Privacy Policy

Effective August 10, 2026

atelier1746 is a members-only trade store operated by Mitwill Textiles Europe SARL, 104 rue des Bains, 68390 Sausheim, France. We are the data controller for the personal data described below.

This policy covers the atelier1746 store. Questions, and any request about your own data, go to herve@mitwill.com.

What we collect

Your account

Accounts here are opened by invitation, so most of what we hold you gave us on the way in: your name, your email address, the business you buy for, and the delivery and billing addresses and phone numbers you add. If a member of our sales team looks after your account, they can see it and can place orders on your behalf.

Your orders

What you ordered and in what quantity, the prices agreed for your account, the addresses an order ships and invoices to, and the resulting invoices and delivery records.

Payment

Card payments are taken by Stripe, who process the card details in their own systems. We never receive or store your full card number — we see only the result of the payment and the last digits Stripe returns with it. Orders settled on account are invoiced instead, and no card data exists at all.

Messages you send us

If you write to us through the contact form, we keep what you sent — the subject and the message — alongside the name and email address already on your account, which is where we take them from rather than asking you to type them again. A copy is emailed to our own team so we can answer it, and our reply goes to the address on your account. The form is only available once you are signed in; nothing is sent to anyone outside the companies named below.

The mailing list

If you sign up for our letter, we pass the email address you typed to Notifuse, who run the list for us, and we keep no copy of it ourselves. You will get an email asking you to confirm; until you click it, nothing is sent to you. The address is used for that letter and for nothing else — it is never added to your account, never matched against your orders, and never passed to anyone else. Every letter carries an unsubscribe link, and using it removes you from the list; you can also write to us and we will do it for you. This is separate from your account: closing one does not close the other.

Technical data

Our servers keep ordinary access logs — IP address, browser, the page requested and the time — which we use to keep the service running and to investigate abuse.

How we count visits

We measure how the store is used with Umami, which runs on our own server. It records the page you were on, the site you arrived from if any, and rough details of your browser, screen size, language and country. It sets no cookie and stores nothing on your machine; your IP address is used only to work out the country and to tell one visit from another on the day it happens, and is not kept alongside the statistics.

The result is a count of pages, not a record of a person. It is never joined to your account or your orders, it cannot follow you to another website, and it is not used to profile you or to target advertising — there is no advertising here to target. Nothing is sold, shared, or sent to Google or any advertising network. We do this on the basis of our legitimate interest in knowing whether what we built works; if you would rather not be counted at all, any tracker-blocking extension stops it outright, and nothing in the store breaks when it does.

Why we hold it, and on what basis

• To run your account and fulfil your orders — quoting, printing, shipping, invoicing and supporting you afterwards. This is necessary to perform our contract with you.
• To meet our legal obligations — invoices and accounting records have to be kept, and for as long as the law says.
• To keep the store secure — detecting and investigating fraud, abuse and technical faults. This is our legitimate interest in operating a working, non-fraudulent service, and it is balanced against your privacy: the logs are short-lived and are not used to build a picture of you.
• To understand how the store is used — how many people reach a page, and which pages those are. This is our legitimate interest in knowing whether what we built works, and it is balanced against your privacy by keeping the measurement anonymous: it is counted on our own server, nothing is stored on your machine, and no picture of you is built from it.
• To send you our letter, if you asked for it — and only then. This is your consent, given by confirming the address, and you may withdraw it at any time from any letter we send. Withdrawing it changes nothing about your account or your orders.

Who else sees it

We do not sell, rent or trade your personal data, and we do not share it for anyone else's marketing. We pass it on only where the work requires it:

• Stripe, to take and settle card payments.
• Notifuse, who hold the mailing list and send the letter — and only the address of someone who signed up for it.
• Printers, finishers and carriers, to make and deliver your order — a carrier gets the delivery address and a contact, and nothing about your prices.
• Our hosting and email providers, who hold the data because they run the systems it sits in.
• Our accountants and auditors, and anyone else we are legally obliged to answer — a court, a tax authority, a regulator with a valid demand.

Each of these is bound to use the data only for the work we engaged them for. If the business is ever sold or restructured, the buyer takes on the commitments in this policy.

Where it goes

We and our providers are based in the European Union, and that is where your data normally stays. Where a provider processes data outside the EEA, it is done under the safeguards the GDPR requires — an adequacy decision, or the European Commission's standard contractual clauses.

How long we keep it

• Your account — for as long as it is open, and for a reasonable period after it is closed in case it is reopened. Ask us and we will close and delete it sooner.
• Orders and invoices — for the statutory accounting retention period, which in France is ten years. This one we cannot shorten on request; the obligation is not ours to waive.
• Messages you send us — for as long as we may need them to deal with what they were about, and no longer. Ask us and we will delete a message sooner.
• Your address on the mailing list — until you unsubscribe, or until you never confirm it, whichever comes first. An address that is never confirmed is dropped rather than kept.
• Access logs — a short operational window, then discarded.
• Visit statistics — kept for as long as they are useful for understanding how the store is doing. The identifier that groups one visit's pages together is regenerated every day, so yesterday's figures cannot be joined to today's, or to you.

Your rights

Under the GDPR you can ask us to:

• give you a copy of the personal data we hold about you;
• correct it, if it is wrong or out of date;
• delete it, where we are not required to keep it;
• restrict or object to how we use it;
• send it to you, or to another provider, in a portable form;
• withdraw consent, where we relied on it — bearing in mind that some of what we hold is what makes an account work, so deleting it may mean closing the account.

Write to herve@mitwill.com and we will answer within the time the law allows. If you are not satisfied with our answer you can complain to your national data protection authority; ours is the French CNIL, cnil.fr.

Keeping it safe

Traffic to this store is encrypted in transit, passwords are stored hashed and never in a form we can read, and access to customer data is limited to the people who need it to do their job. No system is perfectly secure, and we will not pretend otherwise — but where a breach is likely to put your rights at risk, we will tell you and the authorities as the law requires.

Children

This is a trade store sold to businesses. It is not directed at children, and we do not knowingly collect data from anyone under 16. If we find we have, we delete it.

Changes

If this policy changes we will post the new version here and move the effective date at the top. Where a change materially affects you, we will tell account holders directly rather than relying on you to notice.

Contact

See also our Cookie Policy, which lists every cookie and browser-storage item this store uses.