Privacy Policy

Who is responsible

AtlasFresh is a trading brand operated by Atlas Digital Assets LLC, which is the controller or responsible business for personal information described here. AtlasFresh is not a separate legal entity. Correspondence may be sent to support@atlasfresh.org or to Atlas Digital Assets LLC's official business mailing address for AtlasFresh correspondence: 8206 Louisiana Blvd NE, Ste A #9970, Albuquerque, NM 87113, United States. This address is not described as a separate AtlasFresh office.

Information we collect

• Account and identity data, such as name, email, telephone number, login status, saved addresses, preferences, verification records, and account-security events.
• Order and fulfilment data, such as products, quantities, substitutions, delivery address and instructions, order history, issue-resolution evidence, and shipment tracking.
• Payment-related data received from configured payment processors, such as payment status, method type, transaction reference, billing address, and limited card metadata. AtlasFresh does not need to store full card numbers or security codes.
• Communications with support, reviews, survey responses, and messages sent through chat or other enabled channels.
• Device and website-activity data, such as IP address, browser, operating system, pages and products viewed, cart activity, referring source, cookie choices, and security logs.
• Marketing preferences and separately recorded email, SMS, analytics, and advertising consent choices.

Passwords and authentication

Passwords are never intended to be stored in readable form. Where AtlasFresh manages credentials, passwords are securely salted and hashed. Where a configured authentication provider manages credentials, that provider handles them under its security controls. Verification, reset, session, and two-factor tokens are limited, protected, and invalidated according to their purpose.

Why we process information and our legal bases

• Contract: to administer accounts, calculate a cart, accept and fulfil orders, arrange payment and delivery, provide tracking, and resolve fresh-product issues.
• Legal obligation: to maintain tax and accounting records, respond to lawful requests, manage recalls, protect mandatory consumer rights, and meet food-safety and other applicable duties.
• Legitimate interests: to operate and secure the website, prevent fraud and abuse, improve service, administer the business, defend legal claims, and understand essential store performance, balanced against individual rights.
• Consent: for optional marketing, non-essential analytics or advertising technologies, and any other processing for which consent is required. Consent can be withheld or withdrawn without affecting necessary service.

Marketing and non-essential tracking

Marketing consent is separate from ordering and transactional communications. Placing an order does not subscribe a customer to marketing. Optional analytics, preference, or marketing technologies are not loaded before consent where the law requires consent, and rejecting optional categories is intended to be as easy as accepting them.

Who receives information

We share only information reasonably needed with enabled payment processors; delivery carriers and fulfilment providers; hosting, storage, database, authentication, communication, email, customer-support, fraud-prevention, analytics, consent-management, error-monitoring, and tracking providers; and legal, accounting, insurance, security, and other professional advisers. Provider-specific disclosures will be updated when production integrations are enabled. Optional Tidio, Klaviyo, Track123, analytics, advertising, Sentry, and AI-development integrations remain disabled until configured; disabled providers do not receive store data from AtlasFresh.

• We may disclose information when required by law, to protect people or the service, or as part of a merger, financing, reorganisation, or sale subject to appropriate safeguards.
• Atlas Digital Assets LLC does not sell personal information as a business practice. If that practice changes, this policy and applicable choice mechanisms will be updated before the change applies.

International processing

Providers may process information outside the country where it was collected. Where GDPR or UK GDPR restricted transfers apply, Atlas Digital Assets LLC uses an adequacy decision, approved standard contractual clauses, the UK International Data Transfer Agreement or Addendum, or another lawful safeguard, together with supplementary measures where appropriate. Copies or information about relevant safeguards may be requested.

Retention

Retention depends on operational need and applicable tax, accounting, food-safety, fraud-prevention, chargeback, dispute, limitation-period, and legal requirements. Cart and security data is generally kept for shorter periods than order and financial records. Consent and suppression records may be retained to honour choices. When data is no longer needed, it is deleted, anonymised, or isolated unless lawfully preserved. Detailed periods are configurable as production systems and jurisdictions are finalised.

Your rights

Depending on location and law—including in the EU, EEA, UK, and certain US states—you may request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or an appeal of a privacy decision. You may also have rights to know categories and sources, opt out of certain targeted advertising or sharing, limit sensitive-data use, and avoid unlawful discrimination. These rights are subject to verification and lawful exceptions. EU/EEA and UK residents may complain to their supervisory authority.

• Submit a request through the account privacy controls when available or email support@atlasfresh.org. We may verify identity and authority before acting.
• Account deletion requests close the account and remove or de-identify eligible data; legally required order, tax, fraud, recall, and dispute records may be retained and access restricted.
• Data exports are provided in a commonly used, machine-readable format where applicable. Authorised agents may be required to provide signed permission.

Security

We use proportionate technical and organisational safeguards, including access controls, encrypted transport, protected secrets, logging, validation, and provider isolation. No internet transmission or storage system is absolutely secure, so we cannot guarantee that information will never be accessed, lost, or misused.

Children

AtlasFresh accounts and orders are for people aged 18 or older, or an adult acting with legal authority. The service is not directed to children under 13, and we do not knowingly collect their personal information. Where local law requires parental consent for optional data processing at a higher age, that local minimum applies.

Third-party services and links

Third-party sites, payment pages, carrier pages, and integrations have their own terms and privacy practices. A link does not make Atlas Digital Assets LLC responsible for another party's service. Review the provider's notice before supplying information directly to it.

Updates and contact

We may update this policy when practices, providers, or law change. The effective date and revision history will show material updates, and additional notice or renewed consent will be provided where required. Questions and rights requests may be sent to support@atlasfresh.org or the official business mailing address above.