1. Policy statement
Atlas Translations is committed to protecting the privacy and personal data of all individuals we interact with, including clients, suppliers, employees, and website users. We process personal data in accordance with applicable data protection legislation, including the UK GDPR and Data Protection Act 2018.
2. Purpose
This policy outlines how Atlas Translations collects, processes, stores, and protects
personal data.
3. Scope
This policy applies where Atlas Translations acts as a data controller in relation to personal data.
4. Types of personal data collected
We may collect and process the following categories of personal data:
- Contact data (e.g. name, email, phone number)
- Account data
- Transaction and financial data
- Communication data
- Usage data (e.g. website analytics)
5. How we collect data
Personal data may be collected:
- Directly from individuals
- Via our website and forms
- Through communications and business relationships
- Through third-party systems where appropriate
6. Purposes and legal basis for processing
We process personal data for the following purposes:
- Delivering services and managing contracts
- Communication and relationship management
- Billing, accounting, and administration
- Marketing (where consent or legitimate interest applies)
- Improving services and analysing usage
- Legal compliance and risk management
Processing is carried out on appropriate legal bases, including:
- Contractual necessity
- Legitimate interests
- Consent (where required)
- Legal obligations
7. Data security and storage
Atlas Translations takes appropriate technical and organisational measures to protect personal data from unauthorised access, loss, or misuse. Data is stored securely using appropriate systems and access controls.
8. Data sharing
We may share personal data with:
- Service providers and suppliers
- Payment providers
- Professional advisors
- Regulatory bodies where required
We do not sell personal data.
9. International transfers
Where personal data is transferred internationally, appropriate safeguards are in place in accordance with data protection legislation.
10. Data retention
Personal data is retained only for as long as necessary, including for legal, accounting,
and operational purposes. Typical retention periods are aligned with legal and business requirements (e.g. up to 6
years for financial records).
11. Individual rights
Individuals have rights under data protection law, including:
- Access to their data
- Correction of inaccurate data
- Erasure (where applicable)
- Restriction of processing
- Objection to processing
- Data portability
Requests will be handled in accordance with legal requirements.
12. Reporting Concerns
Any data protection concerns or requests should be directed to: Clare Suttie at clare@atlas-translations.co.uk
Individuals also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
13. Policy review
This policy is reviewed periodically to ensure compliance with legal and business requirements.
14. Policy information
Policy owner: Clare Suttie
Last reviewed: 25 March 2026
Next review due: March 2027