ATLANTISFX PRIVACY, DATA PROTECTION & TRANSPARENCY NOTICE
```Privacy Policy
This Privacy Policy explains how AtlantisFX Oy collects, uses, stores, protects, shares, and manages personal data when you visit the AtlantisFX website, contact us, request services, use client-facing tools, purchase digital services, or work with AtlantisFX on AI visibility, SEO infrastructure, website analysis, automation, reporting, and digital growth projects.
Overview
AtlantisFX Oy, referred to in this Privacy Policy as “AtlantisFX”, “we”, “us”, or “our”, respects privacy and data protection. This Privacy Policy describes how we process personal data in connection with the official AtlantisFX website, service pages, forms, client communication, client portal workflows, reports, payment-related processes, AI-assisted analysis, SEO services, automation planning, and digital service delivery.
AtlantisFX provides professional services related to AI visibility, SEO infrastructure, website analysis, local visibility, automation workflows, client reporting, digital strategy, and web infrastructure. To provide these services, we may need to process contact details, business information, website information, project communication, technical data, analytics context, payment-related records, and client-provided materials.
This Privacy Policy should be read together with the Terms of Service, Cookie Policy, AI & Data Processing Policy, Payment Security, and Refund & Cancellation Policy.
Data Controller
For the personal data described in this Privacy Policy, AtlantisFX Oy is generally the data controller, unless a separate written agreement states that AtlantisFX acts as a data processor for a client in a specific project.
If AtlantisFX processes personal data strictly on behalf of a client and according to that client’s documented instructions, additional data processing terms may apply. Such terms should be agreed separately when required by law or project scope.
Who This Privacy Policy Applies To
This Privacy Policy may apply to:
- website visitors using AtlantisFX.com;
- people who contact AtlantisFX through forms, email, social channels, messaging, or other communication channels;
- business clients, prospective clients, and client representatives;
- users of AtlantisFX client portal or account-based features;
- people who request website analysis, AI visibility review, SEO support, automation planning, or consulting;
- people involved in payment, billing, subscription, cancellation, or refund communication;
- people whose information appears in client-provided materials, website content, reports, screenshots, files, or project data.
AtlantisFX services are primarily business-to-business and professional services. However, some visitors or customers may be individuals or consumers. Where mandatory privacy rights apply, those rights are not limited by this Privacy Policy.
Personal Data We May Collect
The types of personal data we process depend on how you interact with AtlantisFX and which services you request. We may process the following categories:
Contact Data
Name, company name, email address, phone number, role, country, preferred communication method, and messages submitted through forms or direct communication.
Business Data
Company profile, website URL, industry, services, target market, business goals, project needs, brand details, public business information, and service requirements.
Website and Technical Data
IP address, browser type, device type, operating system, referring pages, visited pages, timestamps, approximate location, log data, and technical diagnostics.
Client Portal Data
Account details, login-related records, project status, messages, files, reports, plan details, subscription status, workflow history, and service notes.
Payment and Billing Data
Invoice data, transaction references, payment status, billing address, VAT or tax information, refund records, subscription records, and payment processor confirmations.
Project Materials
Documents, screenshots, website exports, analytics context, SEO data, content drafts, brand assets, automation notes, reports, and other materials you provide for service delivery.
Communication Data
Emails, support requests, project messages, meeting notes, feedback, approvals, revision requests, complaints, cancellation requests, and refund communication.
Marketing Preference Data
Newsletter preferences, consent records, unsubscribe status, campaign interactions, and communication preferences where marketing tools are used.
AtlantisFX does not intentionally request sensitive personal data unless it is specifically needed for a lawful and clearly defined purpose. You should not send health data, government identification documents, payment card numbers, passwords, private keys, API secrets, children’s data, or other highly sensitive information unless AtlantisFX specifically requests it through an appropriate secure process.
How We Collect Personal Data
AtlantisFX may collect personal data from the following sources:
- directly from you when you submit forms, send messages, request services, create an account, or purchase services;
- from your company or organization when a representative contacts AtlantisFX or manages a project;
- from your website or public online presence when AtlantisFX performs website, SEO, AI visibility, or local visibility review;
- from client-provided documents, screenshots, exports, reports, files, and explanations;
- from payment processors, billing tools, subscription systems, or transaction providers;
- from analytics, security, logging, hosting, WordPress, plugin, cookie, or performance tools used on the AtlantisFX website;
- from publicly available sources, search engines, business directories, public websites, and online platforms where relevant to the requested service.
If you provide personal data about another person, you are responsible for ensuring that you have the legal right to do so and that the person receives any privacy information required by law.
Why We Use Personal Data
AtlantisFX may process personal data for the following purposes:
To provide AI visibility, SEO, website analysis, automation, client portal, reporting, consulting, and web infrastructure services.
To respond to inquiries, manage projects, send updates, request information, provide support, and handle service communication.
To manage accounts, proposals, orders, subscriptions, project status, documents, messages, service history, and client portal access.
To process payments, invoices, subscriptions, refunds, taxes, payment confirmations, fraud checks, and accounting records.
To operate the AtlantisFX website, monitor performance, fix errors, protect security, manage cookies, and improve usability.
To improve services, understand user needs, review website functionality, refine reports, and develop better workflows.
To comply with tax, accounting, consumer, contract, data protection, payment, fraud prevention, and legal obligations.
To protect AtlantisFX identity, investigate misuse, prevent fraud, defend legal claims, and maintain trust in the official website.
Legal Bases Under GDPR
Where the General Data Protection Regulation applies, AtlantisFX processes personal data only where there is an appropriate legal basis. Depending on the context, the legal basis may include:
If AtlantisFX relies on consent, you may withdraw consent where the law allows. Withdrawal of consent does not affect processing that took place before withdrawal.
AI-Assisted Processing
AtlantisFX may use AI-assisted tools to support website analysis, SEO review, AI visibility assessment, automation planning, reporting, drafting, summarization, categorization, content structuring, workflow planning, and client service support.
AI-assisted processing may involve business information, website content, screenshots, technical descriptions, public website data, project notes, analytics context, client-provided explanations, and service-related materials. AtlantisFX aims to avoid sending unnecessary personal data to AI tools and may redact, minimize, summarize, or structure information where appropriate.
AI outputs can contain errors, outdated assumptions, incomplete interpretations, or hallucinations. AtlantisFX uses AI-assisted tools as support tools, not as a replacement for human review. Important recommendations, reports, website changes, legal-sensitive content, payment-related decisions, and client-facing deliverables should be reviewed before use.
For more detail, see the AI & Data Processing Policy.
Payment and Billing Data
AtlantisFX may use third-party payment processors, invoicing systems, subscription tools, banking providers, accounting tools, or payment-related service providers to process payments, manage invoices, verify transactions, handle refunds, prevent fraud, and maintain financial records.
AtlantisFX does not need to store full payment card numbers when payments are handled through a third-party payment processor. The payment provider may process card details, authentication data, transaction metadata, billing details, fraud checks, and payment confirmation information according to its own terms and privacy notices.
Payment-related records may be retained as needed for accounting, tax, legal, refund, chargeback, fraud prevention, and compliance purposes. For more detail, see Payment Security and Refund & Cancellation Policy.
When We Share Personal Data
AtlantisFX does not sell personal data as a core business model. We may share personal data only where reasonably necessary for the purposes described in this Privacy Policy.
Personal data may be shared with:
- hosting providers and infrastructure providers that operate the website or client systems;
- WordPress, plugin, theme, security, form, analytics, and performance tool providers;
- payment processors, invoicing tools, banks, accounting tools, and fraud prevention providers;
- email, communication, scheduling, customer support, and project management tools;
- AI-assisted tools and automation providers where needed for service delivery and subject to applicable safeguards;
- professional advisers, accountants, legal advisers, insurers, auditors, or compliance support providers;
- public authorities, regulators, courts, or law enforcement where legally required;
- service providers or contractors working under appropriate confidentiality or processing obligations.
AtlantisFX expects service providers to process data only for permitted purposes and to apply appropriate security and confidentiality measures.
International Data Transfers
AtlantisFX is based in Finland, but some service providers, tools, hosting systems, payment processors, analytics tools, AI tools, email providers, or automation platforms may process data in other countries, including outside the European Economic Area.
Where required, AtlantisFX aims to use appropriate transfer safeguards, such as adequacy decisions, standard contractual clauses, contractual commitments, provider security measures, and other legally recognized transfer mechanisms.
International transfers can involve legal and technical risks. AtlantisFX aims to minimize the personal data transferred where possible and to select service providers with reasonable privacy and security practices.
How Long We Keep Personal Data
AtlantisFX keeps personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
When personal data is no longer needed, AtlantisFX may delete, anonymize, aggregate, archive, or securely restrict it where appropriate.
Security Measures
AtlantisFX takes reasonable technical and organizational measures to protect personal data against unauthorized access, accidental loss, misuse, alteration, disclosure, or destruction. The exact measures depend on the nature of the data, service, tool, and project.
Security measures may include access control, secure hosting practices, password protection, limited account access, HTTPS, plugin updates, security monitoring, backups where available, payment processor security, careful handling of credentials, and minimization of unnecessary data.
No website, email system, hosting platform, payment provider, plugin, AI tool, analytics service, or digital transmission can be guaranteed to be completely secure. You are responsible for using secure passwords, protecting your own systems, limiting unnecessary data sharing, and notifying AtlantisFX promptly if you suspect a security issue.
Your EU/EEA Data Protection Rights
If GDPR or similar data protection law applies to you, you may have rights regarding your personal data. These rights may include:
Right of access
You may request information about whether AtlantisFX processes your personal data and request a copy of that data.
Right to rectification
You may ask AtlantisFX to correct inaccurate or incomplete personal data.
Right to erasure
You may request deletion of personal data where the legal conditions are met.
Right to restriction
You may request that processing is restricted in certain situations.
Right to portability
You may request certain data in a structured, commonly used, machine-readable format.
Right to object
You may object to processing based on legitimate interests or direct marketing where applicable.
Right to withdraw consent
If processing is based on consent, you may withdraw that consent where the law allows.
Right to complain
You may lodge a complaint with a data protection authority, including the Finnish Data Protection Ombudsman where applicable.
Not all rights apply in every situation. The applicable right depends on the data, legal basis, purpose of processing, statutory retention duties, contract status, and other legal conditions.
To exercise privacy rights, contact AtlantisFX through the Contact & Company Information page. AtlantisFX may need to verify your identity before responding to a request.
US Privacy Rights and State Privacy Notices
If you are located in the United States, privacy rights may depend on your state, the type of data processed, the nature of your relationship with AtlantisFX, and whether a specific state privacy law applies to AtlantisFX.
Where applicable law grants such rights, you may have the right to request access, correction, deletion, portability, restriction, opt-out of certain processing, or information about categories of personal information collected, used, disclosed, sold, or shared.
AtlantisFX does not intentionally sell personal information as a core business model. If AtlantisFX later uses advertising or analytics technologies that are legally considered a “sale” or “sharing” under a particular state law, AtlantisFX will update this Privacy Policy and provide any required opt-out mechanism.
California residents and residents of other US states with applicable privacy laws may contact AtlantisFX through the official contact page to make a privacy request. AtlantisFX will review the request according to applicable law.
Marketing Communications
AtlantisFX may send service-related messages, project updates, payment notices, account information, and other operational communication where necessary for service delivery.
AtlantisFX may also send marketing or educational communication where legally permitted, such as newsletters, digital visibility insights, SEO updates, automation guidance, product announcements, or service offers. Where consent is required, AtlantisFX will seek consent before sending such communication.
You may unsubscribe from marketing communication where an unsubscribe option is available. Service, legal, security, payment, or account-related messages may still be sent where necessary.
Children’s Privacy
AtlantisFX services are intended for businesses, professionals, website owners, entrepreneurs, organizations, and adult users. AtlantisFX does not knowingly target children or intentionally collect personal data from children.
If you believe that a child has provided personal data to AtlantisFX, contact us so we can review the matter and delete the data where legally required and technically possible.
Automated Decision-Making
AtlantisFX does not intend to make decisions that produce legal or similarly significant effects about individuals based solely on automated processing.
AI-assisted tools may support analysis, recommendations, summaries, categorization, reports, and workflow planning, but important decisions about service delivery, billing, project scope, account access, or client communication should involve human review.
Personal Data Breaches
If AtlantisFX becomes aware of a personal data breach affecting personal data processed by AtlantisFX, AtlantisFX will assess the incident and take appropriate steps according to applicable data protection law.
Where legally required, AtlantisFX may notify the relevant supervisory authority and affected individuals. The timing, content, and method of notification depend on the nature of the incident, the risk to individuals, and legal requirements.
Changes to This Privacy Policy
AtlantisFX may update this Privacy Policy from time to time to reflect changes in services, technology, website tools, AI processing, payment methods, legal requirements, third-party providers, or business operations.
The updated version will be posted on this page with a revised “Last updated” date. Where a change is material and legally requires notice or consent, AtlantisFX will provide such notice or request consent where appropriate.
Contact AtlantisFX About Privacy
Privacy questions, data protection requests, consent withdrawals, correction requests, deletion requests, and complaints should be sent through the official AtlantisFX contact channel.
To help AtlantisFX respond, include your name, email address, company name if applicable, the nature of your request, and enough information to identify the relevant data or service. AtlantisFX may request additional verification before fulfilling a privacy request.
External Reference Sources
These public sources are provided for transparency. They do not replace this Privacy Policy and AtlantisFX is not responsible for changes to external websites.