Privacy Policy

1. Introduction

ATLAS GLOBAL TECH LTD ("Atlas," "we," "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or purchase our digital products.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

2.1 Data You Provide

• Email address — collected at checkout to deliver your product and order confirmation.
• Name — if provided during checkout or contact form submission.
• Contact form messages — when you contact support or sales.

2.2 Data Collected Automatically

• IP address — for security, rate limiting, and download logging.
• Browser and device information — user agent, for download event logging.
• Usage analytics — aggregated, anonymised data about page visits.

2.3 Payment Data

We do not collect or store credit card information. Payments are processed by Stripe, which is PCI-DSS Level 1 certified. We only receive a confirmation of payment and a transaction reference.

3. How We Use Your Data

• To process and fulfill your digital product orders.
• To deliver secure download links and license keys.
• To respond to support and contact requests.
• To prevent fraud, abuse, and unauthorised access.
• To log download events for security and audit purposes.
• To send essential transactional emails (purchase confirmation, delivery).

4. Legal Basis for Processing

• Contract — to fulfill your purchase and deliver products.
• Legal obligation — to maintain financial records as required by law.
• Legitimate interest — to prevent fraud and secure our systems.
• Consent — for any optional marketing communications (we do not send marketing emails by default).

5. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe — for payment processing.
• Email provider — for transactional email delivery (e.g., Resend).
• Hosting provider — for website hosting (e.g., Vercel).
• Legal authorities — if required by law or court order.

6. Data Retention

We retain order and license records for the duration required by UK tax and accounting law (typically 6 years). Download tokens expire after 72 hours. Download event logs are retained for 90 days for security audit purposes.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Object to processing based on legitimate interests.
• Request data portability.
• Withdraw consent for optional processing.

To exercise these rights, contact legal@atlasglobal.store.

8. International Transfers

Your data may be processed by third-party providers located outside the UK (e.g., Stripe, Vercel). We only use providers that offer adequate safeguards, such as Standard Contractual Clauses.

9. Security

We implement appropriate technical and organisational measures to protect your data, including server-side validation, verified webhooks, signed expiring download tokens, and no storage of payment card data.

10. Cookies

See our Cookie Policy for details about how we use cookies and similar technologies.

11. Contact

For privacy questions or data requests, contact legal@atlasglobal.store.