Privacy policy
Privacy Policy
Last updated: 6 June 2026
ATOM LED Lighting Ltd ("ATOM LED", "we", "us" or "our") is committed to protecting your privacy. This policy explains how and why we collect information about you, how we use it, who we share it with, how long we keep it, and the rights you have over your data. Please read it carefully.
We may change this Privacy Policy from time to time. When we do, we will post the updated version on this page so that you always know our current practices.
Who We Are (Data Controller)
The data controller for your personal data is:
- ATOM LED Lighting Ltd (company number 12128771)
- Registered and trading address: Unit D4, Stafford Park 4, Telford, Shropshire, TF3 3BA
- Email: sales@atomled.co.uk
- Phone: 01952 370028
We are responsible for deciding how your personal data is held and used, and for making sure it is handled in line with the UK GDPR and the Data Protection Act 2018.
Why We Collect Your Information
Your privacy matters to us, so any information you give is treated as confidential and is only used as set out in this policy — chiefly to process your order and give you a good level of service. Understanding more about you helps us show you products and offers that are likely to be relevant, such as money-off vouchers, rewards and product news. We only send you marketing where you have told us you are happy to receive it, and you can ask us to stop at any time by clicking the "unsubscribe" link in our emails or by updating the marketing preferences in your online account.
What Information We Collect
We collect information from you in a few different ways.
Information you give us
This is information you share with us directly, for example when you:
- Complete a form on our website, place an order, or go through part of the checkout process.
- Create a wishlist, search for a product, or create or update your account.
- Sign up for offers and news, submit a customer review, or enter a competition or prize draw.
- Request swatches or a brochure.
- Contact us by phone, email, social media or otherwise.
This information may include your name, email address, postal address and telephone number, a personal description or photograph, your chosen username and password, your contact and account details, your preferences and interests, and the details of any query or complaint you raise.
Details of products and services purchased
This is information about what you buy from us and how your orders are fulfilled — for example the time and date of purchase, the products you order, and the delivery addresses you use.
Payment information
When you pay by debit or credit card, your card details are processed securely by our payment service providers. ATOM LED does not hold or store your full card details — payment is handled entirely by a third-party payment gateway.
Correspondence
If you contact us, we may keep a record of that correspondence or call.
Information we collect automatically about your visit
When you use our website we may collect:
- How and when you access the site, the products you searched for or viewed, the pages you visited and how long you stayed, your interactions with the page, and your general customer journey.
- Technical information such as your IP address, device type and ID, browser type and version, operating system, time zone setting, and referring website.
- Traffic data, weblogs and similar communication data.
Much of this data is collected through cookies and similar technologies, which are explained in our Cookies Policy.
Information we receive from other sources
We may receive information about you from trusted third parties who help us run our business, such as payment and delivery providers, analytics and advertising providers, customer-review providers, and live-chat providers. We only use this information in line with this policy.
Aggregated data
We may also use "aggregated data" — statistical or demographic information that does not, directly or indirectly, identify you. We may use anonymised customer data from our website and live chat to improve product recommendations, search results and site content, and to test and improve the website.
Data we do not collect
We do not collect "special category" data about you (such as race, ethnicity, religion, sex life, political opinion, health, or genetic or biometric data), except where we have a legal obligation to do so — for example, recording an accident on our premises. We do not collect data about criminal convictions or offences, and we do not knowingly collect children's data.
Our Legal Basis for Processing Your Data
We process your personal data under the UK GDPR and Data Protection Act 2018 as follows:
| Purpose | Lawful basis |
|---|---|
| Orders, delivery, returns and account management | Contract |
| Marketing emails, and analytics and advertising cookies | Consent (you can withdraw it at any time) |
| Fraud prevention and website security | Legitimate interests |
| Tax and accounting records | Legal obligation |
How We Use the Information We Collect
We use your personal data to:
- Help you browse and shop on our website, and to administer, monitor and improve the site and your experience of using it.
- Personalise the website and our communications to your likes, dislikes and interests.
- Provide the information, products or services you request, where you have consented to be contacted for those purposes.
- Meet our obligations under any contract between you and us, including delivering your order and honouring product guarantees.
- Tell you about changes to our products or services.
- Process your payments so you can shop with us, using our third-party payment providers (payment is subject to each provider's own privacy policy).
- Keep accurate records of purchases, sales and other transactions, and make financial or management forecasts to run our business. We do not hold or take payment details ourselves — this is handled by a third-party payment gateway.
- Provide after-sales service. If you do not give us the personal data we need to provide a product or service, we may not be able to fulfil our contract with you. Please keep the data you give us accurate and up to date.
- Send you direct marketing, where you have consented, by phone, post, SMS or email about offers and products that may interest you, and to measure how those campaigns perform.
- Run competitions and prize draws, process your entries, and meet our obligations under the relevant terms and conditions.
- Advertise and market our products, services and business, including digital and social advertising. This may involve tailoring the ads you see based on what you view on our website and your interests on other sites. We do not sell your data, and we do not pass it to third parties for their own marketing purposes.
- Send you reminder emails if you add products to your basket while shopping, using a third-party provider that manages our basket-reminder programme.
- Send you personalised emails based on your browsing behaviour, using a third-party provider that manages our browse-behaviour programme.
- Analyse how our digital advertising performs, in line with our Cookies Policy.
- Analyse sales and frequently viewed products for marketing and business-development purposes.
- Respond to your questions, suggestions or complaints, whether raised with us directly or via social media.
- Carry out administrative tasks, research and statistical analysis for customer surveys and research.
- Understand which queries we can answer automatically via live chat, so we can improve that service.
- Forecast demand and plan our logistics.
- Show you more relevant ads on other websites. To do this we share limited, mainly anonymous information about you and your shopping habits with the providers who place our online advertising. This is combined with data from other internet users to build audience profiles based on shared interests and characteristics, which are used to serve more relevant ads, including on social media. In limited cases, partially anonymised data (such as an order number, and in some cases an email address) is shared with select advertising and affiliate partners so we can measure marketing effectiveness and reward affiliate websites.
- Gather statistics about how people use our website, and what they think of our advertising, offers, news, products, competitions and content, so we can improve. For this we use third-party analytics providers. This data is mainly anonymous, with the exception of partially anonymised data (such as an order number or unique ID) shared with our analytics provider so we can analyse behaviour at an aggregate level, verify data, and understand behaviour across multiple devices.
Compliance and protection
- To monitor how our websites are used and detect abuse, threats or attempts to undermine our security.
- To protect you and our business from criminal behaviour, including identity theft and fraud.
- To maintain administrative and statutory records about our business so we can meet our legal, contractual and tax obligations, including accident reporting.
Legitimate interests of the business
- To plan and manage our day-to-day business effectively, such as forecasting sales volumes so we hold enough stock to meet demand.
- To carry out focused market research based on trends and common factors, so we can improve our products and services.
- To assess whether our marketing and advertising spend represents good value.
- For other legitimate business purposes such as process improvement and risk management.
Email Newsletter
From time to time we like to send you an email newsletter about our products and services. You can subscribe at any time via our website. You can withdraw your consent in any of the ways set out in the "Your Rights Under the UK GDPR" section below, or by using the unsubscribe link in the footer of each email.
We cannot guarantee or verify the content of any externally linked website. If you click an external link, we are not liable for any damages or consequences arising from visiting it.
Social Media Platforms
Any communication, engagement or action on social media is subject to the terms and privacy policies of each platform. To protect your privacy, please use social media sites wisely. Other than to deal with a specific query or complaint — where we may ask for your name, order number and telephone number — we will never ask for your private personal information through social media. If you want to discuss private personal details, we are happy to help by phone or email.
We may use social-sharing buttons that let you share content from our pages to social media. You use these buttons at your own discretion, and the relevant platforms may track that activity.
Who We Share Your Personal Data With
We do not sell your personal data. We share it only with trusted service providers who help us run our store, each acting on our instructions under a data-processing agreement. Where a provider operates outside the UK, transfers are protected by appropriate safeguards (UK IDTA / Standard Contractual Clauses).
| Category of recipient | What they do |
|---|---|
| E-commerce platform & checkout provider | Hosts our online store and processes your order securely |
| Email & communications provider | Sends order updates and, where you've opted in, marketing emails |
| Product reviews provider | Collects and displays verified customer reviews |
| Website & behaviour analytics providers | Help us understand how visitors use our site (only with your consent) |
| Advertising & remarketing partners | Show you relevant ads (only with your consent) |
| Payment service providers & card networks | Process your payment securely (PCI-DSS compliant — we never store full card details) |
| Delivery & courier companies | Deliver your order (we share your name, address and contact number) |
| Professional advisers & authorities | Accountants, legal advisers, or regulators, where required by law |
We may also disclose information about you to law enforcement in the investigation of any alleged unlawful activity, or to a court or regulatory body where we are required to do so by law. If we ever sell or transfer part of our business, we may share your information with the organisation taking over the relevant service so they can continue to provide it on the same basis as us.
If you make a post on our website, such as a blog comment, we may share your username and the content of your post with other users of the website or in our marketing materials.
Where We Store Your Personal Data
Any personal details we collect about you are kept securely and in accordance with the UK GDPR and the Data Protection Act 2018. We will never sell or disclose your information to third parties for any purpose other than those described in this policy, or where required for legal reasons (for example, to comply with a legal process).
Your data is held on secure servers. Where you have chosen a password that lets you access certain parts of our website, you are responsible for keeping it confidential and must not share it with anyone.
Unfortunately, the transmission of information over the internet is never completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of data sent to our website, and any transmission is at your own risk. Once we receive your information, we use strict procedures and security features to try to prevent unauthorised access.
How Long We Keep Your Data
We will not keep your personal data for longer than necessary for the purpose it was collected, unless there is a further legal reason to retain it.
| Data | Retention |
|---|---|
| Order & transaction records | 6 years (UK tax / accounting law) |
| Customer account data | While active + up to 12 months after closure |
| Marketing contact data | Until you unsubscribe / withdraw consent |
| Website analytics | Up to 26 months |
| Support correspondence | Up to 3 years from last contact |
| Session recordings | Up to 12 months, then deleted |
| Cookie-consent records | Up to 3 years (proof of valid consent) |
At the end of each period, data is securely deleted or anonymised.
International Transfers
Some of the providers who help us run our business may process your personal data outside the UK. Where this happens, we make sure your data is protected by appropriate safeguards, such as the UK International Data Transfer Agreement (UK IDTA), the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries the UK government has deemed adequate. By using our services, you understand that your data may be processed in this way solely to fulfil our contract with you.
Your Rights Under the UK GDPR
References to the UK GDPR in this policy mean the UK's retained version of the General Data Protection Regulation that forms part of UK law under the European Union (Withdrawal) Act 2018, supplemented by the Data Protection Act 2018.
Under the UK GDPR you have the following rights over your personal data:
- Right of access — to ask for a copy of the personal data we hold about you (a subject access request). We may ask for proof of identity first. There is usually no fee, though in limited cases we may charge a reasonable administrative fee.
- Right to rectification — to ask us to correct inaccurate or incomplete personal data. We aim to do this within one month.
- Right to erasure — to ask us to delete your personal data (the "right to be forgotten") where there is no compelling reason for us to keep it. If an exception applies, we will explain why.
- Right to restriction — to ask us to limit how we use your data in certain circumstances, for example while we check its accuracy.
- Right to data portability — to receive the personal data you have given us, in a structured, commonly used and machine-readable format, where we process it by automated means based on your consent or a contract.
- Right to object — to object to our processing of your data, including processing for direct marketing and profiling.
- Right to withdraw consent — where we rely on your consent, you can withdraw it at any time. You can do this by updating your preferences, using the "unsubscribe" or "stop" option in our emails and texts, or by changing your cookie settings. Withdrawing consent does not affect processing carried out before you withdrew it.
In certain circumstances we can process your personal data without your consent, in line with the lawful bases in the UK GDPR — for example where processing is necessary to comply with a legal obligation or to protect someone's vital interests.
How to exercise your rights: email sales@atomled.co.uk. We respond within one month.
Your Right to Complain to the ICO
If you have a concern about how we handle your personal data, please contact us first at sales@atomled.co.uk and we will do our best to put things right — we respond within one month.
If you are still unhappy, you have the right to complain to the UK's data-protection regulator:
- Information Commissioner's Office (ICO)
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Links to Other Websites
Our site may contain links to and from the websites of third parties, advertisers and affiliates. These websites have their own privacy policies, and we do not accept any responsibility or liability for them. Please check those policies before submitting any personal data to them.
Changes to Our Privacy Policy
Any changes we make to this Privacy Policy in the future will be posted on this page. Please check back regularly to see any updates.
Cookies
We use cookies and similar technologies to make our website work, to remember your preferences, to understand how the site is used, and — where you have given consent — for analytics and advertising. You can manage your preferences at any time through your browser settings or our cookie-consent tool. For full details of the cookies we use and what they do, please see our Cookies Policy or contact us at sales@atomled.co.uk.
Contact and Complaints
If you have any questions, comments or requests about this Privacy Policy, please contact us:
- Email: sales@atomled.co.uk
- Phone: 01952 370028
- Postal address: ATOM LED Lighting Ltd, Unit D4, Stafford Park 4, Telford, Shropshire, TF3 3BA