Your details, in plain words.

Who looks after your information.

Le Petit Atelier is run by Sebastien Mathieu through Petitgen Ltd, 63 Rue Lavaud, Akaroa, New Zealand. Petitgen Ltd is responsible for the information you send through this site. Privacy questions go to bonjour@lepetitatelier.nz.

What you type, and two technical things.

• Join the list: your email, your first name if you give it, the topics you tick, and when and on which form you ticked the consent box.
• Bring things, request a project, contact: your name, email, what you write and the options you choose. If you also tick “add me to the mailing list”, that is recorded the same way.
• Technical: the date and time, and a one-way scrambled code made from your internet (IP) address. The code is made with a secret key that changes every day, uses only the network part of newer (IPv6) addresses, and can’t be turned back into the address. It’s there only to stop one sender flooding the forms (five messages per ten minutes), and it is blanked after 30 days. We don’t store your IP address or your browser details.
• Spam check: the forms may use Cloudflare Turnstile to check you’re a person. Cloudflare looks at your IP address and browser signals for that check; it doesn’t set advertising or tracking cookies, and we only receive a yes or no.

We don’t ask for your address, phone number or anything else, and we don’t buy or receive lists from anyone.

In one small database, run by Cloudflare.

Form messages are stored in a Cloudflare D1 database that only we can access. Cloudflare hosts the site and stores and processes the data on our behalf (it is our service provider, not a recipient who can use it). The site is served from Cloudflare’s global network, so your message may pass through servers outside New Zealand. The database itself is hosted in the Asia-Pacific region (location hint “apac”).

If notifications are on, a copy of each message is emailed to our own inbox so we can reply. Those copies follow the same 12-month rule.

To reply, or to send the list. That's all.

We use your details only to reply to your message, to arrange what you asked about, and — if you joined the list — to send the monthly email. We never sell, rent or share them, and we don't use them for advertising.

Only if you tick the box.

You join the mailing list only by ticking a consent box that is never ticked for you. We record when you ticked it and on which form. Before the first email, the newsletter service we use will send you one message asking you to confirm; until you confirm, you get nothing else. Every email will have a one-click unsubscribe link, and you can also leave here at any time.

If you leave, we keep only your email address and the date you left, as a “do not email” note, so that nobody can sign you up again. Ask us and we’ll delete that too.

No tracking cookies.

This site sets no tracking or advertising cookies. We count visits with Cloudflare Web Analytics, which is cookieless and doesn't build a profile of you. There are no social-media trackers or embedded feeds.

12 months at most.

• Form messages: deleted automatically 12 months after they arrive, or sooner if you ask.
• The scrambled spam code: blanked after 30 days.
• The mailing list: kept while you’re on it. After you leave, only the “do not email” note stays.

A small daily job on Cloudflare does the deleting, so it doesn’t depend on anyone remembering.

See it, fix it, delete it.

Under the Privacy Act 2020 you can ask to see what we hold about you (IPP 6), ask us to correct it (IPP 7), or ask us to delete it. Email bonjour@lepetitatelier.nz from the address you used, and say what you’d like. We’ll answer within 20 working days, usually much sooner. It’s free.

We keep your details safe (IPP 5: only we can reach the database), use them only for the reason you gave them (IPP 10), don’t pass them on (IPP 11), and don’t keep them longer than needed (IPP 9).

If you're not happy with how we've handled your information, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Asked first, every time.

At the workshop and the repair café we never film or photograph a person, or their belongings, without asking first. Intake photos show objects only, never people. Data on donated devices is removed or physically destroyed, never looked at.