Privacy Policy

Effective date: January 1, 2026

Atlas Goods ("Atlas", "we", "us") sells apparel direct to consumers at atlasgoods.example. This policy describes the personal information we collect when you shop with us, how we use it, who we share it with, and your rights.

1. Information we collect

When you buy something

When you place an order, we collect your name, billing address, shipping address, email, phone number (optional), the items you ordered, and payment information. Payment cards are processed by our payment provider (Shopify Payments / Stripe) — we do not store full card numbers; we keep only the last four digits and a tokenized reference for refunds.

When you browse the store

When you visit atlasgoods.example, we automatically collect device and browsing information: browser type, operating system, IP address (used to derive approximate city-level location), the pages and products you view, what you add to your cart, and how you arrived at the site (referring page or campaign).

When you sign up for marketing

When you subscribe to marketing emails, we collect your email address and any preferences you select (frequency, product categories). New subscribers receive a confirmation email and are not added to the list until they click the confirmation link.

When you contact us

When you contact customer support, we keep your messages and any context you provide (order number, photographs of damaged goods, etc.) so we can resolve the issue and improve our service.

2. How we use the information

We use the information above to:

• Process and ship your orders, send order confirmations and shipping updates.
• Provide customer support, process returns and refunds.
• Send marketing emails (only to subscribers who have double-opted-in) about new products, sales, and brand updates. Every email contains a one-click unsubscribe link.
• Show you Atlas products on other websites you visit (retargeting), only if you have consented to advertising cookies.
• Measure the effectiveness of marketing campaigns in aggregate.
• Prevent fraud and verify the legitimacy of orders.
• Comply with tax, customs, and other legal obligations.

GDPR legal bases: contract (order processing), legal obligation (tax records), legitimate interests (fraud prevention, post-purchase service emails), consent (marketing emails, advertising cookies, retargeting).

3. Who we share information with

We share personal information only with the following categories of recipients, each under a written agreement that limits how they may use it:

• Payment processors (Shopify Payments, Stripe) — to process your payment.
• Shipping carriers (USPS, UPS, FedEx, DHL, and applicable regional carriers) — to deliver your order, including international customs declarations where required.
• Email service provider (Klaviyo) — to send transactional and marketing emails.
• Customer support platform (Gorgias) — to manage support tickets.
• Advertising and analytics partners (Meta, Google) — for the limited purposes described in our Cookie Policy.

We do not sell personal information for money. Under California law (CCPA / CPRA), our use of advertising cookies for retargeting may be considered "sharing" personal information for cross-context behavioral advertising. You can opt out at any time using the "Do Not Sell or Share My Personal Information" link in the footer, or by toggling Advertising cookies off in the Cookie preferences dialog.

4. International transfers

We are based in the United States. When you place an order from outside the US, we transfer your personal information across borders, using EU Standard Contractual Clauses (for EEA / Switzerland customers) and the UK International Data Transfer Addendum (for UK customers) where applicable.

5. Retention

We keep order records for 7 years (tax retention rules in the US and EU). We keep marketing-email subscriber lists for as long as you are subscribed; if you unsubscribe, we retain the unsubscribe record (only the email address and the unsubscribe date) so we don't accidentally re-add you. We keep customer-support conversations for 3 years from the last message.

6. Your rights

You have the right to access, correct, port, and delete your personal information, and to object to certain processing. Contact us at privacy@atlasgoods.example to exercise any of these rights.

For California residents (CCPA / CPRA): in the last 12 months, we have collected the following categories of personal information: identifiers, commercial information (transaction history), internet activity (browsing on our site), geolocation (city-level from IP), inferences (product preferences). We have "shared" identifiers and internet activity with advertising partners for cross-context behavioral advertising, only where you have given consent. We have not "sold" personal information for money. You may opt out of "sharing" at any time, and you may request a copy of the specific pieces we hold about you.

We do not knowingly collect or process the following categories of sensitive personal information: government-issued identifiers, account log-in credentials with passwords, precise geolocation, racial or ethnic origin, religious beliefs, union membership, contents of mail/email/text messages, genetic data, biometric data, health information, sex life or sexual orientation.

For EU / UK residents: you have the right to lodge a complaint with your supervisory authority. You may also withdraw consent at any time for any processing based on consent; withdrawal does not affect the lawfulness of processing before withdrawal.

7. Children

Atlas Goods is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe we have done so inadvertently, contact us and we will delete the information.

8. Security

We protect your information with TLS in transit, AES-256 at rest, role-based access controls, regular penetration testing, and a documented breach-response process. In the unlikely event of a data breach affecting your personal information, we will notify you and the relevant regulators as required by law.

9. Changes

We will post material changes on this page and email subscribers at least 30 days before they take effect.

10. Contact

Privacy questions: privacy@atlasgoods.example Atlas Goods, Inc., 100 Brand Way, Brooklyn, NY 11201, USA.