Privacy Policy
Last updated: 7 September 2026.
This notice is provided under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on personal data and digital rights.
1. Controller
ATOMIC X SUPPLY S.L., Spanish tax ID B56779341, Polígono Industrial Oeste, C/ Perú, Edificio Forum, Bajo 7, 30820 Alcantarilla (Murcia), Spain. Privacy email: [email protected]. Telephone: +34 626 86 88 99.
2. Purposes, legal bases and retention
| Processing | Data and purpose | Legal basis | Retention |
|---|---|---|---|
| Account, purchase and service | Identity, contact, addresses, account, cart, orders, returns and messages. | Contract and pre-contractual steps. | During the relationship and then restricted for applicable tax, commercial, consumer and claims periods. |
| Payment and invoicing | Invoice details, amount, status and transaction reference. We do not store full card data. | Contract and tax/accounting obligations. | Applicable statutory periods, normally up to 6 years depending on the record. |
| Delivery | Name, address, telephone, email and order details needed by the carrier. | Contract. | Delivery and applicable liability/claims periods. |
| Support and security | Requests, evidence, IP, technical logs, session and risk indicators. | Contract/pre-contractual steps, legitimate interest and security duties. | Only as long as needed to resolve the request, secure the service and defend claims. |
| Marketing | Email, choices and proof of consent. | Consent or, where legally allowed, prior customer relationship with an opt-out. | Until withdrawal/objection, with necessary evidence kept for limitation periods. |
| Analytics and advertising | Identifiers, navigation and events described in the Cookie Policy. | Consent. | Per technology; the cookie choice lasts 180 days. |
Fields marked as required are needed to fulfil a purchase or request. Without them we may be unable to provide the service.
3. Meta Pixel and Conversions API
Only after advertising consent, we use Meta Pixel and the Conversions API for measurement, attribution and campaign optimisation. Meta Platforms Ireland Limited may receive event type, time, URL and unique ID; IP and user agent; _fbp, _fbc; and relevant catalogue, variant, quantity, price, value and currency data.
With advertising consent, the Conversions API may send Meta the email address associated with the account, the telephone number from the delivery address and a pseudonymous external_id. These data are normalised and SHA-256 hashed before transmission; they are not sent without consent or in plain text. We do not use first name, surname or postal address as matching parameters. Pending events are encrypted and expire in 24 hours; content is deleted after delivery/discard and terminal operational metadata within 90 days. Meta retains received information under its own terms. Meta may act as joint controller for certain collection/transmission stages and process information later under its terms. See the Business Tools Terms and Privacy Policy.
4. Recipients and international transfers
Recipients, when necessary, include hosting/security/IT suppliers, carriers, payment providers, accounting/tax/legal services, email platforms, Google for consented analytics/advertising, Meta for consented measurement/advertising, and public authorities where required. Processor agreements and safeguards are used.
Global providers including Meta, Google and Cloudflare may process data outside the EEA. Where applicable, we rely on valid adequacy decisions, European Commission Standard Contractual Clauses and supplementary measures. You may request information about safeguards. We do not rely on the framework invalidated in 2020.
5. Profiling and automated decisions
With advertising consent, Meta or Google may support audience creation or ad personalisation. ATOM X does not make solely automated decisions producing legal or similarly significant effects. Consent can be withdrawn at any time.
6. Your rights
You may request access, rectification, erasure, restriction, objection and portability; withdraw consent without affecting earlier processing; and object to individual automated decisions. Contact [email protected] or the postal address above with enough information to verify identity. Exercise is free except for manifestly unfounded or excessive requests under the law.
You may complain to the Spanish Data Protection Agency (AEPD).
7. Cookies, security and changes
See the Cookie Policy and use Cookie preferences in the footer. We apply risk-appropriate technical and organisational safeguards and update this notice when processing, providers or legal requirements change.