Privacy Policy

Last Updated: April 27, 2026

1. Introduction

Welcome to Bonenfant Atelier (“we”, “our”, “us”). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this policy or our practices with regard to your personal information, please contact us at hello@bonenfant-atelier.com.

This Privacy Policy applies to all information collected through our website https://www.bonenfant-atelier.com (the “Site”) and any related services, sales, marketing, or events.

By using our Site, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Data You Provide We collect personal data that you voluntarily provide to us when you:

  • Register on the Site.
  • Subscribe to our newsletter (if applicable).
  • Use the contact forms on our website.
  • Leave a comment.

This may include: Name, Email Address, Phone Number, and any other information you choose to provide.

2.2 Automatically Collected Data When you visit our Site, we automatically collect certain information about your device and browsing behavior, including:

  • Log Data: IP address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages, and other statistics.
  • Cookies: We use cookies to enhance your experience. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

2.3 Comments When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to help with spam detection. An anonymized string created from your email address (hash) may be provided to the Gravatar service.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To operate, maintain, and improve our website.
  • To process your requests (e.g., respond to contact forms).
  • To send administrative information, such as updates or security alerts.
  • To detect, prevent, and address technical issues, fraud, or spam.
  • To comply with legal obligations (e.g., tax and accounting laws under Spanish legislation).

4. Legal Basis for Processing (GDPR/LOPDGDD)

We process your personal data based on the following legal grounds, in compliance with the General Data Protection Regulation (GDPR) and the Spanish Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD):

  • Consent: When you explicitly agree (e.g., subscribing to a newsletter).
  • Contract: To fulfill a contract with you (e.g., processing an order).
  • Legal Obligation: To comply with applicable laws (e.g., tax retention under Spanish law).
  • Legitimate Interests: To ensure the security of our website and prevent fraud.

5. Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this policy.

  • Comments: Retained indefinitely to allow for automatic approval of follow-up comments.
  • User Accounts: Retained as long as the account is active.
  • Contact Form Data: Retained for the period required by Spanish law to handle potential disputes or legal obligations.
  • Tax Data: Retained for 10 years as required by Spanish tax laws and EU regulations.

6. Data Sharing and Third Parties

We do not sell your personal data. We may share your data only with trusted third parties who assist us in operating our website, conducting our business, or serving our users, provided that those parties agree to keep this information confidential.

  • Service Providers: Hosting providers (e.g., Infomaniak), spam detection services, and analytics tools.
  • Legal Requirements: If required by law or to protect our rights.

7. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws, including the use of standard contractual clauses or adequacy decisions.

8. Your Data Protection Rights

Depending on your location, you may have the following rights under the GDPR:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data.
  • Right to Restrict Processing: Request that we limit the processing of your data.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe our processing of your data violates the law.

To exercise these rights, please contact us at hello@bonenfant-atelier.com.

9. Data Security

We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes SSL encryption and secure server environments.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last Updated” date. You are advised to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us: