Privacy Policy

ATOM APPAREL (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect when you visit or shop at atomapparel.store (the “Website”), how we use that information, the parties with whom we share it, and the rights and choices you have. By using the Website, you agree to this Privacy Policy. Your purchases are also governed by our Terms of Service, and your general use of the Website by our Terms of Use.

1. Information We Collect

Information you provide directly:

• Identity and contact data: your name, email address, and phone number (if provided).
• Order data: your shipping and billing address and the items you purchase.
• Payment data: payment card or account details, processed by our PCI-DSS-compliant payment providers. We do not store full payment card numbers on our own servers.
• Communications: messages you send to support, newsletter sign-ups, reviews, and survey responses.

Information we collect automatically:

• Device and usage data: IP address, browser type, device identifiers, pages viewed, referring URLs, and your browsing behavior on the Website.
• Cookies and similar technologies (see Section 4).

We do not knowingly collect personal information from anyone under 18, and the Website is intended for users 18 and older (see our Terms of Use and Section 11 below).

2. How We Use Your Information

We use your information to:

• process, fulfill, and ship your orders, and manage returns and exchanges;
• communicate with you about purchases, support requests, and important notices;
• send marketing and promotional emails or text messages, only with your consent, which you may withdraw at any time;
• operate, maintain, improve, and secure the Website;
• detect, investigate, and prevent fraud and other unlawful activity; and
• comply with our legal obligations and enforce our terms.

For individuals protected by the GDPR, the legal bases on which we rely are described in Section 10.

3. How We Share Your Information

We do not sell your personal information for money. We may disclose your information to the following categories of recipients:

• Service providers and processors who help us operate the business, by category: payment processors (for example, Visa, Mastercard, American Express, PayPal, Google Pay, and Klarna), shipping and fulfillment partners, hosting and IT providers, email and SMS delivery providers, customer-support tools, and analytics and advertising providers.
• Legal and safety recipients: law enforcement, regulators, courts, or other parties, when required by law, legal process, or to protect our rights, our users, or the public.
• Business transfers: a buyer or successor in connection with a merger, acquisition, financing, reorganization, or sale of assets.

All service providers are bound by contract to protect your information and to use it only to provide services to us. Certain advertising and analytics cookies may involve the “sale” or “sharing” of personal information (such as online identifiers) as those terms are broadly defined under California and other U.S. state laws; you can exercise choices over this as described in Sections 4 and 8. We do not knowingly sell or share the personal information of consumers under 16.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enable core site functions, remember your preferences, analyze traffic, and—with consent where required—personalize content and measure advertising. You can manage non-essential cookies at any time through the “Cookie Settings” link in our footer, the “Do Not Sell or Share My Personal Information” link, your browser settings, or by enabling a Global Privacy Control (GPC) signal, which we treat as a valid opt-out request for the browser or device on which it is enabled. Some features may not work properly if you disable certain cookies. We respond to recognized opt-out preference signals where required by law.

5. International Data Transfers

We are based in the United States, and your information may be processed in the United States or in other countries where we or our service providers operate. These countries may have data-protection laws that differ from those in your country. Where required, we use appropriate safeguards for such transfers, including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, together with supplementary measures as needed. You may request a copy of the relevant safeguards by contacting us at support@atomapparel.store.

6. Data Retention

We keep personal information only as long as needed for the purposes described in this Policy, after which we delete or anonymize it. Our general retention periods are:

Where a longer period is required to comply with law, resolve disputes, or enforce our agreements, we retain the information for that period.

7. Data Security

We use industry-standard administrative, technical, and organizational safeguards, including SSL/TLS encryption for data in transit and PCI-DSS-compliant processors for payments. No method of transmission or storage is 100% secure; however, we work to protect your information and will notify you and the relevant regulators of security breaches where the law requires.

8. Your U.S. State Privacy Rights

Depending on your state of residence—including California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and other states with comprehensive privacy laws—you may have some or all of the following rights:

• to know about and access the personal information we have collected, and to receive a portable copy;
• to correct inaccurate personal information;
• to delete your personal information;
• to opt out of the “sale” or “sharing” of personal information and of targeted advertising;
• to limit the use and disclosure of sensitive personal information;
• to opt out of profiling that produces legal or similarly significant effects; and
• to not receive discriminatory treatment for exercising your rights.

How to exercise your rights

To exercise any right, contact us at support@atomapparel.store, use the “Do Not Sell or Share My Personal Information” and “Cookie Settings” links in our footer, or write to the mailing address in Section 12. We will respond within the timeframe required by applicable law (generally 45 days, extendable where permitted). You may use an authorized agent, and we may need to verify your identity before fulfilling a request.

Right to appeal

If we decline your request, you may appeal by replying to our decision or emailing support@atomapparel.store with the subject line “Privacy Appeal.” If your appeal is denied, you may contact your state attorney general.

9. Notice at Collection (California / CPRA)

In the past 12 months we have collected the following categories of personal information, which we collect from you directly and automatically from your device. We disclose each category to the service-provider categories listed in Section 3, retain it as described in Section 6, and use it for the purposes described in Section 2.

* “Shared” refers to cross-context behavioral advertising as defined under California law. We do not exchange personal information for monetary payment. You can opt out at any time as described in Sections 4 and 8.

10. Additional Information for the EEA, UK, and Switzerland (GDPR)

Controller. ATOM APPAREL is the controller of your personal data. You can reach us at support@atomapparel.store.

Legal bases. We process personal data on the following bases: performance of a contract (to take and fulfill your orders); your consent (for marketing and non-essential cookies, which you may withdraw at any time); our legitimate interests (to operate, secure, and improve the Website and prevent fraud, balanced against your rights); and compliance with a legal obligation.

Your rights. Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data; the right to data portability; and the right to withdraw consent at any time without affecting prior processing.

Complaints. You have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office).

Automated decisions. We do not make decisions producing legal or similarly significant effects based solely on automated processing.

11. Children’s Privacy (COPPA)

The Website is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us with data, please contact us and we will delete it.

12. Changes and Contact

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, post a notice on the Website. Your continued use of the Website after the changes take effect constitutes acceptance of the updated Policy.