Privacy policy

Privacy Policy

Last updated: July 22, 2026

Atlas Boy is operated by Yes Be Fab LLC, DBA Atlas Boy, 228 Park Ave S, PMB 982065, New York, NY 10003 (“Atlas Boy,” “we,” “us”). This policy explains what personal information we collect through atlasboy.studio (the “Site”), how we use it, who we share it with, and the choices and rights you have. It applies to the Site, our checkout, our marketing (email and, where you have separately consented, text messages), and our advertising.

If anything here is unclear, write to us at hello@atlasboy.studio. We answer.

1. Information we collect

Information you give us.

Orders and pre-orders: name, email, shipping and billing address, phone number if provided, and payment details (processed by our payment providers — we never see or store full card numbers).
List signups: your email and first name, and — only if you choose to share it and tick the consent box — your phone number for text updates.
Lead ads: if you submit one of our sign-up forms on Instagram or Facebook, the name, email, and phone number you submit there.
Correspondence: anything you send us by email, including returns requests.

Information collected automatically. When you use the Site we and our service providers collect device and usage information: IP address, browser and device type, pages viewed, referring pages, and interactions with the Site, using cookies and similar technologies. See our Cookie Policy for the specifics and your choices, including the consent banner.

Information from others. We receive information from Shopify (which powers our store), payment processors (payment confirmation and fraud signals), shipping carriers (delivery status), advertising platforms such as Meta (campaign interactions and lead form submissions), and analytics providers.

2. How we use it

To take, fulfill, and deliver orders and pre-orders, process payments and returns, and provide customer service.
To send you the newsletter and offers you signed up for, including your welcome offer.
To send text messages only where you have separately and explicitly consented; reply STOP at any time to end them.
To operate, secure, and improve the Site, prevent fraud and abuse, and understand how the Site is used.
To advertise, including measuring campaigns and building audiences, where permitted and subject to your cookie choices.
To comply with law, enforce our Terms, and protect our rights.

Where EU or UK law applies, we rely on: performance of a contract (orders), consent (marketing email, texts, non-essential cookies — withdrawable at any time), legitimate interests (site security, fraud prevention, basic analytics), and legal obligation (tax and accounting records).

3. Who we share it with

We do not sell your personal information for money. We share it only with:

Shopify, which hosts our store, processes orders, and stores our customer list;
Payment processors (such as Shopify Payments and the wallets offered at checkout) to take payment and screen fraud;
Shipping and fulfillment partners to deliver your order;
Email and messaging providers to send the communications described above;
Advertising platforms (such as Meta) for campaign measurement and audiences — under US state privacy laws this kind of disclosure can count as “sharing” for targeted advertising, and you can opt out (section 7);
Analytics providers to understand Site usage;
Professional advisers and authorities where the law requires it, and a buyer or successor if our business is ever sold or reorganized (your data stays protected by this policy).

Service providers may use your information only to provide their services to us.

4. Cookies

The Site uses cookies and similar technologies. Essential cookies keep the shop working (cart, checkout, security) and cannot be switched off. Analytics and marketing cookies are used according to the choice you make in our cookie banner, and you can change that choice at any time. Full details, including a list of cookies: Cookie Policy.

5. Your choices

Email: unsubscribe via the link in any marketing email, or write to us. Transactional emails about your orders are sent regardless.
Texts: reply STOP to any message. Consent to texts is never a condition of buying anything.
Cookies: use the cookie banner, the Cookie preferences link in the Site footer area of our Cookie Policy, or your browser settings.
Accuracy: ask us to correct anything we hold about you.

6. Your rights in the EEA and UK

If you are in the European Economic Area or the United Kingdom you have the right to access, correct, delete, and receive a copy of your personal data; to object to or restrict processing; and to withdraw consent at any time without affecting prior processing. Write to hello@atlasboy.studio and we will respond within one month. You also have the right to complain to your data protection authority. Our services are provided from the United States; where we transfer your data here, we rely on recognized safeguards such as standard contractual clauses through our processors.

7. Your rights in US states

Depending on your state (including California, Colorado, Connecticut, Virginia, and others), you may have the right to know what personal information we hold about you, to access it, to correct it, to delete it, to receive it in a portable form, and to opt out of targeted advertising or the “sale” or “sharing” of personal information. We do not knowingly sell personal information for money and we do not use or disclose sensitive personal information for purposes requiring a right to limit. To exercise any right — including opting out of targeted-advertising sharing — email hello@atlasboy.studio with the subject “Privacy request,” or use the cookie banner to decline marketing cookies. We honor Global Privacy Control signals through our platform’s consent tools. We will never discriminate against you for exercising a privacy right, and we will verify requests using the email associated with your records. You may use an authorized agent where your state provides for one.

8. Retention

We keep order records for as long as tax, accounting, and consumer-protection law requires; marketing records until you unsubscribe or ask us to delete them; and correspondence for as long as needed to resolve the matter. When data is no longer needed, we delete or de-identify it.

9. Security

The Site runs on Shopify’s PCI-DSS compliant infrastructure over encrypted connections. No method of transmission or storage is perfectly secure, but we limit access to personal information to what each provider needs to do its job.

10. Children

The Site is not directed to children and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.

11. Changes

We may update this policy as our practices or the law change. The date at the top tells you when it last moved. Material changes will be flagged on the Site.