Privacy notice
1. Controller and contact
is the controller for Atlas Instant customer and website information. Company number: . Registered office: . Privacy enquiries: .
2. Information we use
We process names, email addresses, business and customer contact details, invoice references and amounts, payment and checkout identifiers, personalisation answers, generated documents, delivery and support records, and limited technical information such as timestamps, IP addresses, browser details and security/error logs. Stripe receives card details directly; we do not need to receive full card numbers.
3. Sources and purposes
Most information comes from the purchaser through Stripe checkout, the personalisation form or support correspondence. We use it to take and verify payment, form and perform the contract, personalise and deliver the product, prevent duplicate or fraudulent fulfilment, answer support requests, keep legally required accounting records, establish or defend legal claims, and maintain service security.
4. Lawful bases
Our principal bases are performance of a contract (order fulfilment and support), legal obligation (tax and accounting records), and legitimate interests (service security, fraud prevention, operational records and proportionate business administration). We will use consent where the law requires it, including optional direct marketing or non-essential cookies. Consent may be withdrawn at any time without affecting earlier lawful processing.
5. Service providers and sharing
We use selected providers acting as processors or independent controllers, depending on the activity: Stripe for hosted checkout and payment processing; Google Workspace and Google Apps Script for forms, documents, spreadsheets and delivery email; and Cloudflare for hosting, DNS, network security and technical logs. Information may also be disclosed to professional advisers, regulators, courts or authorities where necessary and lawful. We do not sell personal information.
6. International transfers
Some providers may process information outside the UK. Where UK data-protection law requires safeguards, we rely on the provider's applicable UK adequacy arrangements, approved contractual safeguards or another lawful transfer mechanism. Provider privacy information is available from Stripe, Google and Cloudflare.
7. Retention
Temporary working copies of generated files are intended to be deleted within 30 days after fulfilment. Order, payment, tax and accounting records are normally retained for six years after the relevant financial year or longer if required by law or a dispute. Support correspondence is normally retained for up to two years after closure. Security and error logs are kept only as long as reasonably needed for diagnosis and protection, subject to provider settings. We may retain minimal suppression or audit information where necessary to honour a request or prove compliance.
8. Your rights
Depending on the circumstances, you may have rights to access, correct or erase information, restrict or object to processing, receive portable information, and complain about how it is used. You also have rights relating to consent and solely automated decisions. Atlas Instant does not currently make decisions producing legal or similarly significant effects solely by automated means.
Contact to exercise a right. You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.
9. Cookies, security and children
The current site uses no advertising trackers or optional analytics and does not set non-essential first-party cookies. See the cookie notice. We use reasonable technical and organisational safeguards, but no internet service can guarantee absolute security. This business product is not directed at children, and we do not knowingly collect children's information.
10. Changes
We will update this notice when the service or legal requirements materially change and show the revision date above.