13 September 2026
Atelier Lab ("we") handles information about people who use this website as described in this policy.
1. Collection of personal information
We state our purposes and collect personal information by lawful and appropriate means, limited to what is necessary for those purposes. This mainly includes email addresses, membership, subscription and payment information, enquiries, and access records such as IP addresses and browser information. Card numbers are processed by the payment provider and are not stored by this website.
2. Purposes of use
We use the information we collect for the following purposes. Unless permitted by law, we do not use personal information beyond these purposes without your consent.
- Providing, maintaining, protecting and improving our services, including registration, identity verification, billing and payments
- Providing service information and responding to enquiries
- Creating and analysing statistics about website usage and sources of visits to improve articles and their promotion
- Responding to abuse and breaches of our terms
- Notifying you of changes to our terms and policies
- Incidental purposes reasonably related to the purposes above
Additional information for Europe: legal bases
Where the GDPR applies, we process information for membership services, payments and related enquiries to perform our contract with you. Protecting the website, responding to abuse and retaining records needed to protect rights are based on our legitimate interest in operating the service safely, limited to what is necessary. Optional analytics is based on your consent. Without information needed for registration or payment, we may be unable to provide the relevant service.
3. Disclosure to third parties
We do not disclose personal information to third parties without your prior consent, except for necessary outsourcing within our stated purposes, business succession, disclosures required by law and other exceptions permitted by applicable law.
International disclosures and outsourcing are also subject to applicable transfer requirements, such as obtaining consent after providing the required information or ensuring legally compliant safeguards. Analytics data is stored in the United States. Other information may also be processed outside Japan, including in the United States, as part of our service providers' operations.
Main service providers and international processing
- Website delivery and operation: Cloudflare (privacy policy · data processing terms)
- Analytics information storage: Google Cloud (data processing terms)
- Payments and subscriptions: Stripe (privacy policy · data processing terms). Stripe also processes information under its own responsibility for purposes such as fraud prevention and legal compliance.
See the providers' terms for processing countries and subprocessors. For transfers outside the European Economic Area (EEA), their data processing terms specify safeguards applicable to covered transfers, such as Standard Contractual Clauses (SCCs) or frameworks based on adequacy decisions. Contact us below for details of the processing or copies of the safeguards.
4. Management of personal information
We apply necessary and appropriate security measures, including encrypted communications and access restrictions, to protect against leaks, loss, damage and unauthorised access. When outsourcing processing, we review providers' contracts and terms and exercise necessary and appropriate oversight.
We retain information as needed to provide services, respond to enquiries and address accounting or legal requirements, and appropriately delete information that is no longer needed.
5. Cookies and analytics
We use cookies and similar technologies to maintain login sessions and save consent choices. Login sessions last 30 days and may be renewed through use; consent choices are stored for 180 days. Logging out ends the session. Disabling cookies or similar storage may prevent some features from working.
To improve articles and their promotion, a system managed by this website analyses reading activity, article feedback, display and interaction issues, and referral sources, only for the purposes you consent to. Visits and reading activity uses a cookie lasting up to 90 days to recognise the same browser, return visits and navigation between pages. Referral sources identifies arrivals from external websites and sharing links; these are linked to subsequent browsing only when both purposes are allowed. Analytics records exclude readers' IP addresses, login cookies, names, email addresses and form entries, and are not linked to membership or purchases. Records are periodically deleted based on a 90-day retention period, and aggregate reports on a 13-month period.
Analytics consent is optional. Declining does not affect access or membership features. You can change or withdraw consent at any time through "Analytics preferences" in the footer. Withdrawal stops measurement and removes the visitor cookie without affecting the lawfulness of earlier processing. Records necessary to deliver and secure the service are handled separately from optional analytics.
6. Your rights and contact details
For requests to access, correct, stop use of or delete personal information, restrict or object to processing, or receive your data, contact altria@atelier-lab.com. We verify your identity and respond under applicable law. Because analytics identifiers are limited, we may be unable to isolate your records. You may also lodge a complaint with a supervisory authority where applicable.
The operator's name, address and telephone number are disclosed promptly by email on request. See seller information for how to request them.