Privacy policy

Last updated: May 14, 2026

Thank you for trusting Midnight Atelier with your privacy. We take that trust seriously.

This policy explains what information we collect, how we use it, and what rights you have. We've tried to make it as clear and human as possible, but if anything's confusing or you have questions, just email us at info@themidnightatelier.com.

By using our website, you're agreeing to this policy. If anything here doesn't sit right with you, please don't use our services—and let us know why. Your feedback matters.

1. WHAT INFORMATION DO WE COLLECT?

Information You Give Us When you create an account, make a purchase, or contact us, you might share:

Name, email, phone number
Shipping and billing addresses
Account username and password
Payment information (processed securely through Stripe/PayPal—we never see your full card details)

Information Collected Automatically Like most websites, we automatically collect some technical info when you visit:

IP address
Browser type and device information
Pages you view and how you interact with the site
Location data (based on your IP address)

We use cookies and similar tech to collect this info. See our Cookies Policy for details.

2. HOW DO WE USE YOUR INFORMATION?

We use your information to:

Process and fulfill your orders (including shipping and customer support)
Improve your experience (remembering your preferences, personalizing content)
Communicate with you (order updates, customer service, occasional marketing emails—you can opt out anytime)
Keep the site secure (fraud prevention, troubleshooting)
Analyze and improve (understanding how people use the site so we can make it better)
Comply with legal requirements (if we're legally obligated to share information)

We'll never sell your personal information. Period.

3. WHO DO WE SHARE YOUR INFORMATION WITH?

We only share your information when necessary:

With Shopify Our store is hosted on Shopify Inc. Shopify provides us with the online e-commerce platform that allows us to sell our products and services to you. Your data may be stored through Shopify's data storage, databases, and the general Shopify applications. They store your data on secure servers behind a firewall.

To help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes.

To learn more about how Shopify uses your personal information and any rights you may have, visit the Shopify Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information through the Shopify Privacy Portal.

Service Providers We work with trusted partners who help us run the business (payment processors like Stripe/PayPal, shipping carriers, email platforms, marketing services). They're contractually required to protect your data and only use it for the services they provide us.

Business and Marketing Partners We may share your information with business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices.

With Your Consent When you direct, request, or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.

Legal Requirements If required by law (court orders, subpoenas, regulatory requests), we may need to share information. We'll only do this when legally obligated.

Business Transfers If Midnight Atelier is acquired or merged with another company, your information may be transferred as part of that transaction. We'll notify you if this happens.

We do NOT sell your data to third parties for marketing purposes.

4. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy and comply with legal requirements:

Active Accounts: While your account is active and for legitimate business purposes
Closed Accounts: Up to 1 month after account closure (unless legally required to keep it longer)
Transaction Records: Up to 7 years for tax and accounting compliance
Marketing Data: Until you unsubscribe or request deletion
Legal/Fraud Prevention: As long as necessary to comply with legal obligations or protect our rights

When we no longer need your information, we will securely delete or anonymize it. Some information may remain in backup systems for a short period but won't be actively used.

5. HOW DO WE PROTECT YOUR INFORMATION?

We use industry-standard security measures (encryption, secure servers, access controls) to protect your data. That said, no system is 100% foolproof—so we can't guarantee absolute security. Please use strong passwords and keep your account info safe.

6. YOUR PRIVACY RIGHTS

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

Right to Access / Know You may have a right to request access to personal information that we hold about you.

Right to Delete You may have a right to request that we delete personal information we maintain about you.

Right to Correct You may have a right to request that we correct inaccurate personal information we maintain about you.

Right of Portability You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.

Right to Opt Out of Sale or Sharing for Targeted Advertising Depending on where you reside, you may have a right to opt out of the "sale" or "sharing" of your personal information or to opt out of processing for purposes considered "targeted advertising," as defined in applicable privacy laws.

You can exercise your opt-out rights by:

Emailing us at info@themidnightatelier.com
Enabling Global Privacy Control in your browser (see below)
Adjusting your cookie preferences

Important: We do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

Global Privacy Control If you visit our website with the Global Privacy Control opt-out preference signal enabled, we will automatically treat this as a request to opt-out of targeted advertising for the device and browser you use to visit our website. If we can associate the device with your account, we will apply the opt-out to your account as well.

To learn more about Global Privacy Control, visit https://globalprivacycontrol.org/.

Note: Other than Global Privacy Control, we do not recognize "Do Not Track" signals that may be sent from your web browser or device.

Managing Marketing Communications

You can opt out of marketing emails at any time by:

Clicking "unsubscribe" in any marketing email
Updating your account preferences
Emailing us at info@themidnightatelier.com

Note: Even if you opt out of marketing, we'll still send transactional emails (order confirmations, shipping updates, customer service responses) that are necessary for your purchases.

Additional Rights for UK and EU Residents

If you reside in the UK or European Economic Area, you have the following additional rights:

Right to Object and Restriction of Processing You may have the right to ask us to stop or restrict our processing of personal information for certain purposes.

Right to Withdraw Consent Where we rely on consent to process your personal information, you have the right to withdraw this consent at any time. Withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint You have the right to lodge a complaint with your local data protection authority. For the EEA, you can find your supervisory authority here.

For Canadian Residents

Under PIPEDA (Personal Information Protection and Electronic Documents Act), you have the right to:

Access your personal information
Challenge the accuracy of your data
Withdraw consent (with certain exceptions)

To exercise these rights, contact us at info@themidnightatelier.com.

Exercising Your Rights

Authorized Agents You may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us.

Verification We may need to verify your identity before we can process your requests, as permitted or required under applicable law.

Non-Discrimination We will not discriminate against you for exercising any of these rights.

Right to Appeal Depending on where you live, you may have the right to appeal our decision regarding your privacy rights request. If you wish to appeal, please contact us at info@themidnightatelier.com with the subject line "Privacy Rights Appeal."

We will respond to your request in a timely manner as required under applicable law.

7. COOKIES & TRACKING

We use cookies to improve your experience. You can manage cookie preferences in your browser settings, though some features may not work properly if you disable them.

See our Cookies Policy for full details.

8. DO WE COLLECT INFORMATION FROM MINORS?

No. You must be at least 18 years old to use this site. We don't knowingly collect information from anyone under 18. If we discover we've accidentally collected data from a minor, we'll delete it immediately.

Parental Notice: If you believe we've collected information from someone under 18, contact us immediately at info@themidnightatelier.com and we will:

Verify the claim
Delete the information within 48 hours
Terminate the account

By using this site, you confirm you are at least 18 years old.

9. CALIFORNIA RESIDENTS (CCPA)

If you're a California resident, you have the right to:

Know what personal information we collect and how we use it
Request deletion of your personal information
Opt out of the "sale" of personal information (we don't sell your data, but you have the right)
Not be discriminated against for exercising your privacy rights

To make a request, email info@themidnightatelier.com. We'll respond within 30 days.

Categories of Information We Collect:

Identifiers (name, email, address, IP address)
Commercial information (purchase history, payment details)
Location data (based on IP address)
Usage data (how you interact with the site)

We do NOT sell personal information.

10. DO-NOT-TRACK SIGNALS

Most browsers have a "Do Not Track" setting. We respect your privacy, but there's currently no universal standard for how to respond to DNT signals. If that changes, we'll update this policy.

11. CHANGES TO THIS POLICY

We may update this policy occasionally to reflect changes in our practices or legal requirements. When we do, we'll update the "Last updated" date at the top and notify you if the changes are significant.

We encourage you to review this policy periodically so you're always informed.

12. DATA BREACH NOTIFICATION

In the unlikely event of a data breach that affects your personal information, we will:

Notify you within 72 hours (where legally required) via email and/or a prominent notice on our website
Inform relevant authorities as required by law
Provide information about what happened, what data was affected, and steps we're taking to address it

We take security seriously and have measures in place to prevent breaches, but transparency is important to us if something does occur.

13. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than your own (we operate in both the US and Canada). We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable laws.

For EU/EEA residents: We comply with GDPR requirements for international data transfers, including using standard contractual clauses and ensuring adequate protection.

14. AUTOMATED DECISION-MAKING

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Any product recommendations (such as through our Pleasure Quiz) are suggestions only based on your preferences. They do not limit your access to our full product catalog, and you're always free to browse and purchase any items you choose.

15. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites, including:

Manufacturer websites
Educational resources
Payment processors
Social media platforms

We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information. This privacy policy applies only to information collected through our website.

16. YOUR ACCOUNT SECURITY

You are responsible for:

Maintaining the confidentiality of your password
All activity that occurs under your account
Notifying us immediately of any unauthorized use at info@themidnightatelier.com

Important: We will never ask for your password via email or phone. If someone requests this information claiming to be from Midnight Atelier, do not provide it and contact us immediately.

To protect your account:

Use a strong, unique password
Don't share your login credentials
Log out when using shared devices
Enable two-factor authentication if available

17. OTHER US STATE PRIVACY RIGHTS

Residents of Virginia, Colorado, Connecticut, and Utah have rights similar to California residents under their respective state privacy laws, including:

The right to access your personal information
The right to delete your personal information
The right to opt out of the sale of personal data (we don't sell your data)
The right to correct inaccurate information