Last Updated: May 1, 2026
1. Introduction
AtomInc Ltd ("AtomInc", "we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at www.atominc.co, use our cross-border commerce execution platform, interact with our analytics dashboards, or communicate with us in any way.
AtomInc operates as an end-to-end global commerce execution platform, providing marketplace activation, logistics, customs clearance, VAT compliance, order management, and analytics services across 50+ international markets. This Privacy Policy applies to all personal data we process in connection with these services.
By accessing our website or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of our website and services.
2. Information We Collect
2.1 Information You Provide Directly
We collect personal information that you voluntarily provide when you interact with us, including but not limited to:
- Account & Registration Data: full name, email address, phone number, company name, job title, and password when you create an AtomInc account or request a demo.
- Business Information: company registration details, tax identification numbers (VAT, GST, EIN), bank account or payment details, shipping addresses, and product catalogue data required to operate your cross-border commerce.
- Communication Data: any information you provide when contacting our support team, submitting enquiries through our contact forms, or communicating with your dedicated account manager.
- Booking & Scheduling Data: name, email, preferred dates, and time slots when you book a demo or strategy call through our website.
- Marketplace & Storefront Data: product listings, pricing information, inventory data, brand assets, and content you provide for marketplace activation on Amazon, Noon, Daraz, and other platforms we manage on your behalf.
2.2 Information Collected Automatically
When you visit our website or use our platform, we automatically collect certain technical information, including:
- Device & Browser Information: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
- Usage Data: pages visited, time spent on pages, click patterns, referring/exit URLs, and navigation paths through our website and platform dashboards.
- Log Data: server logs that record access times, error reports, and system activity related to your use of our services.
- Location Data: approximate geographic location derived from your IP address, which helps us serve regionally relevant content and comply with local regulations.
2.3 Information from Third Parties
We may receive information about you from third-party sources, including:
- Marketplace platforms (Amazon, Noon, eBay, Daraz, etc.) in connection with order fulfilment, returns, and account management we perform on your behalf.
- Logistics and customs partners who assist with shipment tracking, customs clearance, and delivery confirmation.
- Payment processors and banking partners who facilitate transaction settlements.
- Analytics and advertising partners, including Google Analytics, that help us understand website usage and improve our services.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: to provide, operate, and maintain our cross-border commerce execution services, including marketplace activation, logistics coordination, customs clearance, VAT compliance, order management, and returns processing.
- Account Management: to create and manage your AtomInc account, authenticate your identity, and process your transactions.
- Analytics & Reporting: to generate profit intelligence reports, commerce analytics dashboards, and operational performance data visible through your AtomInc dashboard.
- Communication: to respond to your enquiries, provide customer support, send service-related notifications (order updates, shipment tracking, compliance alerts), and share platform updates relevant to your account.
- Improvement & Development: to analyse usage trends, diagnose technical issues, improve our platform's functionality, and develop new features.
- Marketing: to send you promotional materials, market insights, and product information, where you have opted in or where we have a legitimate interest. You may opt out of marketing communications at any time.
- Legal & Compliance: to comply with applicable laws, regulations, and legal processes, including VAT filing, customs documentation, and anti-money laundering obligations across the jurisdictions in which we operate.
- Security & Fraud Prevention: to detect, prevent, and respond to fraud, security threats, and unauthorised access to our platform.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or any jurisdiction where similar data protection laws apply, we process your personal data on the following legal bases:
- Performance of a Contract: processing necessary to provide the services you have requested or to take steps prior to entering into a contract with us.
- Legitimate Interest: processing necessary for our legitimate business interests, such as improving our services, fraud prevention, and direct marketing to existing customers, provided these interests are not overridden by your rights.
- Consent: where you have given clear, affirmative consent for us to process your personal data for specific purposes, such as subscribing to marketing emails or accepting non-essential cookies.
- Legal Obligation: processing necessary to comply with applicable legal and regulatory requirements, including tax and customs obligations across multiple jurisdictions.
5. How We Share Your Information
We do not sell your personal information. We may share your information with the following categories of recipients, solely to the extent necessary to provide and improve our services:
- Marketplace Platforms: Amazon, Noon, Daraz, eBay, Shopee, and other marketplaces where we activate and manage your brand presence, as required for storefront operations, order fulfilment, and compliance with their respective seller policies.
- Logistics & Freight Partners: shipping carriers, freight forwarders, customs agents, and warehousing partners who assist with door-to-door delivery, customs clearance, and inventory management.
- Payment Processors: third-party payment service providers who process transactions and facilitate multi-currency settlements on our behalf.
- Tax & Compliance Authorities: government agencies, tax authorities, and customs offices where disclosure is required by law for VAT filing, import/export documentation, and regulatory compliance.
- Technology Partners: hosting providers, analytics services (including Google Analytics), cloud infrastructure providers, and software vendors who help us operate and improve our platform.
- Professional Advisors: lawyers, auditors, and consultants engaged to advise on legal, tax, or regulatory matters.
- Business Transfers: in connection with any merger, acquisition, reorganisation, or sale of all or part of our assets, your information may be transferred as part of that transaction.
6. International Data Transfers
AtomInc operates globally across 50+ markets. Your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.
Where we transfer personal data from the EEA, UK, or Switzerland to a country that has not been deemed to provide an adequate level of protection, we implement appropriate safeguards, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Data processing agreements with our service providers that impose equivalent data protection obligations.
- Where applicable, reliance on the recipient's certification under recognised frameworks.
7. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, tax, customs documentation, and reporting obligations. Specific retention periods include:
- Account Data: retained for the duration of your active account and for up to 24 months after account closure, unless longer retention is required by law.
- Transaction & Financial Records: retained for a minimum of 7 years to comply with tax, customs, and accounting regulations across the jurisdictions in which we operate.
- Communication Records: retained for up to 36 months after your last interaction with our support team.
- Website Usage Data: aggregated analytics data may be retained indefinitely; identifiable usage data is retained for up to 26 months.
When personal data is no longer required, we securely delete or anonymise it in accordance with our data disposal procedures.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL) and at rest.
- Access controls and role-based permissions for platform users and staff.
- Regular security assessments, penetration testing, and vulnerability scanning.
- Secure data centres with physical access controls and environmental safeguards.
- Employee training on data protection and information security best practices.
- Incident response procedures for timely detection and notification of data breaches.
While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to continuous improvement of our security posture.
9. Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal data:
- Right of Access: request a copy of the personal data we hold about you.
- Right to Rectification: request correction of inaccurate or incomplete personal data.
- Right to Erasure: request deletion of your personal data, subject to legal retention obligations.
- Right to Restriction: request that we limit the processing of your personal data in certain circumstances.
- Right to Data Portability: request to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
9.1 For California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what categories of personal information we collect and for what purposes, the right to request deletion, and the right to opt out of the sale or sharing of your personal information. AtomInc does not sell personal information.
9.2 How to Exercise Your Rights
To exercise any of the above rights, please contact us at privacy@atominc.co. We will respond to your request within the timeframes required by applicable law (typically within 30 days). We may need to verify your identity before processing your request.
10. Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your experience, analyse usage, and support our marketing efforts. For detailed information on the cookies we use and how to manage your preferences, please refer to our Cookie Policy.
11. Third-Party Services
Our website and platform may contain links to third-party websites, services, or integrations (such as Shopify, WooCommerce, Amazon, Google Analytics, and social media platforms). We are not responsible for the privacy practices or content of these third parties. We encourage you to review their privacy policies before providing them with your personal information.
We use the following key third-party services:
- Google Analytics: to analyse website traffic and user behaviour. Google may use this data in accordance with its own privacy policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
- Google Tag Manager: to manage tracking scripts and tags deployed on our website.
- Cloud Hosting: our platform infrastructure is hosted on enterprise-grade cloud providers with appropriate data protection agreements in place.
12. Children's Privacy
Our services are designed for businesses and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that information. If you believe a child has provided us with personal data, please contact us at privacy@atominc.co.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. When we make material changes, we will notify you by posting the updated policy on our website with a revised "Last Updated" date. Where required by law, we will obtain your consent to material changes. We encourage you to review this policy periodically.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
AtomInc Ltd
Email: privacy@atominc.co
Website: www.atominc.co/contact
If you are located in the EEA or UK and believe that we have not adequately resolved your data protection concerns, you have the right to lodge a complaint with your local supervisory authority.
