Privacy notice

Last updated 28 September 2026

This notice explains how Atomark Ltd collects and uses personal information in connection with business enquiries, business relationships and this website, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It covers our current activities as a company developing consumer nutrition products. If we begin selling products or collecting information from consumers, we will publish privacy information for that before we start.

Who is responsible

Atomark Ltd (company number 16151573) is the controller of the personal information described in this notice. For privacy questions, requests or complaints, email info@atomark.co.uk or write to Atomark Ltd, Suite 5435a, 399-405 Oxford Street, Unit 5, London W1C 2BU, United Kingdom.

When you contact us

When you contact us by email or post, we receive the contact details you provide (such as your name, email address, telephone number, job title and organisation), your message and any attachments you choose to send. We use this information to respond to your enquiry and to manage our business correspondence and relationships.

You are not required to provide any information to us. If you choose not to, we may be unable to respond to your enquiry. Please include only the information needed for your enquiry.

Post sent to our registered office is received by our registered office service provider and passed to us.

Information from other sources

We also hold business contact details that we receive at trade exhibitions and meetings, through introductions, or from publicly available sources such as company websites and professional networking services. This typically includes your name, job title, organisation, business email address and business telephone number. We use this information to follow up on business conversations and to manage supplier, partner and customer relationships. We will tell you where we obtained your details and refer you to this notice within one month of obtaining them, or when we first contact you if that is sooner. If we decide not to contact you, we delete your details within that month.

How we handle correspondence

Correspondence is received in our business email system and handled by authorised personnel. We use email, cloud productivity and AI-assisted tools to organise correspondence, summarise information and help prepare replies. Correspondence and attachments may be processed by the providers of these tools for those purposes. The section on service providers below explains the terms on which they do so.

We do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

Website delivery and security

Our website is hosted by a third-party hosting provider. In delivering and securing the website, the provider processes standard server request data, including IP address, request time, pages requested, referring page and browser information, and keeps access logs for a short period (see the section on how long information is kept). We do not add analytics, tracking or cookies to the website, and we do not routinely access these logs.

Our lawful bases

We rely on the following lawful bases under Article 6 of the UK GDPR:

• Legitimate interests (Article 6(1)(f)): responding to and managing business enquiries and relationships, and operating and securing our website. We have assessed that these interests are not overridden by your interests, rights and freedoms.
• Legal obligation (Article 6(1)(c)): keeping business records where required by law, for example for tax and company law purposes.

We do not currently use personal information for direct marketing. Before introducing any direct marketing, we will update our privacy information and comply with the consent and opt-out requirements that apply.

Service providers

We use service providers for email and cloud productivity, accounting, website hosting, registered office and mail handling, and AI-assisted administration. We share with each provider only the personal information it needs to perform its service for us.

Our email and cloud productivity, accounting, website hosting and mail handling providers process personal information on our behalf under written data processing terms.

Our AI-assisted tools are currently provided under the providers' standard consumer terms of service rather than under data processing terms written for businesses. Under those terms the provider is responsible for how it handles the content we submit to it, which may include keeping that content for a limited period and using it to detect misuse and enforce its terms. We use these tools only for our own business administration, and we limit what we submit to them to what the task needs.

We do not sell personal information. We do not disclose personal information to anyone else except where the law requires it or where it is necessary to establish, exercise or defend legal claims. You can ask us for a list of our current providers.

International transfers

Some of our providers are based in, or process information in, countries outside the United Kingdom, including the United States. Where personal information is transferred outside the United Kingdom, we rely on a safeguard recognised under UK law: UK adequacy regulations (which cover the European Economic Area and organisations in the United States certified under the UK Extension to the EU-US Data Privacy Framework), or contractual safeguards in the form of the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, supported by a transfer risk assessment where required. You can contact us for information about the safeguard that applies to a particular provider and how to obtain a copy of it.

How long information is kept

• Enquiries that do not lead to a business relationship: deleted two years after our last contact with you. We review and delete these records at least once a year.
• Business contact details and routine correspondence: kept for as long as they are needed to manage the relationship. When a relationship ends, we delete information that is no longer needed and keep only the contractual and business records that may be required to establish, exercise or defend legal claims, for up to six years after the relationship ends.
• Accounting and tax records that include personal information: kept for six years from the end of the financial year to which they relate, or longer where the law requires.
• Website access logs: retained by our hosting provider for approximately 30 days. We do not keep separate copies.

Cookies and similar technologies

This website does not use analytics tags, tracking pixels, external fonts, forms or mailing-list collection. The website pages do not set cookies or use browser storage. For this reason, no cookie consent banner is shown.

Your rights

Under the UK GDPR you have the right to:

• ask for a copy of the personal information we hold about you (access);
• ask us to correct inaccurate or incomplete information (rectification);
• ask us to delete your information in certain circumstances (erasure);
• ask us to restrict how we use your information in certain circumstances (restriction);
• receive information you have provided to us in a structured, commonly used, machine-readable format (data portability); and
• object to processing based on our legitimate interests (objection).

Some of these rights apply only in certain circumstances. For example, the right to data portability applies only to information you have provided to us that we process by automated means on the basis of your consent or a contract with you.

Right to object. Where we rely on legitimate interests, you may object at any time on grounds relating to your particular situation. We will stop processing your information unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims.

To exercise any of these rights, contact us using the email or postal address above. We do not charge a fee. We may ask you to confirm your identity where necessary. We respond to rights requests without undue delay and normally within one month of receiving them. Where the law permits an extension for a complex request, we will explain the reason and notify you within that first month.

Complaints

You can raise a complaint about how we have handled your personal information using the email or postal address above. We will acknowledge it within 30 days, look into it without undue delay, keep you informed of progress and explain the outcome.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk/make-a-complaint, telephone 0303 123 1113, or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed. If we intend to use personal information for a new purpose, we will update this notice and, where appropriate, tell the people affected before we begin.