Privacy policy


Atlantis Apparel

Last Updated: August 9, 2026

1. Introduction

Atlantis Apparel (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit our website, create an account, place an order, or otherwise interact with our online store and related services (collectively, the “Services”).

This Policy applies to customers and visitors worldwide, including individuals located in the European Union (“EU”), the United Kingdom (“UK”), the United States (including California and other U.S. states), Canada, Australia, New Zealand, and other jurisdictions. Where local laws provide greater rights or impose additional obligations, those laws will apply.

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Services.

2. Who We Are / Data Controller

Atlantis Apparel is the data controller responsible for your personal data. For the purposes of applicable data protection laws (including the EU General Data Protection Regulation (“GDPR”), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (“CCPA/CPRA”), the Australian Privacy Principles (“APPs”), and the New Zealand Privacy Act 2020), we determine the purposes and means of processing personal data.

Contact details:

Atlantis Apparel

Email: privacy@atlantisapparel.eu

Data Protection Officer (DPO): dpo@atlantisapparel.eu

Website: www.atlantisapparel.eu

3. Information We Collect

We collect personal data that you provide directly, data generated through your use of the Services, and data obtained from third parties. The categories of personal data we may collect include:

3.1 Information You Provide to Us

        Identity and Contact Data: name, email address, postal address, telephone number, date of birth (where required for age verification or marketing preferences).

        Account Data: username, password (stored in hashed form), account preferences, and communication settings.

        Transaction and Order Data: purchase history, order details, shipping and billing addresses, payment method information (note: full payment card details are processed by our secure payment processors and are not stored by us).

        Marketing and Communications Data: your preferences for receiving marketing materials and communications from us.

        Customer Support Data: records of correspondence, inquiries, returns, complaints, and related communications.

3.2 Information Collected Automatically

        Technical and Device Data: IP address, browser type and version, operating system, device identifiers, time zone setting, and other technology on the devices you use to access our Services.

        Usage Data: information about how you use our website, products, and services, including pages viewed, products browsed, search queries, clickstream data, and referring/exit pages.

        Cookie and Tracking Data: data collected through cookies, pixels, web beacons, and similar technologies (see Section 8).

3.3 Information from Third Parties

We may receive information about you from payment processors, shipping carriers, analytics providers, advertising partners, social media platforms (if you interact with our content or log in via social features), and fraud-prevention services, solely as permitted by applicable law and consistent with this Policy.

4. How We Use Your Information

We use personal data for the following purposes:

        Order Fulfilment and Customer Service: to process and deliver orders, manage returns and exchanges, provide customer support, and communicate about your purchases.

        Account Management: to create and maintain your account, authenticate users, and provide personalized features.

        Marketing and Personalization: to send promotional communications (where permitted or with consent), recommend products, and tailor content and offers to your interests.

        Analytics and Improvement: to analyze website performance, understand user behavior, improve our products, services, and user experience, and conduct research.

        Security and Fraud Prevention: to detect, prevent, and investigate fraud, unauthorized access, and other illegal or harmful activities; to protect the rights, property, and safety of Atlantis Apparel, our customers, and others.

        Legal and Compliance: to comply with applicable laws, regulations, legal processes, and governmental requests; to enforce our terms of service; and to establish, exercise, or defend legal claims.

        Business Operations: for internal administration, auditing, and other legitimate business purposes.

5. Legal Bases for Processing (EU and UK)

Where the GDPR or UK GDPR applies, we process personal data only when we have a valid legal basis, which may include:

        Contractual Necessity: processing necessary to perform a contract with you (e.g., processing and delivering your order) or to take steps at your request before entering into a contract.

        Consent: where you have given clear consent for a specific purpose (e.g., marketing emails or non-essential cookies). You may withdraw consent at any time.

        Legitimate Interests: processing necessary for our legitimate interests (or those of a third party), provided those interests are not overridden by your rights and interests. Examples include fraud prevention, network security, analytics, and certain marketing activities.

        Legal Obligation: processing necessary to comply with a legal obligation to which we are subject (e.g., tax, accounting, or regulatory requirements).

6. Sharing and Disclosure of Personal Data

We do not sell your personal data in the traditional sense. We may share personal data with the following categories of recipients:

        Service Providers: third-party companies that perform services on our behalf, such as payment processing, order fulfilment and shipping, website hosting, email delivery, analytics, customer support tools, and marketing platforms. These providers are contractually obligated to protect your data and use it only for the purposes we specify.

        Business Partners: In limited circumstances, partners involved in joint promotions or co-branded offerings, subject to applicable law and your preferences.

        Legal and Regulatory Authorities: when required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of our users or the public.

        Corporate Transactions: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, personal data may be transferred as part of the transaction, subject to appropriate confidentiality and data protection safeguards.

        With Your Consent: where you have directed or consented to the disclosure.

We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law. We do not allow our third-party service providers to use your personal data for their own purposes.

7. International Data Transfers

Atlantis Apparel operates globally. Your personal data may be transferred to, stored in, and processed in countries other than your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

Where we transfer personal data from the European Economic Area (EEA), UK, or Switzerland to countries that have not been deemed to provide an adequate level of protection, we implement appropriate safeguards, which may include:

        Standard Contractual Clauses (SCCs) approved by the European Commission or the UK Information Commissioner’s Office;

        Binding Corporate Rules (where applicable);

        Reliance on adequacy decisions; or

        Other lawful transfer mechanisms permitted under applicable data protection law.

You may contact us to request further information about the safeguards we use for international transfers.

8. Cookies and Tracking Technologies

We use cookies, pixels, local storage, and similar technologies to enhance your experience, analyze usage, deliver personalized content and advertising, and support security features.

Types of Cookies We Use

        Strictly Necessary Cookies: required for the website to function (e.g., shopping cart, authentication, security). These cannot be disabled.

        Performance / Analytics Cookies: help us understand how visitors interact with the website so we can improve it.

        Functional Cookies: enable enhanced functionality and personalization (e.g., remembering preferences).

        Targeting / Advertising Cookies: used to deliver relevant advertisements and measure campaign effectiveness. These may be set by our advertising partners or by us.

Where required by law (including in the EU, UK, and certain other jurisdictions), we obtain your consent before placing non-essential cookies. You can manage cookie preferences through our cookie banner or your browser settings. Note that disabling certain cookies may affect website functionality.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the purpose of processing.

In general: account data is retained while your account remains active and for a reasonable period thereafter; transaction records are retained for the period required by tax and commercial law (typically 6–10 years depending on jurisdiction); marketing data is retained until you withdraw consent or object; and technical logs are retained for shorter periods consistent with security and operational needs.

When personal data is no longer required, we will securely delete or anonymize it.

10. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal data. We honor these rights in accordance with applicable law.

10.1 Rights under GDPR and UK GDPR (EEA and UK Residents)

You have the right to:

        Access: request a copy of the personal data we hold about you.

        Rectification: request correction of inaccurate or incomplete data.

        Erasure (“Right to be Forgotten”): request deletion of your personal data in certain circumstances.

        Restriction: request restriction of processing in certain circumstances.

        Data Portability: receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

        Object: object to processing based on legitimate interests or for direct marketing purposes.

        Withdraw Consent: where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

        Lodge a Complaint: Lodge a complaint with a supervisory authority in your country of residence (e.g., the ICO in the UK or the relevant Data Protection Authority in the EU).

10.2 Rights under CCPA/CPRA (California Residents)

California residents have the right to:

        Know: request disclosure of the categories and specific pieces of personal information we have collected, the sources, purposes, and categories of third parties with whom we share it.

        Delete: request deletion of personal information, subject to certain exceptions.

        Correct: request correction of inaccurate personal information.

        Opt-Out of Sale or Sharing: opt out of the “sale” or “sharing” of personal information (as defined under the CCPA/CPRA). We do not sell personal information for monetary consideration; however, certain advertising and analytics activities may constitute “sharing” or “sale” under California law. You may exercise your right to opt out via the “Do Not Sell or Share My Personal Information” link on our website or by contacting us.

        Limit Use of Sensitive Personal Information: request limitation of the use and disclosure of sensitive personal information.

        Non-Discrimination: not be discriminated against for exercising your CCPA/CPRA rights.

We will verify your identity before responding to requests. Authorized agents may submit requests on your behalf with appropriate documentation.

10.3 Rights under Australian Privacy Principles and New Zealand Privacy Act

Residents of Australia and New Zealand have rights including:

        The right to access personal information we hold about you;

        The right to request correction of inaccurate, incomplete, or out-of-date information;

        The right to complain about our handling of your personal information; and

        In New Zealand, additional rights under the Privacy Act 2020, including the right to request the deletion or de-identification of personal information in certain circumstances and the right to complain to the Office of the Privacy Commissioner.

Australian residents may also contact the Office of the Australian Information Commissioner (OAIC).

10.4 How to Exercise Your Rights

To exercise any of the rights described above, please contact us at privacy@atlantisapparel.com or use the relevant request form on our website. We will respond within the timeframes required by applicable law (typically within 30 days under GDPR/UK GDPR, and within 45 days under CCPA/CPRA, subject to possible extensions).

You may also manage marketing preferences by clicking the “unsubscribe” link in our emails or adjusting settings in your account.

11. Children’s Privacy

Our Services are not directed to children under the age of 16 (or the equivalent minimum age in the relevant jurisdiction). We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without appropriate consent or authorization, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 16, please contact us immediately.

12. Data Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include encryption of data in transit (TLS/SSL), access controls, secure development practices, regular security assessments, and staff training.

While we strive to protect your personal data, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

13. Third-Party Websites and Services

Our website may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements or practices. We encourage you to read the privacy policy of every website you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated Policy on our website with a new “Last Updated” date and, where required by law, by additional means such as email notification. Your continued use of the Services after the effective date of the updated Policy constitutes acceptance of the changes, to the extent permitted by applicable law.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Atlantis Apparel

Privacy Team / Data Protection Officer

Email: privacy@atlantisapparel.eu

DPO Email: dpo@atlantisapparel.eu

Website: www.atlantisapparel.eu

For residents of the European Union or the United Kingdom, you also have the right to lodge a complaint with your local supervisory authority. For California residents, you may contact the California Attorney General. For Australian residents, contact the OAIC. For New Zealand residents, contact the Office of the Privacy Commissioner.

— End of Privacy Policy —

© 2026 Atlantis Apparel. All rights reserved.