Legal

Privacy Policy

This policy describes how Ubud Atelier collects and uses personal data when visitors interact with ubudatelier.com, in particular through the contact and quote request form. It applies to data you submit directly and to data automatically collected by our hosting and analytics infrastructure.

Data Controller

The data controller is TANO, a simplified joint-stock company (SAS) with a share capital of 140,000 euros, registered with the Marseille Trade and Companies Register under number RCS Marseille 994 727 964, whose registered office is at 32 traverse de Carthage, 13008 Marseille, France. The director of publication is the legal representative of TANO. For any question related to your personal data, contact us at hello@ubudatelier.com.

What Data We Collect

We collect data through three main channels.

From the contact form: client type, name, company name (business enquiries), email address, delivery country, project type, budget range, project description, and any other information you choose to share. The form collects no telephone number. We treat what you submit as deliberately offered for a commercial inquiry. The form is protected against spam by Cloudflare Turnstile, which processes technical data from your browser to distinguish human visitors from bots, as described in the Cloudflare privacy policy at cloudflare.com/privacypolicy.

From server logs: our hosting provider Cloudflare automatically records technical information including IP address, browser type, timestamp, and the URL requested. This data is used to keep the site available and to defend it against abuse.

From analytics: see the Cookies and Analytics section below.

Why We Collect It

We collect and process this data to:

  • respond to commercial inquiries received through the contact form,
  • prepare project quotes, proposals, and follow-up correspondence,
  • introduce accepted projects to the partner workshop in Bali and facilitate communication between the client and the workshop,
  • maintain a B2B commercial relationship with active clients and qualified prospects.

Legal Basis

For visitors covered by the EU General Data Protection Regulation, the legal basis for processing is:

  • legitimate interest under Article 6.1.f, for handling B2B commercial prospects who actively initiate contact with us through the form,
  • consent under Article 6.1.a, for any future direct marketing communication you opt into.

We do not process data on the basis of contractual necessity unless and until a written commercial agreement is in place.

Retention Period

We keep personal data only as long as is necessary for the purposes above:

  • active prospects: up to 3 years from the date of last contact,
  • active commercial relationships: for the full duration of the relationship and 10 years after, in line with applicable commercial code requirements covering invoices and supporting documents,
  • server logs: held by our hosting provider Cloudflare under their own retention rules.

Data Sharing and Recipients

Personal data may be shared with:

  • our internal team and authorised collaborators involved in handling the inquiry,
  • the partner workshop in Bali, Victory 999, which quotes, produces and ships accepted projects,
  • our hosting provider, Cloudflare, which operates the technical infrastructure of ubudatelier.com,
  • Cloudflare, for site usage measurement (Cloudflare Web Analytics) and the spam check on the contact form (Turnstile),
  • the workshop's freight forwarders and customs brokers, where delivery details are required for accepted projects.

We do not sell, rent, or otherwise commercially trade personal data to any third party under any circumstance.

International Transfers

Because the partner workshop operates from Bali, Indonesia and the site uses hosting and analytics infrastructure based in the United States, your data may be processed and stored in France, in Indonesia and in the United States. Where required by applicable law, we rely on Standard Contractual Clauses or other recognised safeguards to govern those transfers.

Cookies and Analytics

ubudatelier.com does not use advertising or analytics cookies.

Cloudflare Web Analytics: visits are counted without cookies or any other storage in your browser, and without identifying individual visitors.

Cloudflare Turnstile: the spam check on the contact form processes technical data from your browser, such as its IP address and browser type, only to tell people from bots. This processing is strictly necessary to protect the form.

More in the Cloudflare privacy policy at cloudflare.com/privacypolicy.

Your Rights

Depending on your jurisdiction, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. To exercise any of these rights, contact us at hello@ubudatelier.com with reasonable proof of identity. We respond to verified requests within 30 days.

Complaints

If you believe your data has been processed in a way that violates applicable law, you may lodge a complaint with your national data protection authority. EU and French residents may file with the Commission Nationale de l'Informatique et des Libertés (CNIL) at cnil.fr.

Updates

This policy may be updated to reflect changes in our practices or in applicable law. The effective date below indicates when the current version was published.

Effective date: September 22, 2026.