Privacy Notice

Last Updated: March 30, 2026

Attalon is committed to protecting personal data and handling it in compliance with applicable laws, including U.S. privacy laws and the U.K. General Data Protection Regulation (GDPR).

This privacy Policy (the “Policy”) applies to the personal data that Attalon collects from:

  • Visitors to our website and users of our online services;
  • Current, former, and prospective customers, vendors, and partners;
  • Individuals who subscribe to our communications; and
  • Individuals who interact with us in connection with our business.

Personal Data (“Data”) means any information that can identify directly or indirectly identify a person such as a person’s name, ID numbers, location information, online identifiers. It is the Data used to determine the identity of a person.

This Policy does not cover Data collected from employees, job applicants, or information exempt under applicable privacy laws. Attalon may provide additional notices for certain Data processing activities. Use of our website (“Site”), and any dispute over privacy, is subject to this Policy and our applicable terms of service.

1. Data Attalon Collects

The Data we collect depends on your interactions with us and may include:

Data you provide:

  • Communication Data: Contact details and the content of communications with us. Calls may be recorded where permitted.
  • Transaction Data: Name, billing, and shipping information, payment details, and related information.

Data collected automatically:

  • Device and browser Data: IP address, general location, device identifiers, browser type, operating system, and similar technical information.
  • Usage Data: Pages visited, links clicked, search activity, time spent on the Site, and email engagement indicators.

Data from third parties:

  • Social networks that you use to connect with us (subject to their privacy policies).
  • Prospective customer information from third-party sources and Data providers.

We may use aggregate and de-identified Data for business and analytical purposes.

2. Legal Bases for Processing

Certain Data protection laws, including the GDPR, require that Attalon informs you of the legal bases for our processing of your Data. Attalon processes your Data under the following legal bases:

  • Performance of a contract: To provide products or services or take steps at your request.
  • Compliance with legal obligations: To meet regulatory or statutory requirements.
  • Legitimate interests: To operate, improve, and protect our business, provided these interests do not override your rights.
  • Legal Claims: To establish, exercise, or defend legal rights.  
  • With your consent: When required for certain activities, such as direct marketing in specific jurisdictions.

3. Purposes of Processing

We process Data for the following purposes:

  • Services and support: Operating our Site, responding to inquiries, fulfilling orders.
  • Communications: Sending service updates, product information, newsletters, and other relevant communications.
  • Research and analytics: Improving our Site, services, and customer experience.
  • Personalization: Tailoring Site content and communications.
  • Marketing and advertising: Promoting our products and services, subject to consent where required.
  • Legal and compliance: Meeting legal requirements, managing risk, and protecting our rights.
  • Security and fraud prevention: Protecting our systems, detecting misuse, and routine administrative functions.
  • Business Operations: Supporting mergers, acquisitions, reorganizations, and routine administrative functions.

We also may use aggregated and de-identified Data for analytics and other internal purposes.

4. Disclosure of Data

At times, we may disclose Data to third parties as follows:

  • Processors and service providers: We share Data with third-party providers that perform services on our behalf, such as technical support, payment processing, analytics, and other work that we may need to outsource. These vendors are contractually required to protect Data, implement appropriate security measures, and process Data only in accordance with our instructions.
  • Vendors and business partners: We may disclose Data to companies that provide services directly related to our business operations, such as insurers, payment processors, and financial institutions. These entities act as independent controllers and determine their own processing purposes in accordance with applicable law.
  • Marketing, advertising, and analytics providers: We may provide certain information, including your Data, to third-party advertising networks, sponsors, and analytics providers to measure and improve the effectiveness of our marketing efforts. For additional details, see Section 5 below.
  • Legal and compliance purposes: We may disclose Data to comply with legal obligations, regulatory requirements, or lawful requests, and as necessary for legal proceedings or administrative processes.
  • Business transactions: Data may be disclosed in connection with corporate transactions such as mergers, acquisitions, restructurings, or transfers of assets. This may include disclosures to potential buyers and their advisors for due diligence purposes, where permitted by law.
  • Security and protection of rights: We may disclose Data to protect the safety, rights, and security of individuals, uphold our terms of use, prevent fraud or unauthorized activity, or respond to claims. Disclosure may also be necessary to protect Attalon’s business interests

We may share aggregated or de‑identified information for business or analytical purposes, consistent with applicable law.

5. Cookies, Advertising, and Tracking

We and our third-party providers use cookies, pixel tags, JavaScript, local storage, log files, and similar technologies to collect information about your browsing activity and use of our Site. We may combine this specific usage Data with other Data we collect about you.

  • Cookies: Cookies are small text files stored on your device to support Site functionality, facilitate navigation, enable faster login, and track Site usage. Most browsers accept cookies by default, but you can modify your browser settings to block or delete them. Certain features of our Site may not function properly if cookies are disabled.
  • Pixels and similar technologies: Pixel tags and clear GIFs are embedded on web pages and in emails to track user interactions, manage content, and compile statistics. We may use these tools to understand how users engage with our emails, including whether messages are opened or forwarded.

Advertising and targeting. We work with third‑party advertising networks and analytics providers to personalize content and deliver advertising on our Site and third‑party platforms. These partners may collect information such as IP address, device identifiers, cookie IDs, and browsing activity to deliver more relevant ads and measure campaign effectiveness.

Managing your preferences. You may manage your cookie preferences through your browser settings or via our Cookie Preferences Tool, accessible through the “Cookie Preferences” link (or “Do Not Sell or Share My Personal Information” for California residents) on our Sites. Preferences must be set separately for each device and browser. Opting out of targeted cookies does not eliminate all advertising; you may continue to receive non‑personalized ads.

Third-Party Analytics. We may use analytics tools, such as Google Analytics, to understand usage patterns and improve our Site. These tools use cookies and similar technologies. For more information, including opt‑out options, please review Google’s Privacy Policy and available browser add‑ons.

Do Not Track (DNT). Our Site currently does not respond to “Do Not Track” signals. You may, however, disable certain tracking mechanisms in the cookie preference settings of your web browser and opt-out of certain third-party ad cookies on our Site.

6. International Transfers of Information

We and our service providers may transfer or access Data in jurisdictions, including the United States, that may not provide the same level of Data protection as your home jurisdiction. We implement safeguards, such as appropriate contractual terms and Data transfer mechanisms, to ensure adequate protection of Data processed in these locations.

European Economic Area (EEA) and United Kingdom (UK) transfers. If you are located in the EEA, UK, or Switzerland, and your Data is transferred to a “third country” without an adequacy decision, we use European Commission-approved Standard Contractual Clauses or other lawful mechanisms to protect your information.

Some cookies and tracking tools used on our Site rely on U.S. (or other non-EU) service providers. By consenting to these tools, you also consent to any associated Data transfers as permitted under GDPR Article 49(1). You may avoid these transfers by declining such cookies in our cookie banner or adjusting your preferences at any time.

7. Third-Party Links and Services

Our Sites may contain links to third‑party websites, including social networking platforms. These websites operate independently of Attalon, and we are not responsible for their privacy practices, content, or availability. Any interactions with these third‑party websites are governed by their respective privacy policies, and we encourage you to review them carefully. Attalon is not liable for any loss or damage arising from your use of or reliance on content, products, or materials available through third‑party websites.

8. Retention of Data

We retain Data for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, regulatory, or operational requirements. We may also retain Data as needed to establish, exercise, or defend legal claims.

9. Your privacy rights and choices

You have several rights regarding our collection and use of your Data.

Access, Deletion, and Correction. You may request access to, correction of, or deletion of your Data by sending an email to privacy@atln.com. We may request additional information to verify your identity and will process requests in accordance with applicable law.

Direct Marketing. You may opt-out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us. Transactional or service-related communications may continue as permitted by law. Where required (including in China, South Korea, and Vietnam), we send direct marketing only on an opt‑in basis

Cookie and Ad Preferences. You may adjust preferences for cookies and targeted advertising via our Cookie Preferences Tool, available through the “Cookie Preferences” or “Do Not Sell or Share My Personal Information” links on our Site.

10. Security

We implement physical, technical, and organizational safeguards to protect Data. However, no security measures are completely foolproof, and we cannot guarantee absolute security.

11. Privacy of Children

Our Site is not intended for children under 16, and we do not knowingly collect Data from individuals in this age group. If you believe we have collected such Data, please contact us so we can delete it.

12. Changes and Updates to this Privacy Policy

This Policy is current as of the “Last Updated” date. We may update it periodically and will post revisions on our Site. If changes materially affect how we handle previously collected Data, we will provide advance notice through our Site or electronic communication. Where required by law, we will obtain your consent to these changes.

13. Contact Details

If you have questions about this Policy or wish to exercise any of your rights, please contact us at privacy@atln.com.

14. Additional Information for individuals in certain jurisdictions

Certain privacy laws provide individuals with additional rights and disclosures. This section supplements the information in this Policy for individuals located in jurisdictions with enhanced privacy protections, including California, the EEA, the UK, South Korea, Vietnam, and the People’s Republic of China (PRC).

Depending on your jurisdiction, you may have rights related to the processing of your Data, such as:

  • the right to access your Data;
  • the right to correct inaccurate or incomplete Data;
  • the right to request deletion;
  • rights related to the processing or sharing of Data for targeted advertising or direct marketing; and
  • additional rights defined under local law.

To exercise these rights, please contact us at privacy@atln.com. We will process your request in accordance with applicable legal requirements and may request additional information to verify your identity.