Privacy Policy

This Privacy and Cookies Policy explains how we, ATLZ (“ATLZ”, “we”, “us”, “our”), collect, use, store, and protect information when you visit atlz.online and interact with our content, especially in sections such as Wellness Tips and Fitness Habits.

By using our website, you agree to this Policy and to our Terms of Use. If you do not agree with this Policy, you should stop using our website.

This Policy is written mainly for visitors in the United States and Brazil, but it also explains rights and choices that may apply under other data protection laws (such as GDPR/UK GDPR, LGPD, CCPA/CPRA and similar regulations).

1. Scope of this Policy

This Policy applies to personal data processed when you:

access and browse atlz.online
read articles in categories such as Wellness Tips and Fitness Habits;
use our forms (for example, the form on our contact page)
interact with tools we may use for analytics and usability, such as Google Analytics and Microsoft Clarity; ATLZ
click links that send you to other websites, services, or apps.

This Policy does not apply to websites, apps, or services that we only link to. Those third parties are responsible for their own privacy practices.

2. Who We Are and Contact (Controller)

Who we are

ATLZ is an independent healthy-living blog that helps you take better care of everyday health, wellness, and routines in a calm and realistic way. Our content is organized into sections such as Wellness Tips and Fitness Habits, with long-form guides, checklists, and explanations.

We are not a bank, clinic, hospital, fitness studio, or financial platform.
We do not perform any kind of financial transaction on this site; ATLZ exists only as an informational platform.

Controller

The site is owned and operated by:

Legal name: GTECK LTDA
CNPJ: 28.505.046/0001-81
Address: R. Adelino Cardana, 293 – Bethaville I / Centro – Barueri – SP – Brazil

For data protection purposes, GTECK LTDA is the controller responsible for personal data processed via atlz.online.

How to contact us about privacy

If you have questions about this Policy or want to exercise your privacy rights, you can contact us using the form on our official contact page.

Please mention in your message that your request is about privacy or personal data, so we can route it correctly.

Data Protection Officer (DPO) and representatives

If required by law, we may designate:

a Data Protection Officer (DPO);
an EU/EEA representative;
a UK representative.

When these contacts are formally appointed, we will add or update their details in this section.

3. Information We Collect

We aim to collect only what is necessary for operating and improving ATLZ, always in a transparent way.

3.1. Information you provide directly

You may give us information when you:

fill out the form on our contact page;
respond to any future surveys, newsletters, or feedback forms we may create;
reach out to us through channels we might publish in the future (for example, official email or social profiles).

Depending on the form, this data may include:

name;
email address;
subject and message content;
any other information that you voluntarily type in the open text fields.

We ask that you do not send sensitive health data (such as medical diagnoses, lab results, or detailed health history) in free-text fields. Our content is informational and is not designed to replace professional medical or psychological advice.

3.2. Information collected automatically

When you browse ATLZ, some information is collected automatically, mainly for security, performance, and analytics, such as:

IP address (which can indicate approximate location);
browser type and version;
operating system and device information (desktop, tablet, mobile);
language and time zone settings;
pages and posts visited, navigation path, time spent on each page;
click events, scroll behavior, and interaction with page elements;
the page that referred you to ATLZ (referral URL) when available;
cookies and similar identifiers.

We collect this data using server logs, cookies, and tools like Google Analytics and Microsoft Clarity, which help us understand how the site is used and improve usability, structure, and content.

3.3. Information from third parties

We may receive aggregated or pseudonymised information from:

analytics providers (for example, Google Analytics, Microsoft Clarity)
hosting, security, and performance providers (for example, CDN, DDoS protection, firewall);
email or communication tools, if we implement newsletters or similar services in the future.

This information is used to understand audience size, technical performance, general interest by topic, and potential issues with navigation.

4. Why We Use Your Data and Legal Bases

Below are the main purposes for which we process personal data and the typical legal bases we rely on (under GDPR/UK GDPR and comparable laws):

To operate and maintain the website
- Display pages, load content, maintain security, prevent abuse, and fix errors.
- Legal bases: legitimate interest (running a secure and functional site), sometimes legal obligation (security logs).
To respond when you contact us
- Answer questions, process feedback, consider topic suggestions, and handle privacy requests.
- Legal bases: legitimate interest (communication with readers), or measures at your request before a possible contract (where relevant).
To understand how ATLZ is used and improve content
- Generate aggregated statistics, identify most-read topics, improve structure, navigation, and readability.
- Legal bases: legitimate interest (continuous improvement) and/or consent (where cookie laws require it).
To manage cookies and similar technologies
- Remember your preferences (for example, cookie choices, language), maintain sessions, and measure performance.
- Legal bases: legitimate interest (essential cookies) and consent (non-essential cookies such as analytics or advertising, where applicable).
To communicate with you (if we launch newsletters or similar)
- Send updates, new articles, or curated content when you opt in.
- Legal bases: consent (you can withdraw at any time).
To comply with legal obligations and defend our rights
- Retain records for legal, tax, or regulatory requirements, and to handle administrative or judicial proceedings.
- Legal bases: legal obligation, legitimate interest.
Advertising and partners (current and future)
- At the moment, ATLZ does not display ads and does not use ad networks like Google AdSense.
- In the future, we may display ads or use affiliate links to keep the project sustainable. If we do, we will update this Policy to clearly explain which partners we use, which data is processed, and which options you have (including opt-out where applicable).
- Legal bases: consent for advertising cookies where required, and legitimate interest (site monetization) under certain regulations.

Whenever the legal basis is consent, you can withdraw it at any time using the tools we provide (for example, the cookie banner) or by contacting us through the contact page. Withdrawal will not affect processing that has already taken place.

5. Cookies and Similar Technologies

Cookies are small text files stored in your browser that help our site remember information about your visit. We may also use:

local storage;
pixels and tags;
JavaScript trackers;
SDKs (for mobile environments, if we ever launch an app).

5.1. Types of cookies we may use

Essential cookies – required for basic operation and security of the site.
Functional cookies – remember preferences (for example, cookie choices or viewing options).
Analytics cookies – help us understand how many people visit the site, which posts are most read, and how users navigate.
Advertising cookies – used if we adopt ad networks or affiliate programs in the future, to help measure performance and, where enabled, personalize ads.
Social media cookies – may be set when you share content via social networks or when we embed social widgets (if used).

Third parties, including Google and Microsoft, may set cookies when we use their services (for example, Google Analytics and Microsoft Clarity).

5.2. Managing cookies

Depending on your jurisdiction, you may see a cookie banner or consent manager when visiting ATLZ for the first time or after we update our settings. Through this interface you can:

accept all cookies;
reject non-essential cookies;
customize categories (such as analytics and advertising);
change or withdraw your consent later.

You can also manage cookies directly in your browser (for example, deleting cookies, blocking third-party cookies, or setting preferences per site). If you block or delete some cookies, certain parts of the site may not work properly.

If we start using Google products that rely on Consent Mode, your choices in the banner may also influence how Google tags behave (for example, measurement with limited cookies or without advertising identifiers).

6. Tools and Services We Use

We may use different providers over time. The main categories and examples include:

6.1. Analytics – Google Analytics

We may use Google Analytics to generate aggregated statistics about visits to ATLZ, such as page views, time on page, and general geographic distribution (based on IP).

Data involved: pages visited, browser and device information, approximate location, time and duration of visits, interactions with content, and identifiers such as cookies or similar IDs.
Purpose: measure traffic, understand user behavior, and improve structure, content, and performance.
International transfers: data may be processed on servers outside your country, including in the United States.

You can usually limit or block Google Analytics via browser add-ons or your cookie preferences.

6.2. Session replay and heatmaps – Microsoft Clarity

We may use Microsoft Clarity to better understand how users interact with pages (for example, scroll depth, clicks, and layout performance). ATLZ

Data involved: interaction events (scrolls, clicks), technical info (browser, device), and pages visited; Clarity may record anonymised session replays that focus on layout rather than identifying you personally.
Purpose: identify usability issues, broken elements, and opportunities to improve reading experience.
International transfers: data may be processed in other countries, depending on the service’s infrastructure.

6.3. Hosting, security, and infrastructure

ATLZ is built on a WordPress-based infrastructure hosted by third-party providers that may offer:

hosting and database storage;
content delivery network (CDN);
security tools (firewall, DDoS protection, malware scanning);
backup and recovery services.

These providers may process IP addresses, technical logs, and error data to keep the site working and secure.

6.4. Contact forms and communication tools

When you use the form on our contact page, your message may be:

stored in the website’s database;
forwarded to us via email or other internal communication tools.

We use this information only to answer your request and maintain a basic record of our communications, for transparency and security.

6.5. Other tools and future integrations

Over time, we may integrate other tools, such as:

newsletter and email marketing platforms;
comment systems;
social media widgets;
advertising or affiliate platforms.

Whenever we add a relevant tool that processes personal data, we will:

update this Policy and, if necessary, our cookie banner;
provide links to the provider’s own privacy terms;
explain which data is processed and for what purpose.

7. Sharing and International Transfers

We do not sell personal data as understood by most data protection laws, including the CCPA/CPRA.

We may share data with:

Service providers (processors)
- hosting, CDN, and infrastructure providers;
- analytics and usability providers (Google Analytics, Microsoft Clarity);
- security and anti-abuse tools;
- email or communication platforms (if used).
Advertising and measurement partners
- At this moment, we do not display advertising on ATLZ and do not run affiliate programs.
Authorities and third parties in special situations
- when required by law or regulatory authority;
- when necessary to establish, exercise, or defend legal claims;
- when necessary to protect the safety, rights, or property of ATLZ, our readers, or the public.

International transfers

Because many of our providers are global, your data may be processed in countries other than your own (for example, the United States or member states of the European Union). We seek to work with providers that:

use appropriate technical and contractual safeguards;
follow recognized frameworks and best practices for data protection.

8. Data Retention

We keep personal data only for as long as needed to fulfill the purposes described in this Policy, including:

Contact messages: kept for the time necessary to respond and for a reasonable period afterwards (for example, to document how we handled your request or to improve our content).
Analytics and technical logs: kept according to the default or configured retention periods of our providers, or for as long as needed to maintain security and understand site performance.
Cookie data: kept according to the type of cookie (session or persistent) and your chosen preferences.

If the law requires longer retention (for example, for legal or regulatory reasons), we may keep certain records for those periods. When data is no longer needed, we will delete it or anonymize it.

9. Your Rights as a Data Subject

Depending on where you live and which law applies, you may have some or all of the following rights:

Access: to know whether we process your personal data and, if so, which data.
Rectification: to correct incomplete, inaccurate, or outdated data.
Deletion (“erasure”): to request that we delete certain personal data when there is no compelling reason to keep it.
Restriction: to limit certain processing activities in specific circumstances.
Objection: to object to processing based on legitimate interests, including profiling, if applicable to you.
Portability: to receive your data in a structured, commonly used format, where technically feasible and applicable.
Information and transparency: to be informed about third parties with whom we share data when allowed by law.
Withdrawal of consent: to withdraw consent at any time, without affecting processing already performed based on your consent.

If you are in California, you may also have, under CCPA/CPRA:

the right to know categories and specific pieces of personal information collected about you;
the right to request deletion of certain data;
the right to opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising (we currently do not sell or share data in this way);
the right not to be discriminated against for exercising your rights.

To exercise any rights or ask questions, please contact us via our contact page. We may need to verify your identity before fulfilling certain requests.

10. Children and Minors

Our website and content are aimed at a general audience and not specifically at children.

We do not intentionally collect personal data from children under 13 years of age (or a higher minimum age where local law requires).
If you are a parent or guardian and believe that a child has provided personal data to us, please contact us via the contact page so we can review and, where appropriate, delete that information.

11. Information Security

We take reasonable technical and organizational measures to protect the data we process, including:

use of reputable hosting providers and security tools;
restricted access to systems and data based on need-to-know;
backups and monitoring to detect anomalies or abuse.

No system, however, is completely risk-free. We cannot guarantee absolute security of information transmitted or stored. If we become aware of a security incident that materially affects your data, we will follow applicable legal obligations and best practices in handling the situation.

12. Automated Decisions and Profiling

We do not use your data to make decisions that produce legal or similarly significant effects based solely on automated processing.

Some limited profiling may occur in the context of:

analytics (for example, grouping visits by region or device type);
future advertising (for example, if we use contextual or interest-based ads).

Currently, we do not use data for personalized advertising or remarketing campaigns on ATLZ.

If we introduce personalized ads, we will clearly explain:

the logic involved;
the significance and potential consequences for you;
how you can object or opt out (for example, via cookie controls or “Do Not Sell/Share” mechanisms where required).

13. Our Cookie Policy (Detailed)

We use cookies and similar technologies to:

remember basic preferences (for example, previous cookie choices);
keep sessions stable and secure;
understand which articles and categories (such as Wellness Tips and Fitness Habits) are most useful;
identify navigation patterns so we can improve readability and structure.

These technologies may record, for example:

which posts you visit and how long you stay;
whether you scroll to the end of an article;
which links or buttons you click.

We rely on your consent for non-essential cookies where applicable laws require it. You can:

manage cookie categories in our banner or settings (if available in your region);
change your browser settings to block or remove cookies;
revisit this Policy to understand how we use these technologies.

14. Advertising and Partnerships

Right now, we do not:

show display ads;
use advertising networks (such as Google AdSense/Ad Manager) on ATLZ;
participate in affiliate programs that track purchases across sites.

In the future, to keep ATLZ online and free, we may:

display clearly identified ads;
join affiliate programs with relevant partners;
publish sponsored content that is visibly marked as such.

If/when that happens, we will:

update this Policy and our cookie/configuration tools;
identify which partners we use and why;
explain which data may be processed for ad personalization and measurement;

15. Changes to this Policy

We may update this Privacy and Cookies Policy from time to time to:

reflect new legal or regulatory requirements;
include new tools or features on the site;
improve clarity and transparency.

When we make material changes, we will:

update the “Last updated” date at the top of this page;
and, where appropriate, show a notice on the site or in other communication channels.

Your continued use of ATLZ after changes take effect means that you accept the updated Policy.

16. Contact and Complaints

If you have questions, comments, or requests about this Policy or about how we handle your data, please contact us via our contact page.

If you believe your data protection rights have not been respected, you also have the right to:

raise the issue with us first, so we can try to resolve it; and
file a complaint with your local data protection authority (for example, ANPD in Brazil, a European supervisory authority, the ICO in the UK, or the relevant authority in your jurisdiction).

17. Applicable Laws and Our Global Approach

We aim to align our practices with the main data protection frameworks that may be relevant to our readers, including:

Brazil’s LGPD (Lei Geral de Proteção de Dados)
EU/EEA GDPR and UK GDPR;
US state privacy laws, especially CCPA/CPRA for California residents;
other similar regulations, where they apply to us.

Nothing in this Policy replaces specific legal advice. We may adapt our practices and this Policy as regulations and interpretations evolve.