Privacy Policy
Last updated: April 2026
1. Introduction
Atelier Ananda (“we”, “us”, “our”) is a bespoke design studio operated by Sharanjit Sihra, based in the United Kingdom. We are committed to protecting your privacy and handling your personal data in a transparent and lawful manner.
This policy explains what information we collect when you use our website at atelierananda.co.uk, how we use it, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).
2. Data Controller
The data controller responsible for your personal data is:
3. Information We Collect
We collect personal information that you provide directly when submitting a commission enquiry or consultation request:
Commission Enquiry
- —Full name
- —Email address
- —Phone number
- —Creative direction and project details
- —Product preferences (type, size, materials)
- —Budget indication and timeline
- —Shipping and billing addresses (if provided)
- —Uploaded images or artwork files
Consultation Request
- —Full name
- —Email address
- —Preferred consultation time
- —Optional message
Automatically Collected
We do not use cookies for tracking or advertising. We do not use third-party analytics. Basic server logs (IP address, browser type, timestamp) may be collected by our hosting provider for security and performance purposes.
4. How We Use Your Information
We use your personal information solely for the following purposes:
- —To review and respond to your commission enquiry or consultation request
- —To communicate with you about your project (proposals, progress updates, delivery)
- —To fulfil contractual obligations relating to a commissioned piece
- —To maintain internal records for business administration
We do not use your data for marketing, advertising, profiling, or automated decision-making. We will not share your information with third parties for their marketing purposes.
5. Legal Basis for Processing
Under UK GDPR, we process your personal data on the following bases:
- —Contractual necessity — Processing is necessary to respond to your enquiry and, if accepted, to perform the commission contract.
- —Legitimate interests — We have a legitimate interest in maintaining records of enquiries and client communications for business administration.
6. Data Storage & Security
Your data is stored securely using industry-standard encryption. Our database and file storage are hosted by Supabase (servers within the EU/EEA). All data is transmitted over HTTPS.
Access to personal data is restricted to Sharanjit Sihra and is protected by authenticated access controls. We do not employ third-party staff with access to client data.
7. Data Retention
We retain your personal data for the following periods:
- —Declined enquiries — Deleted within 12 months of the decline decision.
- —Completed commissions — Retained for up to 6 years for legal and accounting purposes, after which it is securely deleted.
- —Uploaded files — Artwork files associated with declined or withdrawn enquiries are deleted within 90 days.
8. Your Rights
Under UK data protection law, you have the right to:
- —Access — Request a copy of the personal data we hold about you.
- —Rectification — Ask us to correct any inaccurate or incomplete data.
- —Erasure — Request deletion of your personal data where there is no compelling reason for its continued processing.
- —Restriction — Request that we restrict the processing of your data in certain circumstances.
- —Portability — Request that we transfer your data to you or to another controller in a structured, machine-readable format.
- —Objection — Object to processing where we are relying on legitimate interests.
To exercise any of these rights, please contact us at studio@atelierananda.co.uk. We will respond within one month.
9. Third-Party Services
We use the following third-party services in the course of operating this website:
- —Supabase — Database hosting and file storage (EU/EEA servers).
- —Vercel — Website hosting and deployment.
- —Resend — Transactional email delivery (confirmation emails).
These services process data on our behalf and are bound by their own privacy policies and data processing agreements. We do not sell or share your data with any other third parties.
10. Local Storage
Our commission form uses your browser’s local storage to save your progress, allowing you to resume an incomplete submission. This data is stored only on your device and is automatically cleared upon successful submission. You can clear it at any time via your browser settings.
11. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
12. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.