Privacy Policy

1. Data Controller

ATMA Creative Universe is the data controller responsible for your personal data. You can contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

• Contact data: name, email address, phone number — when you fill in a contact or booking form.
• Purchase data: billing name, email, payment reference — when you purchase a product or service. Card details are processed exclusively by Stripe and never stored by us.
• Download data: email address and download token — when you purchase a digital product.
• Usage data: IP address, browser type, pages visited — collected automatically via server logs and analytics.
• Communication data: messages you send us via email or the contact form.

3. Legal Basis for Processing

• Contract performance: processing your orders and delivering digital products.
• Legitimate interest: improving our services, preventing fraud, and communicating with you about your enquiries.
• Consent: sending marketing communications (you may withdraw consent at any time).
• Legal obligation: retaining transaction records as required by applicable law.

4. How We Use Your Data

• To process and fulfil your orders and bookings.
• To send you transactional emails (order confirmations, download links).
• To respond to your enquiries and support requests.
• To improve our website and services.
• To comply with legal and tax obligations.

5. Third-Party Processors

We share data with trusted third parties only where necessary:

• Stripe: payment processing. Stripe is PCI-DSS compliant. See stripe.com/privacy.
• GoDaddy / Airo: website hosting and infrastructure.
• Email relay: transactional email delivery.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described above. Purchase and transaction records are kept for 7 years to comply with tax obligations. Download tokens expire after 72 hours. You may request deletion of your data at any time (see Section 8).

7. International Transfers

Your data may be processed outside the European Economic Area (EEA) by our service providers. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time (without affecting prior processing).
• Lodge a complaint with your national supervisory authority (in Spain: AEPD).

To exercise any of these rights, contact us at [email protected].

9. Cookies

We use cookies and similar technologies. For full details, please read our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our website after changes constitutes acceptance of the updated policy.

11. Contact

ATMA Creative Universe
Email: [email protected]
Website: atmacreativeuniverse.com