Privacy Policy
Last updated: June 8, 2026
Overview
At Atumcell (atumcell.com), your privacy matters. This policy explains what personal data we collect, why we collect it, how long we keep it, and what rights you have. If you have questions, contact us at v.depertis@atumcell.com.
Your Rights (GDPR / EEA)
If you are in the European Economic Area (EEA) or UK, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (right to erasure)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, email v.depertis@atumcell.com. We will respond within 30 days.
Legal Basis for Processing (GDPR Art. 6)
We only process personal data where we have a lawful basis to do so:
| Processing Activity | Legal Basis |
|---|---|
| Contact form submissions | Legitimate interest (Art. 6(1)(f)) — responding to business enquiries |
| Newsletter / marketing emails | Consent (Art. 6(1)(a)) — you tick an explicit opt-in checkbox |
| Analytics cookies (GA4, Ahrefs, Clarity) | Consent (Art. 6(1)(a)) — via the cookie banner |
| Performance measurement (Vercel Speed Insights) | Consent (Art. 6(1)(a)) — via the cookie banner |
| SpoofCheck PDF report delivery | Contract / consent (Art. 6(1)(b)/(a)) — you request the report and provide your email |
| Service delivery (AtumSeal, SpoofCheck) | Legitimate interest / contract (Art. 6(1)(b)/(f)) |
Data Retention
| Data Type | Retention Period |
|---|---|
| Contact form submissions | 6 months from receipt |
| Newsletter email addresses | Until you unsubscribe |
| GA4 analytics data | 14 months (Google's default retention) |
| Microsoft Clarity session data | 30 days |
| SpoofCheck report request (name + email) | 60 days, then deleted |
| Cookie consent preference | 1 year from last update, stored in your browser |
Cookie Policy
Cookies are small files stored in your browser. We use three categories:
Necessary cookies
Always active — required for the site to function. Cannot be disabled.
| Name | Purpose | Retention |
|---|---|---|
| atumcell_cookie_consent | Stores your cookie consent choices | 1 year |
Analytics cookies
Only loaded with your explicit consent. Help us understand how the site is used.
| Provider | Cookies | Purpose | Retention |
|---|---|---|---|
| Google LLC (GA4) | _ga, _ga_* | Measures visits, sessions, traffic sources | 14 months |
| Ahrefs.com | ahrefs_* | SEO analytics — referral and search traffic | Session / 30 days |
| Microsoft (Clarity) | _clck, _clsk, MUID | Session recording and heatmaps (anonymised) | 30 days |
Performance cookies
Only loaded with your consent. Measure page load performance.
| Provider | Purpose | Retention |
|---|---|---|
| Vercel Inc. (Speed Insights) | Measures Core Web Vitals (LCP, CLS, INP) — no personal data | Session |
You can change your cookie preferences at any time using the link in the site footer.
Sub-processors
We use the following trusted third-party services to process data on our behalf. Each is bound by a Data Processing Agreement and applicable data protection law.
| Sub-processor | Purpose | Location |
|---|---|---|
| Google LLC (GA4) | Website analytics | USA (EU SCCs apply) |
| Microsoft Corp. (Clarity) | Session recording, heatmaps | USA (EU SCCs apply) |
| Ahrefs Pte. Ltd. | SEO analytics | Singapore / USA |
| Vercel Inc. | Website hosting, performance monitoring | USA (EU data residency available) |
| Resend Inc. | Transactional email delivery | USA |
Log Files
Our hosting provider (Vercel) collects standard server log data: IP addresses, browser type, ISP, date/time stamps, and referring pages. This data is used solely for security and infrastructure purposes, is not linked to personally identifiable information, and is retained for 30 days.
Children's Information
Atumcell does not knowingly collect personal data from children under 13. If you believe your child has provided us with personal information, contact us at v.depertis@atumcell.com and we will delete it promptly.
US Privacy Rights (CCPA)
If you are in the United States, you may have rights under applicable state privacy laws (CCPA, VCDPA, and others) to access, correct, or delete personal data we hold. To exercise these rights, contact sales@atumcell.com.
Scope
This policy applies only to our website (atumcell.com) and online interactions. It does not cover information collected offline or through other channels.
Contact
Data controller: Atumcell Inc., 26 Stetson Street, Brookline, MA 02446, USA.
Privacy queries: v.depertis@atumcell.com