Clear information about how we handle personal data.

Pimlico Solutions Ltd, company number 16505294, is the controller for the Atlas public website and for its own sales, account, security and business operations. Our registered office is 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

When a customer uses Atlas to process customer content, that customer normally decides why and how the personal data is used. We act as its processor under the applicable agreement and data-processing terms. Your organisation's own privacy information may therefore apply as well.

Where it comes from

We receive information directly from you, from customer workspace owners and administrators, automatically when Atlas or the website is used, from service providers acting for us, and from public or business sources where relevant to a legitimate business relationship.

What you need to provide

Fields marked as required are needed to create or secure an account, respond to an enquiry, enter into an agreement or provide the requested service. If that information is not provided, we may be unable to complete the relevant request. Other information is optional unless we explain otherwise when it is collected.

We use personal data only for defined purposes and rely on the legal basis that fits each purpose. Where we rely on legitimate interests, those interests include operating a secure service, supporting customers and running an effective business without overriding your rights.

We may send relevant business communications where permitted by law. You can opt out of direct marketing at any time without affecting service messages.

We share personal data only where needed to provide and protect Atlas, follow a customer's instructions, obtain professional advice, comply with law, or manage a genuine corporate transaction. Recipients may include your organisation, authorised users, our service providers, professional advisers, insurers, auditors, payment providers and public authorities where legally required.

The providers used for a particular customer can vary with the contracted configuration. Contractual provider and subprocessor information is available during procurement and under the applicable agreement.

Some providers operate in more than one country. Where personal data is transferred outside the UK, we use the safeguard appropriate to the transfer, such as UK adequacy regulations or recognised contractual safeguards. You can contact us for information about the safeguard relevant to your data or service configuration.

We retain information only for as long as needed for the purpose for which it was collected. We consider the customer agreement, account status, security and audit needs, support history, legal limitation periods and statutory record-keeping duties. Customer-specific retention and deletion commitments are set out in the applicable agreement or data-processing terms.

We may keep a limited record after deletion where necessary to demonstrate compliance, resolve disputes, prevent abuse or meet a legal obligation.

Atlas may use approved third-party model providers for specific features, depending on the customer configuration and applicable terms. The provider, model and data arrangement are part of that configured service boundary. Pimlico does not use customer content to train a shared foundation model for other customers. A custom LLM service is separately scoped, including its approved data, model, access and retention arrangements.

Atlas supports research and workflow decisions; it is not designed to make solely automated decisions about individuals that produce legal or similarly significant effects. Customers remain responsible for their decisions and for giving any additional notice required by their use of Atlas.

Depending on the law and the basis for processing, you may have the following rights. Some requests about a customer workspace must be made through the customer organisation that controls it.

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete information where the law gives you that right.
• Ask us to restrict processing in qualifying circumstances.
• Object to processing based on legitimate interests or to direct marketing.
• Receive certain information in a portable format where the right applies.
• Withdraw consent at any time where processing relies on consent.

Contact us to exercise a right. We may need to verify your identity and clarify the request. We respond within the period required by applicable law and will explain if an exemption, extension or fee lawfully applies.

Essential storage is used for security, sessions and saved preferences. Optional website analytics and advertising measurement, including Google Analytics and first-party page-journey measurement, start only after the relevant consent. If you reject optional cookies, those optional measurement services are not used for that visit. You can change your choice through the cookie controls on the site.

Atlas is a business service and is not directed to children. If you believe a child has provided personal data to us, contact us so we can investigate and take appropriate action.

We review this notice when our services or legal obligations change. We will post the updated notice here and change the date above; where a change materially affects you, we will provide additional notice where appropriate.