Privacy Policy

FormForge Design, registered in [Jurisdiction] under company number [Company Registration Number], with its registered office at [Registered Address], acts as data controller for the personal data described in this policy. Enquiries may be directed to webmaster@getatlasa.shop.

• Enquiry data: name, work email, company, product category, and the content of the brief you submit through our contact form or by email.
• Engagement data: contact details of named client personnel, correspondence, meeting notes, and billing information required to perform a design contract.
• Technical data: IP address, browser type, device type, referring URL, and pages viewed, collected through server logs and any analytics tooling described in section 7.

We do not knowingly collect special category data, and we ask that you do not include such data in project briefs.

• To respond to enquiries and prepare proposals — legitimate interests in operating a consultancy and steps taken at your request prior to entering a contract.
• To deliver contracted design services and manage the engagement — performance of a contract.
• To issue invoices and maintain accounting records — legal obligation under [Jurisdiction] tax law.
• To secure and improve this website — legitimate interests in maintaining a functional, safe service.
• To send occasional studio updates where you have opted in — consent, withdrawable at any time.

Product concepts, specifications, supplier identities, and material data shared with us are treated as confidential information under the applicable engagement agreement or mutual non-disclosure agreement. Access is limited to named team members assigned to the program. Physical samples are stored in secured studio facilities and digital files in access-controlled repositories.

We share personal data only with:

• Service providers acting as processors — email hosting, cloud file storage, accounting, and website hosting — bound by written data processing terms.
• Manufacturing and testing partners, where necessary to deliver an engagement and permitted by the client contract.
• Professional advisers, auditors, or authorities where required by law or to establish or defend legal claims.

We do not sell personal data or share it for third-party advertising.

FormForge operates studios in more than one country, and certain providers process data outside [Jurisdiction]. Where data is transferred internationally, we rely on an adequacy decision or on [Standard Contractual Clauses / Transfer Mechanism] together with supplementary technical measures. A copy of the relevant safeguard is available on request.

This website uses strictly necessary cookies required for delivery and security. Where analytics or preference cookies are used, they are set only after consent is given through the cookie notice, and consent may be withdrawn by clearing cookies in your browser or contacting us. Details of the specific cookies in use are maintained in our cookie register at [Cookie Register Reference].

Enquiry data is retained for 24 months from last contact unless an engagement begins. Engagement records and correspondence are retained for the duration of the contract plus [Retention Period] years. Accounting records are retained for the statutory period required in [Jurisdiction]. Confidential client materials are returned or destroyed on request in accordance with the engagement agreement.

Subject to the law of [Jurisdiction], you may request access to your personal data, its correction or erasure, restriction of or objection to processing, and portability, and you may withdraw consent where processing relies on it. To exercise a right, email webmaster@getatlasa.shop. We respond within [Statutory Response Period] days. You may also lodge a complaint with the supervisory authority [Supervisory Authority Name].

We apply access control, encryption in transit, endpoint protection, and role-based permissions to systems holding personal and confidential data. No system is entirely secure; if a breach affecting your rights occurs, we notify affected parties and the relevant authority as required by law.

We may update this policy to reflect changes in our practices or legal obligations. The revision date at the top of the page indicates the current version. Material changes affecting active clients will be communicated directly.