Privacy policy
Privacy Policy
Last updated: 7 November 2026
1. Introduction
Larosier Atelier is committed to respecting your privacy and protecting your personal information.
This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit our website, place an order, request a personalised design, subscribe to marketing communications or contact us.
Our website is www.larosieratelier.co.uk.
Larosier Atelier is operated by Samantha Rose, a sole trader trading as Larosier Atelier.
For the purposes of UK data protection legislation, Samantha Rose trading as Larosier Atelier is the data controller.
This policy applies to our website, customer orders, personalised artwork, customer enquiries and related business activities.
2. Contact Details and Data Controller
Samantha Rose trading as Larosier Atelier
14 Holly Drive
Brixworth
Northampton
NN6 9WJ
United Kingdom
Email: hello@larosieratelier.co.uk
Website: www.larosieratelier.co.uk
For privacy enquiries, data protection requests or complaints, please contact us using the email address above.
We do not provide a public telephone contact for privacy enquiries.
3. Personal Information We Collect
Depending on how you interact with us, we may collect:
Contact and identity information
-
Name
-
Email address
-
Billing and delivery addresses
-
Telephone number, where provided
Order and transaction information
-
Products ordered
-
Order numbers and purchase history
-
Payment and transaction details
-
Delivery and fulfilment information
-
Refund and return information
Payments are processed by Shopify and supported payment providers. We do not ordinarily receive or store your complete payment card details ourselves.
Personalisation and artwork information
-
Names, dates and personal messages
-
Wedding and event details
-
Guest names or lists where required
-
Customer-supplied photographs
-
Artwork, wording and design instructions
-
Digital proofs and approved designs
Customer communications
-
Emails and enquiries
-
Customer service correspondence
-
Feedback and requests
-
Information supplied through contact forms
Technical and website information
-
IP address
-
Device and browser information
-
Website activity and interactions
-
Cookie preferences
-
Analytics information, where permitted
Marketing information
-
Newsletter subscription status
-
Marketing consent and preferences
-
Email engagement information, where applicable
-
Advertising interactions, where permitted
4. How We Use Personal Information
We process personal information to:
-
Process payments and fulfil customer orders
-
Create personalised products and artwork
-
Prepare digital proofs and requested amendments
-
Arrange printing, packaging and delivery
-
Communicate about orders
-
Respond to enquiries and provide customer support
-
Handle returns, refunds and complaints
-
Maintain appropriate accounting and tax records
-
Protect our website and business against fraud
-
Improve website functionality and customer experience
-
Analyse website performance where permitted
-
Send marketing communications where appropriate consent has been obtained
-
Comply with applicable legal obligations
We do not sell customer personal information.
5. Lawful Bases for Processing
Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases, depending on the circumstances.
Performance of a contract
We process information necessary to fulfil orders, prepare personalised designs, arrange delivery and provide services requested by customers.
Legal obligation
We retain and process certain information to comply with applicable tax, accounting, consumer protection and other legal requirements.
Legitimate interests
We may process information where reasonably necessary to operate our business, provide customer support, maintain security, prevent fraud and improve our services, provided those interests are not overridden by individuals' rights and freedoms.
Consent
We rely on consent where required, including for optional website cookies and marketing communications.
Consent can be withdrawn at any time without affecting processing previously carried out lawfully.
6. Personalised Products, Photographs and Artwork
Many Larosier Atelier products are created using personal information supplied by customers.
This may include names, dates, photographs, messages, guest lists and other information required to produce personalised stationery, signage, keepsakes or artwork.
We use this information to:
-
Create and personalise products
-
Prepare proofs and amendments
-
Produce approved designs
-
Fulfil orders
-
Resolve order-related enquiries
Customers should only provide information about other individuals where they have an appropriate basis for doing so.
We do not publish customer photographs, personal messages or bespoke artwork for promotional purposes without an appropriate lawful basis.
Artwork Storage and Retention
Customer artwork and associated personalisation files may be stored securely on our business computer and within Google Drive.
We generally retain customer artwork for up to three years after the customer's most recent order to support repeat purchases, replacement orders and customer enquiries.
At the end of this period, artwork will be securely deleted or reviewed where continued retention is reasonably necessary and legally justified.
Customers may request earlier deletion, subject to any applicable legal obligations or legitimate grounds for continued retention.
Financial and transaction records may be retained separately for longer periods where required by law.
7. Shopify and Payment Processing
Our online store is powered by Shopify.
Shopify provides services including:
-
Website hosting and ecommerce functionality
-
Shopping baskets and checkout
-
Order management
-
Payment integrations
-
Customer accounts
-
Website security and fraud prevention
-
Customer privacy and consent management
Shopify may process personal information on our behalf and, for certain activities, as an independent data controller.
You can read Shopify's privacy information at:
https://www.shopify.com/legal/privacy
Payment providers process payment information in accordance with their own applicable privacy notices.
8. Other Service Providers and Connected Apps
We use third-party services to operate our business, manage customer communications and support website functionality.
Depending on the services enabled and how you interact with our website, these may include:
Google Workspace and Google Drive
Used for business email, customer communications, document management and secure storage of customer artwork and order-related files.
CWILL / SendWILL
Used for customer communications, email marketing and related ecommerce messaging where enabled.
Facebook and Instagram (Meta)
Used for social media activity, marketing and advertising measurement where applicable and permitted.
Google and YouTube
Used for connected marketing services, analytics or advertising functionality where enabled.
Microsoft Clarity
Used to understand website interactions and improve usability where enabled and permitted by applicable cookie consent requirements.
Used for marketing, product discovery and related website integrations where enabled.
TikTok
Used for marketing and related integrations where enabled.
XB Wishlist
Used to provide customer wishlist functionality on our website.
These services may collect or process information depending on their configuration, the features used and your consent choices.
We share only the information reasonably necessary for the relevant service.
We do not represent every installed integration as continuously collecting information. Actual processing depends on which features are active.
Service providers may operate under their own privacy policies and contractual data protection arrangements.
9. Marketing Communications
We may send marketing communications about Larosier Atelier products, collections, offers and business updates to customers who have subscribed or otherwise provided appropriate consent.
Marketing communications may include:
-
Newsletters
-
New collection announcements
-
Product launches
-
Special offers
-
Seasonal promotions
-
Abandoned-checkout reminders where applicable and lawfully permitted
Marketing preferences are managed through Shopify and connected email marketing services.
You can withdraw consent or unsubscribe at any time using the unsubscribe link in marketing emails or by contacting:
We will continue to send necessary transactional communications, such as order confirmations, dispatch notifications and customer service messages, even where a customer has unsubscribed from marketing.
We do not automatically enrol customers in marketing simply because they have placed an order.
10. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to operate the store, remember preferences and, where permitted, understand website performance and marketing effectiveness.
Cookies may include:
Essential cookies
Required for shopping baskets, checkout, security, customer accounts and core website functionality.
Functional cookies
Used to remember preferences and support additional website features.
Analytics cookies
Used to understand website activity and improve usability, including services such as Shopify Analytics and Microsoft Clarity where enabled.
Advertising and marketing cookies
Used to measure marketing effectiveness or support advertising features where enabled and permitted.
Cookie Consent
Where required by applicable law, visitors are offered options to:
-
Accept optional cookies
-
Decline optional cookies
-
Manage Preferences and select permitted cookie categories
Non-essential cookies and tracking technologies requiring consent should not be activated before the relevant consent has been obtained.
Visitors may update their preferences through the website's available privacy controls.
Browser settings may also be used to restrict or delete cookies, although this can affect some website features.
The specific cookies used may change as Shopify and connected services are updated.
11. Advertising and Analytics
We may use website analytics and marketing tools to understand customer interactions and assess the performance of our products and campaigns.
Where enabled, these services may include Shopify Analytics, Google services, Meta, Pinterest, TikTok and Microsoft Clarity.
The collection and sharing of information through optional tracking technologies is subject to applicable privacy requirements and consent settings.
We do not describe Shopify Audiences as an active service unless it has been separately enabled and verified.
We do not sell personal information to advertising companies.
12. Sharing Personal Information
We may share necessary personal information with:
-
Shopify and ecommerce service providers
-
Payment processors
-
Delivery and postal services
-
Email and communication providers
-
Cloud storage providers
-
Website analytics and marketing services where applicable
-
Professional advisers where necessary
-
Public authorities where disclosure is legally required
Information is shared only where there is an appropriate purpose and lawful basis.
We may also disclose information where necessary to prevent fraud, protect legal rights or comply with lawful requests.
13. International Transfers
Some service providers, including Shopify, Google and other connected platforms, may process or store personal information outside the United Kingdom.
Where required by UK data protection law, appropriate safeguards or recognised lawful transfer mechanisms are used.
These may include applicable adequacy regulations, contractual safeguards or other legally permitted arrangements.
14. How Long We Retain Personal Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.
Our general approach includes:
Customer artwork and personalisation files
Generally retained for up to three years after the customer's most recent order, subject to review and any justified exceptions.
Order and financial records
Retained for the periods required by applicable tax, accounting and legal obligations.
Customer service communications
Retained for as long as reasonably necessary to resolve enquiries, manage orders and protect legitimate business interests.
Marketing information
Retained while the relevant subscription or lawful marketing relationship continues, subject to applicable record-keeping requirements.
Cookie and analytics information
Retained according to the relevant service settings, consent choices and applicable legal requirements.
When information is no longer required, it will be deleted, anonymised or securely disposed of as appropriate.
15. Your Rights Under UK Data Protection Law
Depending on the circumstances, you may have the right to:
-
Request access to personal information we hold about you
-
Request correction of inaccurate information
-
Request erasure of personal information
-
Request restriction of processing
-
Object to certain processing
-
Request data portability where applicable
-
Withdraw consent where processing relies on consent
-
Object to direct marketing
These rights are subject to applicable legal conditions and exceptions.
For example, we may need to retain certain transaction records to meet legal obligations.
To exercise your rights, please email:
We will respond within the timescales required by applicable data protection law, normally within one month.
16. Automated Decision-Making
We do not independently use customer information to make solely automated decisions that produce legal or similarly significant effects.
Shopify and payment providers may use automated fraud prevention and security systems as part of their services.
Further information about such processing may be available in the relevant provider's privacy notice.
17. Children's Information
Our website is intended for customers purchasing products and services, rather than for independent use by children.
Some personalised products may include children's names, dates, photographs or other details supplied by an adult customer.
We use this information only as reasonably necessary to create and fulfil the relevant order or for another lawful purpose.
We do not knowingly collect children's information directly for marketing purposes.
18. Information Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.
These measures include appropriate access controls, use of reputable service providers and secure business storage practices.
No method of electronic storage or transmission can be guaranteed completely secure.
19. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our business, services, legal obligations or privacy practices.
The latest version will be published on our website with an updated revision date.
20. Complaints
If you have concerns about how we handle your personal information, please contact us at:
We will investigate and aim to resolve concerns fairly and promptly.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
ICO website: https://ico.org.uk/make-a-complaint/
21. Contact Us
Samantha Rose trading as Larosier Atelier
14 Holly Drive
Brixworth
Northampton
NN6 9WJ
United Kingdom
Email: hello@larosieratelier.co.uk
Website: www.larosieratelier.co.uk
We aim to handle privacy enquiries in accordance with applicable UK data protection law.