Privacy policy

PRIVACY POLICY

Last updated: 19 February 2026

This Privacy Policy explains how ATLAS NUTRITION LTD trading as “Tumble” (Company Number 15853999) (“we”, “us” or “our”) collects, uses, discloses and protects personal data when you visit our website, place an order, subscribe to recurring deliveries, request refunds, or otherwise interact with us within the United Kingdom.

ATLAS NUTRITION LTD is registered in England and Wales with its registered office at Berwyn, Manchester Road, Sway, Hampshire, SO41 6AS. For the purposes of UK data protection law, we act as the data controller. Privacy enquiries may be directed to tumble.bio@gmail.com.

PERSONAL DATA WE COLLECT

We collect and process only the personal data necessary to operate our business and provide our services. This may include identity and contact information such as your name, billing address, delivery address, email address and telephone number; transaction data including order details, subscription selections, payment confirmations, returns, refunds and purchase history; account data where you create an account; communications you send to us including customer support queries and refund information; and technical or usage data such as IP address, browser type, device information and how you interact with our website.

Where you consent to non-essential cookies, we may also collect limited analytics and advertising data through services such as Google Ads, Google Analytics and Meta advertising tools. We do not intentionally collect health or medical information and customers should not include medical details in refund forms or general communications.

HOW WE COLLECT PERSONAL DATA

Personal data is collected directly from you when you place an order, subscribe to recurring deliveries, contact us, or interact with our website. Certain technical information is collected automatically through cookies and similar technologies. We also receive necessary information from service providers including Shopify (our ecommerce platform), payment processors, Amazon fulfilment services and advertising platforms in order to operate our business effectively.

HOW WE USE YOUR PERSONAL DATA

We process personal data under the lawful bases provided by UK data protection legislation. Where processing is necessary to perform a contract, we use your identity, contact and transaction data to process payments, manage subscriptions through our subscription provider, dispatch products via Amazon fulfilment, provide customer support and administer returns or refunds. We retain certain financial and transaction records to comply with legal obligations including tax and accounting requirements. We process data under legitimate interests to operate, secure and improve our website and services, prevent fraud, investigate misuse of refund policies, manage disputes and defend legal claims, provided such interests are not overridden by your rights and freedoms. Where required, we rely on your consent for non-essential cookies and specific marketing communications.

We apply the principle of data minimisation and only collect personal data that is reasonably necessary for these purposes. Where you do not provide information required to perform a contract, such as payment or delivery details, we may be unable to complete your order or provide subscription services.

MARKETING

Where you subscribe to marketing communications, we may send promotional emails based on your consent. In certain circumstances permitted under UK law, we may rely on the “soft opt-in” rule to send marketing relating to similar products following a purchase, provided you are given a clear opportunity to opt out. You may withdraw consent or unsubscribe at any time using the link provided in marketing emails or by contacting tumble.bio@gmail.com.

We may use advertising platforms such as Google and Meta to deliver relevant advertising where consent has been provided for marketing cookies.

COOKIES

Our website uses essential cookies necessary for website functionality, security and checkout processes. Non-essential cookies, including analytics and advertising cookies, are used only where you provide consent through our cookie banner or preferences tool. You may manage cookie preferences through the website settings or your browser. Withdrawal of consent does not affect processing carried out before consent was withdrawn.

HOW WE SHARE PERSONAL DATA

We share personal data only where necessary to operate our business. This includes sharing relevant information with Shopify to host and manage our store; payment processors such as Shopify Payments and PayPal to process transactions; Amazon fulfilment services for storage, picking, packing and dispatch of orders; our subscription provider for recurring billing management; advertising and analytics providers where enabled; and professional advisers or regulatory authorities where required by law.

We do not sell personal data to third parties.

INTERNATIONAL TRANSFERS

Some service providers may process personal data outside the United Kingdom. Where international transfers occur, we ensure appropriate safeguards are in place in accordance with UK GDPR, including the use of UK-approved Standard Contractual Clauses or transfers to jurisdictions recognised as providing adequate protection.

AUTOMATED PROCESSING

We may use automated systems to help detect fraudulent transactions, prevent abuse of refund policies and protect the integrity of our services. We do not make decisions that produce legal or similarly significant effects solely by automated means without appropriate safeguards.

DATA RETENTION

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy. Order and financial records may be retained for up to six years in order to comply with UK tax and accounting obligations. Subscription data is retained for the duration of the subscription and for a reasonable period thereafter to manage billing, cancellations and disputes. Marketing data is retained until you withdraw consent or unsubscribe.

LEGAL CLAIMS AND BUSINESS TRANSFERS

We may retain and process personal data where necessary to establish, exercise or defend legal claims, including disputes and chargeback investigations. In the event that our business is sold, reorganised or transferred, personal data may be transferred as part of that transaction subject to appropriate safeguards.

SECURITY

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration or disclosure. Payments are processed securely through third-party payment providers and we do not store full payment card details on our own systems. However, no internet transmission can be guaranteed to be completely secure.

YOUR RIGHTS

Under UK GDPR, you have rights including access to the personal data we hold about you, correction of inaccurate data, erasure in certain circumstances, restriction or objection to certain processing, data portability where applicable, and withdrawal of consent where processing is based on consent. Requests may be made by contacting tumble.bio@gmail.com. We may require reasonable information to verify your identity before responding and aim to respond within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office at www.ico.org.uk.

CHILDREN

Our website and products are not directed at individuals under 16 years of age and we do not knowingly collect personal data from children.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect operational, legal or regulatory changes. The most current version will always be available on this page.

EFFECTIVE DATE OF PRIVACY POLICY: 19/02/2026