Privacy Policy

01Our Commitment

CARA Paris respects the confidentiality of any personal information you may share with us. This Privacy Policy explains how we collect, use, store, and protect personal data through the website www.atelier-cara.com. By using this website, you acknowledge the practices described below.

02Data Controller

The data controller responsible for the processing of your personal data is:

ICON COLLECTION L.L.C-FZ
Meydan Grandstand, 6th Floor, Meydan Road
Nad Al Sheba, Dubai, United Arab Emirates
Email: contact@atelier-cara.com

Processing is carried out under the United Arab Emirates Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL"), and where applicable, in accordance with relevant international data protection principles.

03Data We Collect

We collect personal data that you provide directly to us, including: first and last name, email address, phone number, postal address, vehicle information, and any details voluntarily included in a bespoke enquiry, contact request, or client account.

We also collect technical data when you visit the website, including: IP address, browser type, device information, pages viewed, referring URL, and interactions with our content. This data is collected through cookies and similar technologies (see Section 06).

04How We Use Your Data

We process your personal data for the following purposes:

To respond to enquiries, manage bespoke commissions, deliver our services, operate client and partner portals, send transactional emails (order confirmations, account access, project updates), measure website performance and audience, deliver and measure the performance of advertising on third-party platforms, comply with legal obligations and prevent fraud.

05Data Sharing

We do not sell your personal data. We share limited personal data only with the following categories of recipients, strictly to operate the services described above:

Service providers: Airtable (CRM and project records), Resend (transactional emails), Netlify (website hosting and serverless functions). These providers act as data processors and are bound by contractual confidentiality obligations.

Advertising platforms: Meta Platforms, Inc. (Facebook and Instagram) for measurement and advertising purposes, as detailed in Section 07.

Legal authorities: when required by applicable law, court order, or to protect our legitimate interests.

06Cookies and Tracking Technologies

We use cookies and similar technologies to operate the website, remember your preferences, measure audience, and deliver relevant advertising.

Strictly necessary cookies: required for the website to function, including session storage used by the Client and Partner portals.

Measurement and advertising cookies: set by Meta Pixel (cookies _fbp and _fbc) to measure interactions with our pages and the effectiveness of our advertising. These cookies have a maximum lifetime of 90 days.

You may block or delete cookies at any time through your browser settings. Disabling cookies may limit the functionality of certain features.

07Meta Pixel and Conversions API

Our website uses the Meta Pixel and the Meta Conversions API, services provided by Meta Platforms, Inc. ("Meta"). These technologies allow us to measure the performance of our advertising campaigns on Facebook and Instagram, understand how visitors interact with our website, and reach audiences who may be interested in our creations.

When you visit our website or submit a form, technical information (such as page views, IP address, user agent, browser cookies set by Meta) and, where you provide it, contact data (email, phone, first and last name) may be shared with Meta. Contact data is transmitted in hashed form (SHA-256) so that Meta cannot read it in clear text.

The legal basis for this processing is our legitimate interest in measuring and improving the effectiveness of our marketing activities. Data is processed by Meta in accordance with its own Privacy Policy.

You may opt out of personalised advertising at any time through your Meta Ads Preferences or by blocking Meta cookies in your browser settings.

08Data Security

All data transmitted through our website is encrypted via HTTPS (TLS). We apply technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including secure storage of credentials, role-based access to internal systems, and server-side validation of sensitive operations.

09Data Retention

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

Bespoke enquiries and client records are retained for the duration of the commercial relationship and up to 10 years thereafter, in line with applicable bookkeeping and tax obligations. Advertising and measurement data set through cookies is retained for a maximum of 90 days.

10Your Rights

Subject to applicable law, including the UAE PDPL, you have the right to: access your personal data, request correction of inaccurate data, request deletion of your data, object to or restrict certain processing activities, withdraw consent at any time where processing is based on consent, and request portability of your data.

To exercise any of these rights, contact us at contact@atelier-cara.com. We will respond within a reasonable timeframe and in accordance with applicable law.

11Updates to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or applicable law. The "Last updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically.