Privacy Policy

This Privacy Policy explains how Entity Atlas collects, uses, discloses, and safeguards personal information when you visit our websites, create an account, or use any of our products, tools, and services (together, the Services). It also describes the rights and choices available to you in relation to your personal information.

In this Policy, Entity Atlas, we, us, and our refer to Entity Atlas together with its affiliates, parent companies, subsidiaries, related entities, and trading names operating in the jurisdictions in which we provide the Services. We are committed to processing personal information lawfully, fairly, and transparently in accordance with applicable data protection laws.

Please read this Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood the practices described here.

This Policy applies to personal information we process about visitors to our websites, prospective customers, account holders, authorised users acting on behalf of an organisation, and individuals who otherwise interact with us.

Where you provide us with personal information relating to other individuals (for example, colleagues, directors, officers, or beneficial owners of an entity), you confirm that you are authorised to do so and that you have informed those individuals of the matters set out in this Policy.

We collect the following categories of personal information:

• Information you provide. Name, business email address, telephone number, job title, employer or organisation, billing details, and any information you submit through forms, account settings, support requests, or correspondence.
• Account and usage information. Login credentials, authentication records, configuration choices, documents and content you generate or upload, and records of your activity within the Services.
• Technical information. IP address, device and browser type, operating system, referring pages, time zone, and similar diagnostic data collected automatically when you use the Services.
• Transaction information. Records of purchases, subscriptions, invoices, and payment status. Card and bank details are processed by our payment providers and are not stored by us in full.
• Communications. The content of messages you send to us and our responses, including any attachments.

We use personal information for the following purposes and on the legal bases indicated:

• To provide, operate, and maintain the Services, and to administer your account (performance of a contract).
• To process transactions, issue invoices, and collect payment (performance of a contract).
• To respond to enquiries, provide support, and communicate with you about the Services (legitimate interests and performance of a contract).
• To improve, develop, and secure the Services, including troubleshooting and analytics (legitimate interests).
• To send service messages and, where permitted, relevant updates and marketing, which you may opt out of at any time (legitimate interests or consent).
• To comply with legal, regulatory, accounting, and reporting obligations (legal obligation).
• To detect, prevent, and address fraud, abuse, and security incidents (legitimate interests and legal obligation).

Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

We and our service providers use cookies and similar technologies to operate our websites, remember your preferences, measure performance, and understand how the Services are used. Strictly necessary cookies are required for the Services to function. Other cookies are used only where permitted by your settings or consent.

You can control cookies through your browser settings and, where offered, through our cookie controls. Disabling certain cookies may affect the availability or functionality of parts of the Services.

We do not sell your personal information. We share it only in the following circumstances:

• Service providers. Trusted vendors who process information on our behalf, such as hosting, analytics, payment processing, e-signature, and email delivery providers, under written agreements that restrict their use of the information.
• Within our group. Our affiliates and related entities, where necessary to provide and administer the Services consistently.
• Professional advisers. Auditors, lawyers, insurers, and accountants where reasonably required.
• Legal and regulatory. Authorities, courts, or other parties where we are required to do so by law, or to establish, exercise, or defend legal claims.
• Business transfers. A successor or acquirer in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

We operate across multiple jurisdictions, and your personal information may be processed in countries other than the one in which you are located. Where we transfer personal information internationally, we put in place appropriate safeguards, such as standard contractual clauses or other lawful transfer mechanisms recognised under applicable law, to ensure your information remains protected.

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including to provide the Services, to comply with our legal, tax, accounting, and regulatory obligations, to resolve disputes, and to enforce our agreements. When information is no longer required, we securely delete or anonymise it.

We maintain administrative, technical, and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, and destruction. These include encryption in transit, access controls, and ongoing monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

Depending on your location and applicable law, you may have the following rights in relation to your personal information:

• The right to access the personal information we hold about you.
• The right to request correction of inaccurate or incomplete information.
• The right to request deletion of your information in certain circumstances.
• The right to restrict or object to certain processing.
• The right to data portability.
• The right to withdraw consent where processing is based on consent.
• The right to lodge a complaint with your local supervisory or data protection authority.

To exercise any of these rights, contact us at contact@entityatlas.io. We will respond within the timeframes required by applicable law. We may need to verify your identity before acting on a request.

The Services are intended for business use and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so that we can take appropriate action.

The Services may contain links to third-party websites and may integrate with third-party services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party service you use.

We may update this Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we do, we will revise the date shown above and, where the changes are material, take reasonable steps to notify you. Your continued use of the Services after an update takes effect constitutes acceptance of the revised Policy.

Data protection enquiries

If you have any questions about this Policy or how we handle your personal information, or if you wish to exercise any of your rights, please contact us at contact@entityatlas.io.