Who we are
AtlasPayment Holdings Ltd is the data controller for personal data processed through this site and during client engagements. We are registered in England & Wales under company number 14829301.
For any privacy question, write to hello@atlaspayment.org. We respond within one calendar month and acknowledge sooner.
What we collect
We process the minimum data needed to operate the site safely and to deliver advisory work. Specifically:
- Site visitors: server-level access logs (IP, user-agent, requested URL, timestamp) generated by our hosting platform.
- Inbound contacts: any information you choose to share when you message us on Telegram or email — typically name, role, company, and the substance of the request.
- Engaged clients: contracting details, project notes, and the artefacts produced under engagement (scoping documents, structuring memos, vendor selection write-ups).
- Operational records: invoicing and accounting data tied to client engagements.
We do not run cross-site advertising trackers, behavioural cookies, fingerprinting, or session-replay tooling on this site. See the cookie notice for the full list.
How we use your data
We use personal data only for the purposes that make the site and the engagement work:
- To respond to inbound messages and qualify whether an engagement makes commercial sense.
- To deliver and document advisory work under signed engagement letters.
- To meet our regulatory, accounting, and AML duties under English law.
- To operate the site safely — server log retention, abuse triage, and incident response.
Legal bases (UK GDPR Art. 6)
We rely on the following legal bases:
- Contract — for active client engagements and the steps we take immediately before signing.
- Legitimate interests — for inbound qualification, server log retention, and operating the site safely.
- Legal obligation — for accounting, anti-money-laundering, and tax records.
- Consent — only collected for optional, non-essential cookies if and when we add any (see /cookies).
We do not rely on consent for marketing, because we do not market through this site.
International transfers
Some of the providers above are based outside the UK. Where they are, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, the UK Adequacy Regulations where they apply, and additional technical measures (encryption in transit and at rest) appropriate to the data being transferred.
Retention
We retain data for the shortest period that meets the purpose:
- Server access logs: 90 days.
- Inbound messages that do not lead to an engagement: 12 months, then deleted.
- Engagement records: for the life of the engagement and 7 years after, to meet accounting and AML obligations.
- Anything you ask us to delete sooner: deleted on request unless we are legally required to keep it.
Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you,
- correct it if it is inaccurate or incomplete,
- ask us to erase it, subject to the retention obligations above,
- restrict or object to processing,
- request portability of data we hold under contract or consent,
- complain to the Information Commissioner’s Office (ico.org.uk) if you believe we have handled your data poorly.
Exercise any of these by writing to hello@atlaspayment.org.
How to contact us
Email: hello@atlaspayment.org. Telegram: see the CTA on the home page. Postal: AtlasPayment Holdings Ltd, registered office, England & Wales.