safety, and fraud-prevention obligations.
• To improve the website and understand performance where analytics are enabled with consent.
• To send marketing only where there is a valid legal basis and an unsubscribe option.

The legal basis may be contract performance, legal obligation, legitimate interest, consent, or the establishment and defence of legal claims, depending on the activity.

We use service providers for ecommerce hosting, payments, shipping, email, fraud prevention, analytics, and support. Where personal data leaves the EEA, appropriate safeguards or an adequacy decision should apply.

You can request access, correction, deletion, restriction, portability, or object to certain processing. You can withdraw consent where processing is based on consent. You may also lodge a complaint with your local data protection supervisory authority.

We keep personal data only as long as needed for the purpose collected, including order fulfilment, customer support, accounting, tax, legal guarantee, fraud prevention, and legal claim periods.