Privacy, Cookies & Terms

1. Information We Collect

We collect only the minimum personal information needed to operate the Site and respond to correspondence. We do not collect sensitive personal data (such as health, racial or ethnic origin, religious beliefs, biometric or genetic data, sexual orientation, or immigration status) unless you voluntarily include it in a message.

Information you provide directly:

• Green Letter subscription: your email address, used only to send the weekly editorial letter.
• Contact form: your name, email address, subject, and message, used only to reply to your note.
• Correspondence: any further information you choose to include in messages you send us.

Information collected automatically:

• Server logs: IP address, browser type and version, referring page, the pages visited, and the date/time of each visit. These are kept for a short period for security and abuse-prevention only.
• Anonymous analytics: aggregate, non-identifying counts of page views and general referrers, used to understand which stories are read.
• Cookies and similar technologies: see Section 5 below.

Inferences: we do not draw inferences from personal information to create profiles about you.

2. How We Collect Information

We collect information in three ways: (a) directly from you when you subscribe to the Green Letter, submit the contact form, or otherwise write to us; (b) automatically when you visit the Site, through server logs and cookies; and (c) from third-party service providers that help us operate the Site (for example, the hosting provider and the font/CDN provider), as listed in Section 6. We do not buy personal information from data brokers, and we do not append third-party data to the records we hold.

3. Lawful Basis for Processing (GDPR)

Under Article 6 of the GDPR, we process personal information only on the following lawful bases:

• Consent (Art. 6(1)(a)) — when you subscribe to the Green Letter or accept non-essential cookies. You may withdraw consent at any time.
• Contractual necessity (Art. 6(1)(b)) — to respond to your enquiries and provide the correspondence you have requested through the contact form.
• Legitimate interests (Art. 6(1)(f)) — to operate, secure, and improve the Site, including the processing of server logs for security and abuse prevention. Our legitimate interest is the proper functioning and protection of the Site; this is balanced against your rights and is never used for direct marketing beyond what you have consented to.
• Legal compliance (Art. 6(1)(c)) — where we are required to retain records to comply with a legal obligation (for example, tax or accounting records of a purchase, where applicable).

For special categories of personal data (which we do not solicit), we would rely only on your explicit consent under Article 9, which you may withdraw at any time.

4. How We Use Your Information

We use the information we collect to:

• deliver the Green Letter and other correspondence you have requested;
• respond to notes you send through the contact form;
• operate, maintain, and secure the Site, and prevent fraud or abuse;
• understand, in aggregate, which stories are read, so that we may improve the editorial journal;
• comply with legal obligations and protect our legitimate interests as described in Section 3.

We do not use your personal information for: targeted advertising; profiling that produces legal or similarly significant effects about you; or any automated decision-making. There is no fully automated processing of your data that produces a decision affecting you.

5. Cookies & Tracking Technologies

The Site uses cookies and similar technologies only where strictly necessary. We do not set advertising cookies, cross-site tracking cookies, or social-media cookies.

Categories of cookies we use:

Category	Purpose	Storage period	Type
Strictly necessary	To remember your search query between page loads and to keep the Site functioning.	Session (destroyed when you close the browser)	First-party
Preference	To remember display preferences you set (for example, reduced-motion).	Up to 12 months	First-party
Analytics	Anonymous, aggregate counts only; no cross-site tracking.	Up to 14 months	First-party
Advertising / Marketing	Not used.	—	—
Third-party / Cross-site	Not used.	—	—

Most browsers allow you to control cookies through their settings. Disabling strictly necessary cookies may affect how the Site functions. Where consent is required for non-essential cookies, we ask for it before setting them, and you may withdraw consent at any time through the same control.

6. Third-Party Services & Processors

We use a small number of third-party processors to operate the Site. Each processor acts on our behalf only, under written terms that require appropriate confidentiality and security. Current processors:

• Eco-friendly hosting provider — hosts the Site; receives server logs and IP addresses.
• Google Fonts / Google CDN — serves the display fonts (Playfair Display, Inter, Space Mono) and JavaScript libraries (Anime.js, Three.js). When a page loads, your browser may request these from Google’s servers, which may log the request. See Google’s Privacy Policy.
• jsDelivr CDN — serves the JavaScript libraries. See jsDelivr’s Privacy Policy.

We do not share your personal information with any other third party except: (a) where required by law; (b) to protect our rights, property, or safety, or that of our visitors; or (c) in connection with a sale, merger, or transfer of all or part of the atelier’s business, in which case we will require the recipient to honour this policy.

7. International Data Transfers

The Site and its processors may be located outside your country of residence, including in the United States and the European Union. Where personal data is transferred outside the European Economic Area or the United Kingdom, we do so only on the basis of appropriate safeguards — for example, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Agreement, or another recognised transfer mechanism — or under an applicable adequacy decision. Where we rely on Standard Contractual Clauses, we have assessed whether supplementary measures are needed and will apply them where required.

8. Data Retention

We keep personal information only as long as necessary for the purposes set out in this policy:

• Green Letter subscriptions: until you unsubscribe, then deleted within 30 days.
• Contact form correspondence: retained for as long as the conversation remains open, and for up to 24 months thereafter for record-keeping, then deleted.
• Server logs: up to 30 days for security and abuse prevention, then aggregated or deleted.
• Anonymous analytics: kept indefinitely, as they cannot identify you.

When information is no longer needed, it is either irreversibly anonymised or securely deleted, “like dust brushed from the shelf”.

9. Your Privacy Rights (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights:

• Right of access — to a copy of the personal data we hold about you.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to erasure (“right to be forgotten”) — to have your data deleted, subject to lawful exceptions.
• Right to restrict processing — to ask us to limit how we use your data.
• Right to data portability — to receive your data in a structured, machine-readable format and to transmit it to another controller.
• Right to object — to object to processing based on legitimate interests or carried out for direct marketing (though we do not conduct direct marketing).
• Right to withdraw consent — at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint — with your local data protection authority. For the EU, see the EDPB members list; for the UK, the Information Commissioner’s Office at ico.org.uk.

To exercise any of these rights, write to [email protected]. We respond within one month, extendable by two further months where requests are complex, in which case we will inform you of the extension within the first month.

10. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you the following rights:

• Right to know — the categories and specific pieces of personal information we collect, the sources, the business or commercial purpose, and the categories of third parties with whom we share it.
• Right to delete — to have your personal information deleted, subject to exceptions.
• Right to correct — to have inaccurate personal information corrected.
• Right to opt-out of sale or share — Regen Atelier does not sell personal information and does not share it for cross-context behavioural advertising, so no opt-out is necessary.
• Right to limit use of sensitive personal information — we do not collect or use sensitive personal information for the purposes that would trigger this right.
• Right to non-discrimination — we will not discriminate against you for exercising any of these rights.

Authorised agents may submit requests on your behalf with written permission. To exercise any right, contact [email protected]. We verify your identity before disclosing or deleting personal information.

11. Other U.S. State Privacy Rights

If you are a resident of another U.S. state with a comprehensive privacy law (for example, Virginia under the VCDPA, Colorado under the CPA, Connecticut under the CTDPA, Utah under the UCPA, or Texas under the TDPSA), you may have rights substantially similar to those described in Sections 9 and 10, subject to certain conditions. Some states also provide additional rights, such as:

• CalOPPA (California Online Privacy Protection Act): this policy responds to CalOPPA’s requirements, including the disclosure of how we respond to Do Not Track signals (see Section 13).
• Shine the Light (California Civil Code §1798.83): California residents may request notice of the categories of personal information we share with third parties for their direct marketing purposes. We do not share personal information for third-party direct marketing.
• Nevada Revised Statutes Chapter 603A: because we do not sell personal information as defined by NRS 603A, no opt-out is necessary.

To exercise any state-law right, contact [email protected].

12. Children’s Privacy

The Site is a sustainable-home editorial journal and is not directed to children. We do not knowingly collect personal information from children under the age of 13 (under 16 for residents of California, as required by CCPA/CPRA), in compliance with the Children’s Online Privacy Protection Act (COPPA) and similar state laws. If you believe a child has provided us with personal information, please contact [email protected] and we will delete it promptly.

13. Do Not Track Signals

Some browsers offer a “Do Not Track” (DNT) signal. Because there is currently no industry consensus on what DNT means or how it should be interpreted, the Site does not respond to DNT signals as a separate control. However, as described throughout this policy, we do not conduct third-party advertising, cross-site tracking, or sale of personal information, so the practical effect for visitors who enable DNT is the same as for all other visitors: no advertising tracking, no cross-site tracking, no sale of data.

14. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information against unauthorised access, alteration, disclosure, or destruction. These include HTTPS/TLS encryption for data in transit, restricted access controls, and regular review of our practices. The Site is hosted on eco-friendly servers with carbon emissions below the industry average. No method of transmission over the internet, or method of electronic storage, is fully secure; while we strive to protect your information, we cannot guarantee absolute security.

15. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the “Last revised” date at the top of this page. If we make a material change — for example, a change to the categories of personal information we collect, or to how we use it — we will provide a more prominent notice, such as by displaying a notice on the Site or, where we have your email address, by sending you a Green Letter notice. We encourage you to review this page periodically.

16. Terms of Use

By accessing the Site you agree to the following terms:

• Permitted use: the Site is provided for personal, non-commercial reading. You may view, download, and print pages from the Site for your own personal, non-commercial use.
• Intellectual property: all content on the Site — including text, images, the Regen Atelier name, logo, and editorial design — is owned by or licensed to Regen Atelier and is protected by copyright, trademark, and other laws. You may not reproduce, republish, or redistribute any substantial part of the Site without prior written permission, except for the limited fair-use / quotation rights provided by applicable law.
• Acceptable use: you agree not to use the Site to: (a) violate any law or regulation; (b) infringe the rights of any person; (c) transmit viruses, malware, or harmful code; (d) attempt to gain unauthorised access to any part of the Site; (e) interfere with the proper functioning of the Site; or (f) use automated means to scrape or copy content except as permitted by applicable law.
• Disclaimer: the Site is provided “as is” and “as available”. To the fullest extent permitted by law, Regen Atelier disclaims all warranties, express or implied, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Site will be uninterrupted or error-free.
• Limitation of liability: to the fullest extent permitted by law, Regen Atelier and its affiliates, officers, curators, and suppliers shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of data, arising out of or in connection with your use of the Site.
• Indemnity: you agree to indemnify and hold Regen Atelier harmless from any claim or demand arising out of your breach of these Terms or your misuse of the Site.
• Governing law: these Terms are governed by the laws applicable at the atelier’s principal place of business, without regard to conflict-of-laws principles. Any dispute shall be brought exclusively in the courts of that jurisdiction, except where a consumer-protection law in your jurisdiction grants you the right to bring proceedings in your local courts.
• Third-party links: the Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. This policy applies only to Regen Atelier.

17. Contact & Exercising Your Rights

To exercise any right described in this policy, to ask a question about how we handle personal information, or to make a complaint about our practices, please contact the curator:

Regen Atelier — Sustainable Design Buyer
Curator: Aria Lindqvist
Email: [email protected]
Web: Contact page

We acknowledge every request within one month (or as required by your local law) and act on it within the timeframe set by the applicable regulation. If you are not satisfied with our response, you have the right to complain to your local data protection authority — for example, the Information Commissioner’s Office in the UK, or the relevant supervisory authority in your EU member state.