Cookie Policy

Effective date: 30/05/2026
Last updated: 12/06/2026

This Cookie Policy explains what cookies and similar technologies we use on atelierbrim.co.uk, why we use them, how long we keep them, and how you can control them at any time. It supports our Privacy Policy and operates under the Privacy and Electronic Communications Regulations 2003 (PECR), the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025, in line with the ICO Cookies guidance (April 2026 update).

If you have any question about this policy, please email our Data Protection contact at studio@atelierbrim.co.uk.

1. Data controller

atelierbrim is the trading name of ZIIEMA, a French sole-trader business (micro-entreprise), which is the data controller for the cookie data we collect through atelierbrim.co.uk.

Trading name: atelierbrim
Legal entity: ZIIEMA (micro-entreprise, France)
Registered address: 92 Rue Mstislav Rostropovitch, 75017 Paris, France
SIREN: 992629022
SIRET: 99262902200029
EORI (UK): GB031660548000
Data Protection contact: see section 11

Because we offer goods to consumers in the United Kingdom, the UK GDPR and PECR apply to our processing of UK personal data under Article 3(2) of the UK GDPR.

2. What are cookies

Cookies are small text files stored on your device when you visit a website. They help the site run smoothly, remember your choices, and measure how the site is used. This policy also covers similar technologies such as pixels, tags, and local storage, even where the word 'cookie' is not strictly accurate.

3. Why we use cookies

We use cookies for four purposes:

Functionality: to make the site work (your basket, secure checkout, language and currency).
Performance: to understand how visitors use the site, anonymously, so we can improve it.
Functional preferences: to remember choices you have made (recently viewed items, saved preferences, email-marketing identification when you have subscribed).
Targeting: to deliver advertising and to measure how marketing campaigns perform.

Only strictly necessary cookies are set when you arrive. Everything else waits for your explicit consent through our cookie banner.

4. Cookie types and providers

4.1 Strictly necessary cookies (always on; PECR reg 6 exempt)

These are essential for the site to function. Under PECR reg 6, they are exempt from consent. They cannot be switched off in our system, but you can block them through your browser settings; the site may then not work as expected.

Cookie	Provider	Purpose	Duration
`_session_id`	Shopify	Maintains your browsing session	Session
`cart`	Shopify	Stores the contents of your basket	14 days
`_shopify_y`	Shopify	Identifies a returning visitor for security	1 year
`_shopify_s`	Shopify	Identifies a visitor session for security	Session
`_cmp_`	Shopify	Stores your cookie-consent choices	1 year
`secure_customer_sig`	Shopify	Keeps your account secure when signed in	20 years
`_shopify_checkout`	Shopify	Processes your checkout securely	30 minutes

4.2 Performance cookies (your consent required)

We use these to understand how visitors use our site so we can improve it. Under the ICO's guidance and PECR, analytics cookies do not fall within the 'strictly necessary' exemption; they are only set after you accept. We load Google Analytics 4 with IP anonymisation enabled; retention follows Google's published policy and the limits set out below.

Cookie	Provider	Purpose	Duration
`_ga`	Google Analytics 4	Distinguishes individual visitors (IP-anonymised)	13 months
`_ga_*`	Google Analytics 4	Persists session state for analytics (IP-anonymised)	13 months
`_gid`	Google Analytics 4	Distinguishes individual visitors (IP-anonymised)	24 hours

We have capped the retention of analytics cookies at 13 months in line with ICO best-practice guidance. The Data (Use and Access) Act 2025 allows for a lighter touch on low-risk, aggregated first-party analytics; we continue to require explicit consent for all analytics cookies as a matter of policy.

4.3 Functional cookies (your consent required)

These remember preferences and identifications you have made on the site, including the link between your browser and your email-marketing profile when you have subscribed. They are only set after you accept.

Cookie	Provider	Purpose	Duration
`localization`	Shopify	Remembers your language and region	2 years
`_orig_referrer`	Shopify	Remembers how you arrived at the site	2 years
`_landing_page`	Shopify	Remembers the page you first landed on	2 years
`klaviyo_id` / `__kla_*`	Klaviyo	Links your browser to your email-marketing profile (only if you have subscribed)	1 year

4.4 Targeting cookies (currently inactive)

We do not use advertising or marketing-tracking cookies on atelierbrim.co.uk at this time. We have not deployed Meta Pixel, TikTok Pixel, or any third-party advertising tracker. No targeting cookie is set on this site, with or without consent.

If we add an advertising tracker in the future, we will update this policy and request fresh consent through our cookie banner before any such cookie is set.

The list above reflects the cookies currently active on atelierbrim.co.uk. If we add or remove a cookie, we update this table.

5. Your consent

Under PECR and the UK GDPR, your consent to non-essential cookies must involve some form of unambiguous positive action. Pre-ticked boxes and sliders set to 'on' by default are not valid.

When you first visit atelierbrim.co.uk, our cookie banner gives you a clear choice with three options of equal prominence, the same size, colour, and position, in line with the ICO Cookies guidance (April 2026 update):

Accept all
Reject all
Manage preferences (choose category by category)

Refusing non-essential cookies is as easy as accepting them. Performance and functional cookies are only set after your explicit consent. You can withdraw your consent at any time.

6. How to manage cookies

You can change your cookie choices at any moment by clicking 'Cookie preferences' in the footer of every page on atelierbrim.co.uk. The banner will reopen with your previous choices displayed, and you can grant or withdraw consent on a category-by-category basis.

Some of the cookies above are set by providers based outside the United Kingdom (for example, Google Analytics in the United States, Shopify in Canada, Klaviyo in the United States). We rely on the appropriate safeguards under UK GDPR for these international transfers, including the UK Extension to the EU-US Data Privacy Framework and the UK International Data Transfer Agreement; see our Privacy Policy (section 6, International data transfers) for full details.

You can also manage cookies through your browser:

Chrome: Settings, Privacy and security, Cookies and other site data
Safari: Settings, Privacy, Manage Website Data
Firefox: Settings, Privacy and Security, Cookies and Site Data
Edge: Settings, Cookies and site permissions

Blocking strictly necessary cookies may prevent parts of the site from working correctly.

7. Do Not Track signal

Some browsers offer a 'Do Not Track' (DNT) signal. There is no agreed industry standard for how websites should respond to DNT, so most websites do not change their behaviour when it is set. atelierbrim respects the choice you make through our cookie banner: if you reject performance and functional cookies, none are set, regardless of your DNT setting.

8. Your rights

You can:

Refuse non-essential cookies through our banner at any time.
Withdraw your consent at any moment by clicking 'Cookie preferences' in the footer.
Request information about the personal data we collect; see our Privacy Policy for the full process and your rights under UK GDPR Articles 13 to 22.
Complain to the Information Commissioner's Office (ICO) at any time (see section 10).

9. Changes to this policy

We may update this policy as our use of cookies evolves, as guidance from the ICO changes, or as we add or remove tools on the site. The 'Last updated' date at the top shows the latest revision. The currently active cookies are always listed in the tables above.

For material changes that affect the categories of cookies we use, we will request fresh consent through our cookie banner before the new cookie is set.

10. Complaints

If you are not satisfied with how we have handled a cookie or privacy issue, please write to us so we can resolve the matter directly (see section 11).

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection and electronic-communications privacy:

Website: ico.org.uk
Helpline: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom

For free, independent consumer advice, you can also contact Citizens Advice at citizensadvice.org.uk or on 0808 223 1133 (consumer helpline). Local Trading Standards services can take enforcement action where a trader breaches consumer law.

Under PECR reg 31, the ICO has the power to impose fines of up to £500,000 for serious breaches of cookies and electronic-communications rules. Complaining to the ICO does not affect any other legal remedy you may have, including a claim for compensation under section 168 of the Data Protection Act 2018.