Privacy Policy

1. What we collect

Depending on how you use the site, we collect:

• Account details — name, email, phone number, and birthday if you choose to add one (used only to send a birthday offer).
• Order details — delivery address, items ordered, payment method chosen, and order history.
• Browsing activity on our site — search terms, pages and products viewed, and items you save to your wishlist, used to run features like search and personalized suggestions.
• Communications — messages you send us on WhatsApp or through the site, and anything you tell our support chat.
• Cookies — see the section below.

We don't collect or store your full card number, Whish Pay, or OMT account details — those payments are handled directly by the provider.

2. How we use it

To process and deliver your orders, provide support, run your account (loyalty points, wishlist, order tracking), send order and shipping updates, and — only if you've opted in under Account → Settings — send you emails about new arrivals, restocks, or offers. We also use aggregated, non-identifying data (like which searches turn up nothing) to decide what to stock next.

3. Cookies and analytics

We use essential cookies to keep your cart, session, and language preference working — these can't be turned off without breaking the site, and don't require consent under most privacy frameworks since they're strictly necessary for the site to function.

If you accept optional cookies through the banner on our site, we also use Google Analytics and Vercel Analytics to understand traffic and improve the store — for example, which pages people visit and roughly where visitors are located. Neither is used to build advertising profiles about you, and nothing loads until you accept. You can decline, or change your mind later by clearing your browser's local storage for this site.

4. Who we share it with

We don't sell your data. We share the minimum needed with:

• Payment providers (Whish Pay, OMT, our card processor) — to process your payment.
• Delivery couriers — your name, phone, and address, to get your order to you.
• Supabase, our database and hosting provider — stores the data described above on our behalf, under their own security and privacy commitments.
• Resend, our email provider — sends order confirmations and receipts.
• Our own team, internally, to process and fulfil your order — for example, a new order's essentials (order number, items, city) are sent to our staff Telegram so we can act on it quickly. We don't send your full address, phone number, or email to Telegram beyond what's needed to fulfil that specific order.

5. How long we keep it

We keep order records for as long as needed for accounting, warranty, and legal purposes. If you ask us to delete your account (see below), we remove what we can while keeping the minimum needed to comply with financial record-keeping requirements.

6. Your choices

• Update your info anytime under Account → Settings.
• Turn off marketing emails under Account → Settings — order-related emails (confirmations, shipping updates) will still be sent since they're necessary to fulfil your order.
• Request a copy or deletion of your data by messaging us on WhatsApp. We don't currently have a self-service delete-my-account button, so this is handled manually — we'll confirm with you and action it within a reasonable time.

7. Security

We use industry-standard measures to protect your data — encrypted connections, access controls limiting who on our team can see what, and rate limiting on sensitive actions. No system is completely risk-free, but we take this seriously and review it as the site grows.

8. Children

Atlas Sports isn't directed at children, and accounts require the account holder to be 18 or older, or to be created with a parent or guardian's involvement.

9. Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page.

10. Contact

Questions, requests, or concerns about your data: WhatsApp us.