PRIVACY

PRIVACY

POLICY

POLICY

Protecting your privacy is our priority. Here’s how Atlasium handles your data.

001

PRIVACY POLICY

PRIVACY POLICY

Atlasium

PRIVACY POLICY

Privacy Policy Atlasium Ltd.

Last Updated: September 4, 2025


Atlasium Ltd (“Atlasium,” “we,” “our,” or “us”) values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit atlasiumgroup.com or any website, storefront, or platform operated by our portfolio brands (together, the “Sites”), or when you otherwise interact with us (the “Services”).


By using the Sites or Services, you agree to this Policy.


1. Company Information

Atlasium Ltd is a private limited company incorporated in England and Wales.

  • Company Name: Atlasium Ltd

  • Company Number: 16704513

  • Registered Office: 24-26 Arcadia Avenue, Fin009/8929, London, United Kingdom, N3 2JU

  • Contact Email: support@atlasiumgroup.com

  • Phone: +44 7392 179 506


Atlasium is a brand incubation, investment, and holding company. We operate and support multiple consumer brands and their ecommerce stores. When you interact with a specific brand, Atlasium or that brand acts as the data controller for the processing described here. Some portfolio brands may run additional policies for product-specific features; those apply in addition to this Policy.


2. Scope

This Policy covers:

  • Visitors to our Sites

  • Customers purchasing from our portfolio brand stores

  • Applicants, partners, suppliers, and investors who contact us

  • Individuals who interact with our marketing, support, or business development channels


3. Information We Collect

A) Device & usage data (collected automatically):

  • What: IP address, cookie identifiers, browser type/version, time zone, device type, pages viewed, referring URLs, search terms, and interactions with the Sites.

  • Why: To load the Sites, keep them secure, measure performance, debug, prevent abuse/fraud, and improve user experience (legitimate interests; consent where required).

  • How: Cookies, pixels, tags, SDKs, and server logs.


B) Order & account data (you provide it):

  • What: Name, email, phone, billing/shipping address, payment method (tokenized by payment processors), order items, returns/warranty info, communication preferences.

  • Why: To fulfill purchases, process payments, deliver goods/services, handle returns, comply with tax/financial laws, and prevent fraud (contract; legal obligation; legitimate interests).


C) Customer support & correspondence:

  • What: Messages sent via forms, email, chat, or social media; context needed to resolve issues.

  • Why: To provide support, troubleshoot, and improve service (contract; legitimate interests).


D) Business & partnership inquiries:

  • What: Company details, contact info, proposals, pitch materials, and any data you choose to share.

  • Why: To evaluate collaborations, brand incubation/investment opportunities, and conduct due diligence (legitimate interests; pre-contractual steps; legal obligation where applicable).


E) Marketing preferences:

  • What: Email opt-ins/opt-outs, event registrations, campaign interactions.

  • Why: To send updates where permitted and measure effectiveness (consent; legitimate interests).


We do not intentionally collect data from children. If you believe a child has provided personal data, contact support@atlasiumgroup.com to request deletion.


4. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and secure the Sites and Services

  • Process and fulfill orders; deliver products and customer care

  • Personalize experiences and measure performance

  • Detect, investigate, and prevent fraud, security incidents, and abuse

  • Comply with laws, tax/VAT obligations, and regulatory requests

  • Communicate about orders, service updates, or (with consent) marketing

  • Evaluate brand incubation, investments, and partnerships


5. Legal bases (UK-GDPR/GDPR)

We rely on one or more of the following:

  • Consent (e.g., marketing cookies/newsletters)

  • Contract (e.g., to fulfill a purchase)

  • Legal obligation (e.g., tax, accounting, KYC/AML where applicable)

  • Legitimate interests (e.g., security, fraud prevention, service improvement)


6. Sharing & disclosure

We never sell your personal data. We may share limited data with:

  • Service providers / processors: hosting, ecommerce (e.g., Shopify), payments (e.g., Stripe), analytics (e.g., Google Analytics), email/SMS providers, logistics/fulfillment, anti-fraud tools, and customer support platforms—strictly under data-processing terms.

  • Within our group: Atlasium and portfolio brands to operate cross-brand systems or shared services.

  • Authorities or legal advisors: where required by law, to protect rights, or in connection with a merger, acquisition, or reorganisation (in which case safeguards apply).


7. International transfers

We operate globally. Your data may be processed in the UK, EEA, US, and other countries where our service providers are located. Where required, we use appropriate safeguards (e.g., adequacy decisions, Standard Contractual Clauses, UK IDTA/Addendum).


8. Data Retention

We keep personal data only as long as necessary for the purposes above, including legal/accounting requirements and limitation periods. When no longer needed, we delete or anonymise it.


9. Cookies & similar technologies

Cookies help us run the Sites, remember preferences, keep carts/session state, and understand usage. Some cookies are strictly necessary; others require consent in jurisdictions that mandate it. You can change preferences via your browser settings and (where implemented) our cookie banner.


A) Cookies necessary for core functionality:

We use a small set of cookies that are essential for our websites and brand storefronts to work correctly. They let us remember your session, keep your cart, and secure your account.


  • _secure_session_id: keeps your browsing session and navigation stable (expires after 24 h).

  • cart, cart_currency, cart_sig, checkout*: manage your shopping cart and checkout steps (expire between 30 min and 4 weeks, depending on platform settings).

  • storefront_digest / secure_customer_sig: protect customer login and account security (valid up to 2 years, or up to 20 years for platform “remember me” tokens).

  • _tracking_consent: stores your consent choices for cookies (about 1 year).

  • _shopify_country (or similar): remembers your country so prices and shipping are correct (expires at end of session).


B) Reporting & analytics (may require consent):

These cookies help us understand how people use our websites, brand portals, and investment dashboards. They collect anonymous or aggregated data to improve performance and measure campaigns. They only run if you give consent (where required by law).


  • _shopify_s, _shopify_y, _s, _y: Track usage and performance inside our storefronts and brand pages (expire between 30 min and 1 year).

  • _orig_referrer, _landing_page: Help us attribute visits and marketing campaigns (about 2 weeks).

  • Google Analytics (_ga*): Measure site traffic, conversions, and performance across Atlasium sites and brands (lasts from a session up to 2 years).


Notes:
• Names/durations vary by platform and brand (Shopify, WooCommerce, custom storefronts).
• We may also use pixels (e.g., Meta, Google Ads) for measurement/retargeting only where permitted by law and your consent preferences.


Managing cookies: Most browsers let you block or delete cookies (see your browser’s Help menu). Blocking some cookies may break essential site features (cart, checkout, login).


For more details, please see our Cookie Policy.

10. Behavioral advertising

Where permitted, we (or our brands) may use advertising partners to show relevant ads based on your interactions with the Sites. You can opt out via cookie settings, ad-platform controls, or tools such as Your Online Choices (EU/UK) or NAI opt-out (US). Some tracking relies on cookies; blocking them limits personalised ads.


11. Automated decision-making

We may use automated tools (e.g., anti-fraud rules at checkout). Our processors may apply temporary blacklists for failed transactions or risky IPs/cards. These measures help protect customers and merchants and do not produce legal effects about you beyond fraud prevention.

12. Your rights

UK/EEA (UK-GDPR/GDPR):

You may have the right to access, rectify, erase, restrict, port, or object to processing; and to withdraw consent at any time (without affecting prior lawful processing).
Request: support@atlasiumgroup.com


California (CCPA/CPRA):

California residents may request access/correction/deletion and opt-out of certain data sharing. Atlasium does not sell personal information as defined by the CCPA. To exercise rights, contact: support@atlasiumgroup.com


We will verify requests and respond within applicable timeframes.


13. Security

We implement technical and organisational measures appropriate to the risk (encryption in transit with our providers, access controls, logging, least-privilege, data-minimisation). No method of transmission is 100% secure, but we work to protect your data.


14. Third-party links

Our Sites may link to third-party sites or apps. Their privacy practices are governed by their own policies.


14. Changes to this Policy

We may update this Policy to reflect operational, legal, or regulatory changes. We’ll post the new version with an updated “Last Updated” date. Material changes will be highlighted where required.


15. Contact Us

If you have any questions about these Terms, or if you wish to make a complaint, please contact us at:


Atlasium Ltd
Email: support@atlasiumgroup.com

Phone: +44 7392 179 506