Privacy Policy
Last updated: September 2026 — draft pending legal review
HIGH PRIORITY — Legal review required before going live
This Privacy Policy is draft placeholder text. UK GDPR and the Data Protection Act 2018 impose strict requirements on what you must tell users about how their data is processed, how you handle data subject rights, and how long you retain data. Getting this wrong can result in ICO enforcement action and fines up to £17.5 million or 4% of global annual turnover. Have this entire policy reviewed and approved by a qualified solicitor or data protection specialist before this website goes live and before you collect any personal data from users.
Who we are
Atlas Battery Global Ltd ("we", "us", "our") is the data controller for personal data collected through this website (atlasbatteryglobal.com). We are registered in England and Wales.
If you have questions about how we handle your personal data, contact us at: our Contact page.
What personal data we collect
Account registration
- Full name
- Email address
- Password (stored as a bcrypt hash — we cannot read your password)
Orders
- Items ordered, quantities, and order value
- Date and time of purchase
- Account name associated with the order
Automatically collected data
- Session cookie (a random identifier stored in your browser to keep you logged in)
- We do not currently use analytics cookies, advertising cookies, or third-party tracking
We do not collect payment card details directly. Payment processing is handled by our payment provider, whose own privacy policy applies to payment data.
How we use your personal data
| Purpose |
Legal basis |
| To create and manage your account | Contract |
| To fulfil and process your orders | Contract |
| To send order confirmation and dispatch notifications | Contract |
| To comply with legal obligations (e.g. tax records) | Legal obligation |
| To send marketing emails (newsletter subscribers only) | Consent |
| To prevent fraud and abuse | Legitimate interests |
How long we keep your data
- Account data: Retained for the duration of your account and for up to 3 years after your last login or order, unless you request deletion earlier.
- Order records: Retained for 7 years to comply with HMRC requirements.
- Newsletter subscriptions: Until you unsubscribe.
- Session cookies: Expire after 7 days or when you log out.
Who we share your data with
We do not sell your personal data. We may share data with:
- Delivery carriers — name and delivery address to fulfil your order
- Payment processors — to handle your payment securely
- Cloud hosting providers — our servers are hosted by Render (Render.com), which stores data in the United States. We rely on Standard Contractual Clauses for this international transfer.
Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (subject to legal retention obligations)
- Restriction — ask us to pause processing in certain circumstances
- Portability — receive your data in a portable format
- Object — to processing based on legitimate interests
- Withdraw consent — at any time, for processing based on consent
To exercise any of these rights, contact us via our Contact page. We will respond within one calendar month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
We use one essential cookie — a session cookie that keeps you logged in. See our Cookie Policy for full details.
Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email if you have an account with us. The "last updated" date at the top of this page reflects the most recent revision.