Privacy Policy
Last Updated: July 2, 2026
Who We Are
CY Atelier is the trade name of W AND C CO., LTD., a wood packaging manufacturer based in Taiwan. This policy explains how we handle personal data collected through our website at cyatelier.com.
What Data We Collect
Contact Form Submissions
When you submit an inquiry through our contact form, we collect:
- Your name
- Your company name
- Your email address
- Your product category of interest
- Your country
- Your phone number (if provided)
- Estimated order quantity (if provided)
- Project description (if provided)
- Files you choose to upload with your inquiry, such as design sketches, reference images, or specification PDFs (if provided)
We collect this information solely to respond to your inquiry and assess whether we can meet your manufacturing requirements.
Contact form submissions are processed through Resend (resend.com), an email delivery service used to send your inquiry to CY Atelier and to deliver a confirmation receipt to you. Resend, Inc. is a company headquartered in the United States. The legal basis for this processing is the performance of pre-contractual measures at your request (GDPR Article 6(1)(b)). See Resend's Privacy Policy in the Third-Party Services section below.
Uploaded files are transmitted through Resend as attachments to the internal notification email and delivered to our company mailbox. They are not included in the confirmation email sent to you, and we do not host uploaded files on this website or make them publicly accessible.
Website Analytics
We use Cloudflare Web Analytics to understand how visitors use this site. Cloudflare Web Analytics is designed to measure site usage without cookies, localStorage, or browser fingerprinting, and does not build visitor profiles. Collected metrics include page URLs, referrers, visitor country (derived from network-level data), and basic performance indicators such as page load time. This data is aggregated and used to improve site content and performance.
Cloudflare, Inc. is a company headquartered in the United States, and analytics data is processed through its global edge network. For full detail on Cloudflare's data practices, see the Cloudflare Privacy Policy linked in the Third-Party Services section below.
Network Delivery
We also use Cloudflare as our content delivery network (CDN) and security layer, and to host the contact form endpoint. In this capacity, Cloudflare processes network traffic to deliver this website and to protect it from abuse. This is separate from the Cloudflare Web Analytics service described above, though both are provided by Cloudflare, Inc.
How We Use Your Data
| Data | Purpose |
|---|---|
| Contact form data | To respond to your inquiry and follow up on your project |
We do not use your data for automated decision-making. We do not sell your data to third parties. We do not use your data for marketing purposes without your consent.
Third-Party Services
This website uses the following third-party tools:
- Cloudflare Web Analytics — cookieless website usage analytics. Cloudflare's Privacy Policy
- Cloudflare — CDN, contact form hosting, and security services (including bot protection). Cloudflare's Privacy Policy
- Resend — transactional email delivery for contact form notifications. Resend's Privacy Policy
- Sanity — content management system. Sanity's Privacy Policy
Data Retention
Contact form submissions, including any files you upload, are retained for as long as there is an active or potential business relationship, or as required by applicable tax and business record-keeping laws in Taiwan. You may request deletion at any time.
Analytics data is retained according to Cloudflare Web Analytics' standard retention practices. See Cloudflare's Privacy Policy for current retention settings.
Your Rights
If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with applicable data protection legislation, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Delete your personal data (subject to legal retention requirements)
- Object to processing or restrict how we use your data
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at contact@cyatelier.com. We will respond within 30 days.
Cookies
This website uses strictly necessary cookies only, required for the website to function (Cloudflare security cookies and bot protection). We do not set any tracking, advertising, or analytics cookies.
You may manage or disable cookies through your browser settings at any time.
Data Transfers
W AND C CO., LTD. is based in Taiwan. When personal data from the European Economic Area (EEA) or United Kingdom is transferred to us or to our processors, the transfer relies on appropriate safeguards under GDPR Article 46 — typically the European Commission's Standard Contractual Clauses (SCCs). Taiwan's Personal Data Protection Act provides additional statutory protections that apply to data we hold locally.
Data processed by Cloudflare, Resend, and Sanity may be transferred to servers in the United States or other countries. These transfers rely on appropriate safeguards under GDPR Article 46, such as the European Commission's Standard Contractual Clauses (SCCs).
Contact
For privacy-related questions or to exercise your rights:
W AND C CO., LTD. (CY Atelier)Email: contact@cyatelier.com
Address: No. 6, Ln. 159, Shenzhou Rd., Shengang Dist., Taichung City 429002, Taiwan
Changes to This Policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be noted on this page.