Privacy policy

Who We Are

Atolla Swim Limited (“Atolla Swim”, “we”, “us”, “our”) is a UK‑based swimwear brand. We operate atollaswim.com and act as the data controller for the personal information you share with us.

If you have any questions about this policy or your data, you can contact us at: hello@atollaswim.com

Information We Collect

We collect and process personal information so we can run our store, fulfil your orders and communicate with you. This may include:

  • Identity and contact details – name, email address, billing and shipping address, phone number.
  • Order details – products purchased, order value, payment method (not full card details), delivery method.
  • Account information – login details and preferences if you create a customer account.
  • Marketing preferences – whether you’ve opted in or out of marketing communications.
  • Communications – messages you send us by email, contact forms or social media.
  • Device and usage data – IP address, browser type, device type, pages viewed, time spent on site, clicks and interactions.
  • Cookie and tracking data – information collected via cookies, pixels and similar technologies (see “Cookies & tracking” below).

We only collect information that is relevant and necessary for the purposes described in this policy.

How we collect your information

We collect information in a few different ways:

  • Directly from you when you place an order, create an account, sign up to our mailing list, enter a promotion, or contact us.
  • Automatically when you browse our website, through cookies and similar technologies.
  • From third parties such as payment providers, analytics and advertising partners, where this is needed to provide our services or improve our marketing.

How we use your information

We use your personal information for the following purposes:

  • To process and deliver your orders – including taking payment, arranging shipping, and sending order confirmations and updates.
  • To provide customer support – answering questions, handling returns, and resolving issues.
  • To manage your account – if you choose to create one.
  • To send marketing communications – where you have opted in, we use Klaviyo to send emails about new products, offers and brand updates.
  • To improve our website and products – analysing how visitors use our site so we can refine our ranges, content and user experience.
  • To show relevant advertising – using tools such as the Meta Pixel (Facebook and Instagram) and TikTok Pixel to measure and improve our ads.
  • To protect our business – preventing fraud, securing our website and complying with legal obligations.

We do not sell your personal data.

Legal basis for processing (UK GDPR)

Under UK data protection law, we must have a legal basis to use your personal information. Depending on the context, we rely on:

  • Contract – to process and deliver your orders and provide customer service.
  • Consent – for email marketing and certain cookies/analytics where required. You can withdraw consent at any time (for example, by unsubscribing from emails).
  • Legitimate interests – to improve our website, prevent fraud, and run advertising that is relevant to our audience, provided these interests are not overridden by your rights.
  • Legal obligation – to keep records required by tax and accounting laws.

Marketing & Klaviyo

If you choose to subscribe to our mailing list, we will use your email address (and, where provided, your name and preferences) to send you marketing communications via Klaviyo.

  • You can unsubscribe at any time by clicking the “unsubscribe” link in our emails or contacting us at hello@atollaswim.com.
  • If you unsubscribe, we will stop sending marketing emails, but may still contact you about orders, account issues or other service‑related matters.

Cookies & Tracking Technologies

Our website uses cookies and similar technologies to:

  • Keep your shopping basket working correctly.
  • Remember your preferences.
  • Understand how visitors use our site.
  • Measure and improve our marketing and advertising.

This may include:

  • Shopify cookies – essential for running the store and checkout.
  • Klaviyo tracking – to understand how subscribers interact with our emails and website.
  • Meta Pixel (Facebook & Instagram) – to measure and optimise our ads and build audiences for advertising.
  • TikTok Pixel – to measure and optimise our TikTok ads and build audiences.

You can control cookies through your browser settings and, where applicable, through consent tools on our site. Please note that disabling certain cookies may affect how our website functions.

Payment processing

We use trusted third‑party payment providers to process your payments securely:

  • Shopify Payments
  • PayPal

When you make a purchase, your payment information is processed directly by these providers. We do not store your full card details on our systems. These providers use your data in accordance with their own privacy policies.

Shipping & Fulfilment

To deliver your order, we share necessary information (such as your name, delivery address and contact details) with:

  • Royal Mail

This information is used only to ship your parcel and provide delivery and tracking services.

Other service providers and data sharing

We share your personal information with carefully selected third parties who help us run our business, including:

  • Shopify – our e‑commerce platform and hosting provider.
  • Klaviyo – email marketing and customer engagement.
  • Meta (Facebook & Instagram) and TikTok – advertising and analytics.
  • Analytics and anti‑fraud tools – to keep our store secure and improve performance.
  • Professional advisers – such as accountants or legal advisers, where necessary.

These providers only process your data on our instructions and for the purposes described above. We do not allow them to use your data for their own marketing.

We may also share information where required by law, to enforce our terms, or to protect our rights, property or safety.

International transfers

Some of our service providers (including Shopify, Klaviyo and advertising platforms) may process data outside the UK/EEA. Where this happens, we take steps to ensure your data is protected, for example through standard contractual clauses or equivalent safeguards required by data protection law.

Data retention

We keep your personal information only for as long as necessary for the purposes described in this policy, including to meet legal, accounting or reporting requirements. In general:

  • Order and transaction data – kept for up to 6 years to comply with UK tax and accounting laws.
  • Marketing data – kept until you unsubscribe or we no longer need it for the purpose collected.
  • Account data – kept while your account is active. If you request deletion, we will remove or anonymise your account information, subject to any legal obligations to retain certain records.

Your rights

Under UK data protection law, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data in certain circumstances.
  • Object to certain types of processing, including direct marketing.
  • Restrict how we use your data in some cases.
  • Request a copy of your data in a portable format.
  • Withdraw consent where we rely on consent (for example, email marketing).

To exercise any of these rights, please contact us at hello@atollaswim.com. We may need to verify your identity before responding.

Children’s privacy

Our website and products are not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The latest version will always be available on our website, and the “last updated” date will be shown at the top.

Last updated: 27th April 2026