Privacy Policy

This Privacy Policy explains how The Prompt Atelier® processes personal data when you visit our website, contact us or book a session.

The data controller is the legal operator identified in our Legal Notice.

Contact address: Bleicherweg 64a, 8002 Zürich, Switzerland

Privacy enquiries: info@thepromptatelier.ch

1. Personal data we collect

Depending on how you use our services, we may collect:

• Your name, email address, billing address and, if provided, telephone number
• The date and time of your session and the number of seats booked
• Order amounts, payment status, transaction references and refund details
• Messages and information submitted through our contact form or by email
• Technical information such as your IP address, browser, device, access time and security logs
• Information stored by essential cookies required for the shopping basket, booking process, checkout, security and customer accounts

Please do not submit sensitive personal information unless it is necessary and specifically requested.

2. How we use personal data

We process personal data to:

• Provide, administer and confirm bookings
• Allocate seats and prevent overbooking
• Process payments, outstanding balances and refunds
• Send confirmations, reminders and important information about a booked session
• Manage booking changes, cancellations and enquiries
• Maintain accounting and transaction records
• Protect our website, customers and business against fraud, misuse and security incidents
• Comply with legal and regulatory obligations
• Maintain and improve the reliability of our services

Where the EU or UK GDPR applies, processing is based, as appropriate, on performing a contract, complying with a legal obligation, pursuing legitimate business interests or obtaining consent.

3. Payments

Online payments are processed by Worldline Switzerland Ltd through its Saferpay payment solution.

Worldline processes payment information through its secure systems. The Prompt Atelier receives information required to confirm and administer the transaction, such as the amount, payment status, payment method and transaction reference.

The Prompt Atelier does not receive or store complete payment-card numbers or card security codes.

Worldline may perform automated security and fraud-prevention checks in accordance with its own privacy terms.

4. Service communications and marketing

Booking confirmations, reminders, payment information and messages concerning a booked session are service communications and are not marketing.

We will send newsletters or promotional messages only where permitted by law and, where required, after obtaining consent. Marketing consent is optional and may be withdrawn at any time.

5. Service providers and recipients

We may disclose personal data where necessary to:

• green.ch AG, which provides our website-hosting and email infrastructure
• Worldline Switzerland Ltd, which processes online payments through Saferpay
• Professional advisers such as accountants or legal advisers
• Technical providers assisting with maintenance, security or troubleshooting
• Public authorities where disclosure is legally required

Our website uses WordPress, WooCommerce and Contact Form 7. Data processed through these tools is stored on the green.ch infrastructure unless an explicitly connected external service is involved.

We do not sell personal data.

6. Processing locations and international transfers

Google receives technical requests for Analytics, Tag Manager and Google Fonts. Font requests transmit connection information such as the IP address to Google. Google services may process data outside Switzerland, including in the United States. Hosting is supplied by green.ch and online payment by Worldline/Saferpay; this notice does not guarantee that all processing stays in Switzerland. See Google’s privacy information at https://policies.google.com/privacy. For questions about providers, retention or international processing, contact info@thepromptatelier.ch.

If another service provider processes personal data outside Switzerland, we disclose data only where permitted by applicable law. Depending on the destination, protection may be based on an officially recognised level of protection, approved contractual safeguards or another lawful mechanism.

We will update this Privacy Policy before activating a service that materially changes the countries in which customer data is processed.

7. Cookies

Our website uses cookies necessary to:

• Maintain the shopping basket
• Operate booking and checkout functions
• Remember essential choices
• Maintain a customer login where applicable
• Protect the website and prevent misuse

Restricting essential cookies through browser settings may prevent booking or checkout from working correctly.

We use Google Analytics 4 through Google Tag Manager to measure website use. Statistics consent controls analytics cookie storage. Before consent and after rejection, Google Consent Mode can send cookieless measurement and consent signals to Google; this is not a promise that no data is transmitted. You can withdraw optional consent through Cookie preferences in the footer. Booking, checkout and security use necessary cookies independently of optional analytics consent.

8. Retention

We retain personal data only for as long as required for its purpose or by law.

• Booking, invoice, payment and accounting records may be retained for ten years after the end of the relevant financial year.
• Customer enquiries and ordinary correspondence are deleted when they are no longer reasonably required.
• Incomplete or failed booking information is deleted or anonymised when it is no longer needed for payment reconciliation, security or troubleshooting.
• Technical and security logs are retained only for an appropriate operational and security period.
• Information connected to a legal dispute, chargeback or investigation may be retained until the matter and applicable limitation periods have ended.

When information is no longer required, it is deleted or anonymised where reasonably possible.

9. Data security

We use appropriate technical and organisational measures intended to protect personal data against unauthorised access, alteration, loss or misuse.

No method of transmission or electronic storage can be guaranteed to be completely secure.

10. Your rights

Subject to applicable legal conditions and limitations, you may request:

• Information about whether we process your personal data
• Access to the personal data held about you
• Correction of inaccurate or incomplete information
• Deletion of information that is no longer required
• Objection to or restriction of certain processing
• Transfer of data in a commonly used electronic format where applicable
• Withdrawal of consent for future processing where processing is based on consent

Some information cannot be deleted immediately when it must be retained for accounting, tax, legal or dispute-resolution purposes.

Requests may be sent to info@thepromptatelier.ch. We may request appropriate proof of identity before disclosing or changing personal data.

You may also contact the Swiss Federal Data Protection and Information Commissioner regarding data-protection concerns.

11. Automated decisions

The Prompt Atelier does not make decisions producing significant legal or similarly significant effects solely through automated processing.

Worldline may use automated checks for payment security and fraud prevention under its own privacy terms.

12. Third-party websites

Our website may link to external websites or services. Their operators are responsible for their own privacy notices and data-processing practices.

13. Changes to this Privacy Policy

We may update this Privacy Policy when our services, providers or legal obligations change. The current version and revision date will be published on this page.

Last updated: September 2026

Technical details of services and storage

Observed browser storage: WooCommerce cart cookies last for the session and its guest-session cookie approximately two days; language and Complianz consent cookies up to 365 days; WP Consent API cookies 30 days. After statistics consent, _ga and _ga_6JSFBSDER3 identify browser/session activity; the tested browser limited their expiry to 400 days. Browser limits, renewed consent and subsequent visits can affect expiry. Server-side Analytics retention is a separate account setting.

Google receives technical requests for Analytics, Tag Manager and Google Fonts. Font requests transmit connection information such as the IP address to Google. Google services may process data outside Switzerland, including in the United States. Hosting is supplied by green.ch and online payment by Worldline/Saferpay; this notice does not guarantee that all processing stays in Switzerland. See Google’s privacy information at https://policies.google.com/privacy. For questions about providers, retention or international processing, contact info@thepromptatelier.ch.