This Privacy Policy explains how NECROS ATELIER collects, uses, stores and protects information when you browse our website, create an account, place an order, purchase or use a Gift Card, contact us or use other services provided through the website.

By using this website, you acknowledge the practices described in this Privacy Policy.

We collect information reasonably necessary to provide our store, fulfil orders, operate customer features and support customers.

• Account information such as your name, email address and profile details.
• Contact information such as your phone number.
• Delivery information including recipient name, address, city, district and postal code.
• Order information including purchased products, selected variants, quantities, discounts, Gift Card usage, Elite Points activity and order history.
• Payment-related information such as selected payment method, payment status and transaction references available to us.
• Bank transfer proof that you voluntarily upload for manual payment verification.
• Gift Card purchase information including purchaser details, recipient name and email, message, amount and scheduled delivery date.
• Gift Experience preferences and personal notes where you choose to provide them.
• Messages and information you provide when contacting NECROS ATELIER or requesting a return, cancellation or other support.
• Technical, browser and device information required for security, authentication, fraud prevention and normal website operation.

• To create and manage customer accounts.
• To process, verify, fulfil and deliver orders.
• To issue, deliver and redeem Gift Cards.
• To calculate and maintain NECROS Elite Points balances and transaction history.
• To validate promotions and customer eligibility.
• To provide order tracking and status updates.
• To verify bank transfer payments and review uploaded payment proof.
• To communicate regarding orders, cancellations, payments, returns, refunds, Gift Cards and customer support.
• To maintain carts, wishlists, preferences and checkout progress where these features are enabled.
• To prevent fraud, misuse and unauthorized access.
• To maintain and improve website reliability and functionality.
• To comply with applicable legal, accounting or regulatory obligations.

NECROS ATELIER may offer payment methods including Cash on Delivery, bank transfer, Gift Card redemption and, when enabled, third-party online payment services.

When you use bank transfer, you may submit a receipt or other proof of payment. This file is used for payment verification and related order administration.

When an online payment gateway is introduced, card or other payment credentials processed directly by that provider may not be stored by NECROS ATELIER. Information processed by the provider is also subject to the provider's own privacy policy and terms.

When you purchase a Gift Card for another person, you provide recipient information such as their name and email address. You should only provide another person's information where you are entitled to do so.

Recipient details are used to issue and deliver the Gift Card, support scheduled delivery, manage redemption and provide related customer service.

The website may use browser storage technologies such as localStorage to remember information needed for the shopping experience.

This can include guest cart or wishlist contents, checkout progress, currency selection, theme, language and other interface preferences.

Locally stored information remains on your device until removed or replaced by the website, cleared through application logic, or deleted through your browser.

Account authentication may use email verification, password-based authentication or supported external sign-in providers such as Google.

Authentication information is handled through our authentication infrastructure. Passwords are not stored by NECROS ATELIER as plain readable text.

We use technology and operational providers to run parts of our website and fulfil services. They may process limited information where necessary for those services.

• Supabase — database, authentication and private/public file storage infrastructure.
• Vercel — website hosting and application infrastructure.
• Resend — transactional email delivery.
• Google — where Google sign-in is selected.
• Delivery and courier providers — where information is required to deliver an order.
• Exchange-rate data providers — for informational storefront currency conversion.
• Future payment providers — where an online payment gateway is offered and selected.

These providers operate under their own privacy and security practices and may process information in locations outside your own region.

Bank transfer proofs uploaded through the website are stored in a private file bucket separate from publicly accessible product media.

They are intended to be accessible only to the customer associated with the relevant record and authorized NECROS ATELIER administrators for payment verification and support.

The upload system restricts accepted proof formats and file size, but customers should avoid including unnecessary sensitive information in an uploaded proof.

NECROS ATELIER does not sell your personal information.

Information may be shared with service providers only where reasonably necessary to operate the website, authenticate users, communicate with you, fulfil and deliver orders, process or verify payments, prevent fraud, support customers or comply with a lawful requirement.

We retain information for as long as reasonably necessary to operate customer accounts, maintain order, payment, Gift Card, loyalty and refund records, provide support, resolve disputes and meet legitimate business, accounting or legal requirements.

Different categories of information may be retained for different periods depending on their purpose and any applicable obligations.

Depending on the information involved and applicable requirements, you may contact us to request access to, correction of or deletion of personal information associated with you.

Certain information may need to be retained when necessary for completed transactions, accounting records, fraud prevention, security, dispute resolution or other legitimate or legal purposes.

You can also manage supported storefront preferences such as language, currency and theme through the website.

We use reasonable technical and organizational safeguards designed to protect customer information. These include authenticated access, row-level database permissions, restricted administrative access, private storage for sensitive uploads and server-side validation for important transactions.

No internet-based system can guarantee absolute security. Customers should also take reasonable steps to protect their account credentials, email account and devices.

We may update this Privacy Policy as our website, services, payment methods, loyalty features, providers or legal obligations change.

The current version will be published on this page together with its latest update date.

If you have questions regarding this Privacy Policy or personal information associated with you, contact: