Privacy Policy
Atomweb — WooCommerce Maintenance & Care Plans. Last updated: August 2, 2026.
This policy explains what personal information we collect, why we collect it, and what rights you have over it.
1. Who we are
Eliana Alexandra Alvarado Guillén, trading as Atomweb, located at Bellavista y Galo Plaza Lasso, B12, Quito, Ecuador, is the data controller responsible for the information described in this policy.
Contact for any privacy matter: info@atom-web.com
2. Information we collect
a) Website visitors. Basic technical data collected automatically: IP address, browser and device type, pages visited, referring site, and approximate location (country/city level). This comes from analytics cookies — see section 9.
b) Free store audit requests. The name, email address and store URL you submit in the audit form, plus the technical information about your website that we gather from publicly accessible sources and analysis tools.
c) Clients. Name, business name, billing details, email address, phone number (optional), time zone, and correspondence with us. Payment card details are never collected or stored by us — see section 4.
d) Access credentials. To perform maintenance, we hold administrator access to your website and, where applicable, access to your hosting account and license/vendor accounts you provide.
e) Data on your website (important). While maintaining your store, we necessarily have technical access to the personal data your store holds about your customers (names, addresses, order history). Regarding that data we act as a data processor on your behalf: we access it only when strictly necessary for a maintenance task, we never copy, export, sell or use it for our own purposes, and we never contact your customers. A Data Processing Agreement (DPA) is available on request.
3. Why we use your information and legal bases
| Purpose | Legal basis |
|---|---|
| Providing and administering the services you purchased | Performance of a contract |
| Sending the free audit report you requested | Your consent / steps prior to a contract |
| Billing, invoicing and tax records | Contract and legal obligation |
| Support communication and service reports | Performance of a contract |
| Security, fraud prevention and backups | Legitimate interest |
| Occasional service-related updates by email | Legitimate interest (you can opt out anytime) |
We do not sell your personal information, we do not share it for advertising, and we do not use it to train any automated profiling system.
4. Payments
Payments are processed by 2Checkout (Verifone), our authorized reseller and payment processor. Your full card number and security code are entered on their secure systems and are never visible to or stored by us. We only receive confirmation of payment, the order reference and the billing information necessary for invoicing. 2Checkout handles that data as an independent controller under its own privacy policy.
5. Who we share information with (sub-processors)
We share the minimum data necessary with the service providers below. We do not sell data to anyone.
| Provider | Purpose | Data involved |
|---|---|---|
| 2Checkout (Verifone) | Payment processing and subscription management | Billing and contact data |
| Webmail | Business email and document storage | Correspondence, client records |
| Google Analytics | Website statistics | Visitor technical data |
| UpdraftPlus + Google Drive | Website backups | Full copies of your website, which may include your customers’ data |
| MainWP | Site management, updates and monitoring | Technical site data |
| UptimeRobot | Uptime monitoring | Site URL and availability data |
| Clockify | Time tracking for plan hours | Client name and task descriptions |
| Fluent Forms | Contact and onboarding forms | Data you submit in forms |
We may also disclose information when legally required by a competent authority.
6. How we protect your information
Access credentials are stored in an encrypted password manager, protected by two-factor authentication. Credentials are shared only through secure, expiring links — never in plain email. Backups are stored in access-restricted, off-site storage. Only [Your Name] has access to client systems; we do not subcontract work without informing you first.
If a security incident affects your personal data, we will notify you without undue delay and, where required, within 72 hours of becoming aware of it.
7. How long we keep it
| Data | Retention |
|---|---|
| Free audit leads (no purchase) | 12 months, then deleted |
| Client account and correspondence | Duration of service + 24 months |
| Invoices and tax records | As required by law 7 years |
| Website backups | 30 days rolling; deleted 30 days after cancellation |
| Access credentials | Deleted within 7 days of cancellation |
| Analytics data | 14 months |
8. International transfers
We operate from Ecuador and serve clients in the United States, Canada and Europe. Your information may therefore be processed outside your country of residence. Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses, and our providers maintain their own compliance frameworks.
9. Cookies
Our website uses:
Essential cookies — required for the site and forms to work.
Analytics cookies — [Google Analytics], to understand how visitors use the site. These are only set with your consent through our cookie banner.
You can refuse or delete cookies through our banner or your browser settings; essential cookies cannot be disabled without affecting site functionality.
10. Your rights
Depending on where you live, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion; object to or restrict certain processing; receive your data in a portable format; withdraw consent at any time; and not be discriminated against for exercising these rights.
California residents (CCPA/CPRA): we do not sell or share personal information as those terms are defined by law, and we have not done so in the preceding 12 months.
To exercise any right, email info@atom-web.com. We respond within 30 days. You also have the right to complain to your local data protection authority.
11. Children
Our services are for businesses and are not directed to anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
12. Changes to this policy
We may update this policy. The “last updated” date above always reflects the current version, and material changes are communicated to active clients by email at least 30 days in advance.
13. Contact
Eliana Alexandra Alvarado Guillén — Atomweb
Bellavista y Galo Plaza Lasso, B12, Quito, Ecuador.
Email: info@atom-web.com]