Last updated: 25 September 2026
1. Who controls your personal data
This Privacy Policy explains how personal data is processed in connection with ATELIER SERA and ateliersera.com.
The data controller is:
Legal entity / sole trader: Clyqra
Organisation number: 040404-7276
Address: Björnsonsgatan 66, 168 44 Bromma, Sweden
Email for privacy matters: support@ateliersera.com
2. Personal data we may collect
Depending on how you interact with ATELIER SERA, we may process:
- Identity and contact data, such as your name, email address, billing details and information you include when contacting us.
- Order and transaction data, such as products purchased, order value, currency, transaction status, refunds and purchase history.
- Payment-related data, such as payment status and identifiers supplied by our payment processor. Complete card details are generally processed directly by the payment provider rather than ATELIER SERA.
- Technical and usage data, such as IP address, browser/device information, timestamps, security logs and basic information about how the Website is accessed. When analytics are enabled, this may also include page views, interactions, referrer and campaign details, and error or performance information.
- Preference and marketing data, where applicable, such as newsletter subscription status, consent records and communication preferences.
- Customer-support and withdrawal-request data, including messages, correspondence, the name, email, order reference, timestamp and optional information submitted with a withdrawal notice, and information needed to resolve an order or support request.
We aim to collect only data reasonably necessary for the purposes described below.
3. Why we process personal data and our legal bases
Fulfilling orders and our contract with you
We process data necessary to accept payment, provide purchased digital content, send confirmations, manage downloads and provide order-related support.
Legal basis: performance of a contract or steps requested before entering into a contract.
Accounting, tax and legal obligations
We may retain transaction and business records where required by accounting, tax, consumer or other applicable law.
Legal basis: compliance with a legal obligation.
Customer support, withdrawal notices and claims
We process correspondence, withdrawal notices and order information to answer questions, investigate delivery issues, record and respond to consumer notices, handle complaints and establish, exercise or defend legal claims.
Legal basis: performance of a contract, compliance with legal and consumer-protection obligations and/or our legitimate interests in providing support and protecting legal rights, as applicable.
Security and operation of the Website
We may process technical logs and security information to protect the Website, prevent abuse and fraud, diagnose errors and keep our services operational.
Legal basis: our legitimate interests in operating a secure and reliable service, balanced against your rights and interests.
Analytics
The Website uses PostHog for product analytics and Vercel Web Analytics and Speed Insights for aggregated traffic and performance measurement. PostHog may use browser storage, including cookies and local storage, to distinguish visits and remember analytics identifiers. Analytics may record page views, interactions, device/browser details, referrers, campaign information and technical errors. Vercel states that Web Analytics does not use cookies and uses a daily rotating visitor hash for aggregated statistics.
Analytics data is sent to the configured service providers; the PostHog project is configured to use its EU ingestion host. These providers may process technical data such as IP address as part of receiving and protecting requests. Where prior consent is legally required, we must obtain it before using the relevant analytics technology. Where analytics processing relies on consent, you may withdraw it at any time.
Legal basis: consent where required; otherwise another lawful basis only where legally appropriate.
Marketing communications
If you choose to receive marketing communications, we may use your contact information to send them. You can unsubscribe at any time.
Legal basis: consent where required, or another lawful basis where specifically permitted by applicable law.
4. Where personal data comes from
We normally receive personal data directly from you when you place an order, contact us, subscribe to communications or interact with the Website. We may also receive transaction or fraud-prevention information from payment and technical service providers involved in completing your order or operating the Website.
5. Service providers and recipients
We may share personal data with trusted providers where necessary to operate ATELIER SERA, including categories such as:
- payment processing providers;
- website hosting and infrastructure providers;
- email and transactional-message providers;
- cloud storage and technical service providers;
- analytics providers, if enabled;
- fulfilment providers for physical products, if and when such products are offered;
- professional advisers, authorities or other recipients where required by law or reasonably necessary to protect legal rights.
Providers processing personal data on our behalf are expected to process it under appropriate contractual and data-protection safeguards.
Current service providers: Stripe (payments), Vercel (website hosting), Apple iCloud Mail (transactional and account email), PostHog (product analytics); Vercel Web Analytics and Speed Insights (traffic and performance analytics), Supabase (accounts, authentication and database); Google Drive (purchased artwork downloads); SoundCloud (optional Radio playback).
6. International transfers
Some service providers may process personal data outside Sweden or the European Economic Area. Where personal data is transferred to a country without an applicable adequacy decision, we will use an appropriate lawful transfer mechanism where required, such as approved standard contractual clauses, together with additional safeguards where appropriate.
The exact transfer arrangements depend on the service providers actually used.
7. How long we keep personal data
We keep personal data only for as long as necessary for the relevant purpose, including:
- order, payment and accounting records for the period required under applicable bookkeeping, tax and consumer-law rules;
- customer-support correspondence and withdrawal-request records for as long as reasonably needed to resolve the matter, demonstrate receipt and handling, comply with consumer-law obligations and manage potential legal claims;
- security logs for a proportionate period based on operational and security needs;
- marketing information until you unsubscribe, withdraw consent or the data is otherwise no longer required, subject to limited suppression records where needed to respect your opt-out.
Where a precise retention period cannot reasonably be stated, we use criteria such as legal requirements, the nature of the relationship, limitation periods, security needs and whether continued retention remains necessary.
8. Cookies and similar technologies
The Website uses cookies and similar browser storage for essential functions, including account authentication and session refresh, security, checkout and verifying access to order and download pages. The shopping bag is stored in your browser local storage so it remains available as you move around the Website. These functions are needed to provide services you request.
The Website also has analytics tools. PostHog may use cookies and local storage for analytics identifiers and session information. Vercel Web Analytics and Speed Insights measure visits and performance; Vercel states its Web Analytics does not use cookies. PostHog is initialized automatically when its project configuration is present, and the Website currently has no cookie preference interface. This policy is information about the technologies; it does not itself collect or record consent. If prior consent is required for an analytics technology, that technology must not be used until consent has been obtained. You can withdraw or change consent where processing relies on it.
If you press Play in Atelier Sera Radio, the Website loads SoundCloud’s player and script from SoundCloud. SoundCloud may then store or access information on your device and receive technical and playback information under its own privacy and cookie terms. You can avoid this third-party connection by not starting playback.
Cookie names and lifetimes can vary with the service and account configuration. This policy describes the categories and purposes of the technologies used; browser controls can also be used to remove or block stored information, although essential account, checkout or download functions may then stop working.
9. Your data-protection rights
Subject to the conditions and exceptions in applicable law, you may have the right to:
- request access to personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure of personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive certain personal data in a portable format;
- withdraw consent at any time where processing relies on consent, without affecting processing already carried out lawfully before withdrawal;
- lodge a complaint with a competent data-protection authority.
In Sweden, the supervisory authority is Integritetsskyddsmyndigheten (IMY).
To exercise your rights, contact support@ateliersera.com. We may need to verify your identity before fulfilling a request.
10. Automated decision-making
ATELIER SERA does not intend to make decisions that produce legal or similarly significant effects solely through automated processing unless this is specifically disclosed and lawfully implemented.
Payment or fraud-prevention providers may use automated systems as part of their own services; their processing may also be governed by their own privacy information.
11. Children
ATELIER SERA is not intentionally directed at young children and we do not knowingly seek to collect children's personal data beyond what may be necessary to process a lawful transaction. If you believe a child has provided personal data inappropriately, contact us.
12. Security
We use reasonable technical and organisational measures appropriate to the nature of the data and the risks involved. No online service can guarantee absolute security, but we work to limit access, use reputable service providers and reduce unnecessary collection and retention.
13. Changes to this Privacy Policy
We may update this Privacy Policy when our services, tools or legal obligations change. The current version will be published on the Website with an updated date. Material changes may be communicated more prominently where appropriate.
14. Contact
For questions about this Privacy Policy or your personal data:
ATELIER SERA / Clyqra
Björnsonsgatan 66, 168 44 Bromma, Sweden
040404-7276
support@ateliersera.com