Privacy policy
Privacy Policy
Last updated: August 20, 2026
The Trace Atelier operates this store and website, including all related information, content, features, tools, products and services (the “Services”), for the purpose of providing you with our products and services.
Our store uses the Shopify platform, which enables us to provide these Services. Pasted markdown
This Privacy Policy explains how we collect, use and disclose your personal data when you visit or use our Services, make a purchase or other transaction, provide us with information to personalize a product, or communicate with us.
If there is any conflict between our Terms and Conditions and this Privacy Policy regarding the collection, processing or disclosure of personal data, this Privacy Policy will prevail.
We recommend that you read it carefully.
Personal Data We Collect or Process
When we refer to “personal data”, we mean information that identifies you or can reasonably be linked to you.
Depending on how you interact with our store, we may collect or process the following categories of data:
- Contact details: name, postal address, billing and shipping address, email address and, where applicable, telephone number.
- Payment and transaction information: payment method, payment confirmation and transaction-related details. Payments are processed through the payment providers available in our store.
- Account information: when you use features that require an account, we may process information such as your preferences and settings.
- Order information: products viewed, added to your cart or purchased, as well as returns, cancellations and previous orders.
- Personalization information: route files such as GPX files, route data, names, text, dates, locations, colours, selected options and any other information you choose to provide to us to create or personalize a product.
- Communications: information you provide when you contact us, for example, to make an enquiry or request assistance.
- Device information: information about your device, browser, connection, IP address and other technical identifiers.
- Usage information: information about how you access, use and navigate our store.
How We Obtain Your Personal Data
We may obtain your data:
- Directly from you when you make a purchase, provide information to personalize a product, use our store or contact us.
- Automatically through certain technologies, such as cookies and similar technologies.
- Through Shopify and service providers we use to provide our Services.
- From other partners or third parties where necessary and where there is a lawful basis for doing so.
How We Use Your Personal Data
We may use your personal data for the following purposes:
Managing and Fulfilling Your Orders
We use your data to process purchases and payments, prepare products, manage personalizations, arrange shipping, provide information about the status of your order, and handle returns, issues or refunds.
Manufacturing Personalized Products
When you provide us with a GPX file, route, text, date, location or other personalization information, we use that data to design and manufacture the requested product.
Providing and Improving Our Services
We may use information about how our store is used to maintain, analyse and improve our products, services and shopping experience.
Communicating With You
We use your contact details to send you information relating to your orders, respond to enquiries, manage issues and provide customer support.
Marketing and Advertising
Where there is a lawful basis for doing so and, where required, you have given your consent, we may use your data to send you marketing communications or display advertising relating to our products.
You may withdraw your consent or unsubscribe from marketing communications at any time.
Security and Fraud Prevention
We may process certain data to protect our store and customers, detect fraudulent transactions or illegal activities, and maintain the security of our Services.
Legal Obligations
We may process and retain information where necessary to comply with legal, tax, accounting or administrative obligations, respond to requests from competent authorities, or establish, exercise or defend legal claims.
How We Share Personal Data
We may disclose certain personal data where necessary to provide our Services.
This may include:
- Shopify, as the technology platform used to operate our store.
- Payment service providers.
- Shipping and logistics companies necessary to deliver orders.
- Technology providers and services necessary for the operation of our store.
- Analytics, marketing or advertising providers, where applicable and where there is an appropriate lawful basis.
- Public authorities, regulators or other bodies where there is a legal obligation to do so.
We will only disclose the information necessary for the relevant purpose.
Our Relationship With Shopify
Our store uses Shopify.
Shopify collects and processes certain information relating to access to and use of our store in order to provide and improve its services.
Information processed through Shopify may be handled in countries other than the customer’s country of residence.
Shopify may also process certain data as an independent data controller for some of its features.
You can find more information about Shopify’s processing of personal data in its Consumer Privacy Policy and use the privacy tools provided by Shopify to exercise any rights that may apply in relation to processing carried out directly by the platform.
GPX Files and Personalization Data
GPX files, routes and other information provided to personalize a product will be used to manage and manufacture the requested order.
We recommend that you do not include personal information in these files unless it is necessary to create the product.
We may retain information associated with your order for as long as necessary to manage the purchase, deal with potential issues and comply with our legal obligations.
Cookies and Similar Technologies
Our store may use cookies and similar technologies that are necessary for its operation, as well as cookies related to analytics, personalization or advertising where applicable.
Where required by applicable law, we will ask for your consent before using cookies that are not strictly necessary.
You can manage your preferences using the privacy or cookie settings available in our store.
Third-Party Websites and Services
Our store may contain links to websites or services operated by third parties.
When you access an external service, the processing of your data will also be subject to that third party’s terms and privacy policies.
We are not responsible for the privacy or security practices of websites that we do not operate.
Children’s Data
Our Services are not specifically directed at minors, and we do not knowingly collect personal data from minors without the appropriate authorization.
If you are a parent or legal guardian and believe that a minor has improperly provided us with personal data, you may contact us to request its deletion where applicable.
Data Security
We take reasonable measures intended to protect personal data processed through our Services.
However, no information transmission or storage system can guarantee absolute security.
We recommend that you do not send us confidential information that is not necessary to manage your order.
Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected and for the periods required to comply with our legal, tax and accounting obligations, resolve potential disputes, and establish, exercise or defend legal claims.
Specific retention periods may vary depending on the nature of the data and the purpose of the processing.
Your Rights
Where applicable, you may exercise the rights provided under data protection law, including:
- Access: to know what personal data we process about you.
- Rectification: to request correction of inaccurate or incomplete data.
- Erasure: to request deletion of your data where legally applicable.
- Restriction of processing: to request that we restrict certain processing activities.
- Objection: to object to certain processing activities where applicable.
- Data portability: to receive certain data in a structured format and request its transmission where applicable.
- Withdrawal of consent: to withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
To exercise these rights, please contact us at:
We may request information reasonably necessary to verify your identity before processing certain requests.
Marketing Communications
If you have subscribed to our marketing communications, you can unsubscribe at any time by using the relevant link included in our emails.
Even if you unsubscribe from marketing communications, we may continue to send you necessary messages relating to orders, payments, shipping, issues or our contractual relationship with you.
International Data Transfers
Some of our technology providers, including Shopify, may process information outside the European Economic Area.
Where necessary, these transfers will be made using mechanisms recognized under applicable law, such as adequacy decisions or Standard Contractual Clauses approved by the European Commission.
Complaints
If you believe that your personal data is not being processed appropriately, you can first contact us at:
You also have the right to lodge a complaint with the competent data protection authority. In Spain, the supervisory authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our Services, providers, practices or legal requirements.
When we make changes, we will update the date shown at the beginning of this policy and provide any additional information required by law.
Contact
For any questions regarding this Privacy Policy, the processing of your personal data or the exercise of your rights, please contact us at:
The Trace Atelier
Email: hello@thetraceatelier.com
For the purposes of data protection law, the data controller is the owner of The Trace Atelier identified in our Legal Notice.