Privacy policy.

1. Who we are

Bolt & Baste (the data controller for this site), No. 35 Xingdong Road, Xingning City, Meizhou, Guangdong Province, China 514500.
Email: Email the atelier · Phone / WhatsApp: +86 137 2365 9289

2. What we collect, and why

• Order information – the name, email, street address, city, postal code, country and optional note you submit through the checkout page. Needed to confirm stock, arrange payment, ship your order and handle returns or warranty.
• Messages you send us – email or WhatsApp content, including the measurements you share, so we can advise on size and keep a record of support and warranty cases.
• Nothing else. This site has no user accounts, no newsletter signup, no advertising pixels and no analytics of any kind.

3. How your order information travels

When you send an order request, the form data is transmitted to our mailbox (our order mailbox) through an email relay service (FormSubmit). If the relay is unreachable, your device opens your own mail app with the message prefilled instead. Payment itself never happens on this site: after we confirm stock you receive a secure, hosted payment link from the payment provider (card or PayPal) – your full card details are entered on the provider’s page and are never seen by or stored on this site.

4. Cookies and local storage

This site sets no tracking cookies. Two bits of data are stored in your browser’s localStorage, on your device only, and are never transmitted to us or anyone else:

• bb.cart.v1 – your shopping cart contents
• bb.coupon.v1 – whether you copied or closed the welcome offer, so it does not nag you again

Clearing your browser data removes both.

5. Who we share data with

Only what is needed to fulfil your order: the email relay that delivers your order request to us, the payment provider you choose at checkout (their own privacy policy governs the payment), and the shipping carrier that delivers your parcel. We do not sell, rent, trade or share your data for marketing. We may disclose information if the law genuinely requires it.

6. How long we keep it

• Order records: kept while needed for warranty (12 months) and accounting, then deleted or anonymised.
• Measurements and fit notes: kept with the order so a repeat order is easier, deleted on request.
• Support and warranty messages: kept for the same period so a second issue is faster to solve.
• Requests to delete: honoured unless we are legally required to keep a specific record.

7. Your rights

Write to Email the atelier at any time to ask what we hold about you, request a copy, have it corrected, or have it deleted. We answer within 30 days, in English, from a person. If you are in the EU/UK, you also have the rights your local law grants (access, rectification, erasure, restriction, portability, objection) – we honour those requests the same way. Nothing in this policy limits statutory rights you have where you live.

8. International processing

We operate from China, and the services above (email relay, payment provider, carrier) may process data in other countries as part of doing their jobs. By ordering, you understand your data will be handled across borders for these purposes.

9. Security

We keep the surface small on purpose: no accounts to breach, no card data on this site, no stored passwords. Access to order emails is limited to the person who fulfils your order. If we ever learn of a breach affecting your data, we will tell you.

10. Children

This store is not directed at children, and we do not knowingly hold data from anyone under 16.

11. Changes

If this policy changes, the new version appears here with a new date. Questions about privacy are welcome at Email the atelier – a person answers, not a script.