Privacy Policy
Atorym Inc. | Toronto, Ontario, Canada | privacy@atorym.com | atorym.com
Effective Date. August 17, 2026
Atorym Inc. ("Atorym," "we," "us" or "our") respects your privacy and is committed to responsibly handling personal information.
This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit atorym.com, create or use an Atorym account, use our procurement platform, request pricing, place or receive an order, apply for commercial credit, communicate with us or otherwise interact with Atorym (collectively, the "Services").
Atorym primarily provides business-to-business services. Some information we handle relates to companies rather than identifiable individuals and therefore may not constitute personal information under applicable privacy law. Nevertheless, we seek to handle all customer and account information responsibly.
1. PERSONAL INFORMATION WE COLLECT
The information we collect depends on how you interact with Atorym and the Services.
Information You Provide to Us
We may collect information you provide directly to us, including:
Contact information, such as your name, business email address, telephone number, job title and company.
Company and account information, such as company name, business address, account credentials, account preferences and information about authorized users.
Project and delivery information, such as project names, purchase order numbers, job-site addresses, delivery instructions and job-site contact information.
Procurement and order information, such as products requested or purchased, quantities, quotations, RFQs, order history, delivery information, returns, cancellations and other transaction information.
Billing and payment information, such as billing address, payment status and information required to process payments. Payment-card information may be collected and processed directly by third-party payment processors rather than stored by Atorym.
Credit information, if you apply for commercial credit, including information necessary to assess and administer credit, such as company financial information, banking or trade references and, where applicable, information relating to principals, guarantors or other individuals.
Communications and support information, including information contained in emails, support inquiries, telephone conversations, feedback or other communications with Atorym.
Other information you choose to provide through the Services.
We ask that you not provide sensitive personal information unless it is reasonably necessary for a specific business purpose requested by Atorym.
2. INFORMATION COLLECTED AUTOMATICALLY
When you use our website or Platform, certain technical information may be collected automatically, including:
IP address;
device and browser information;
operating system;
pages or features accessed;
dates and times of access;
referring pages;
account and session activity; and
other technical information regarding interaction with the Services.
We may use cookies and similar technologies to operate the Platform, authenticate users, maintain security, remember preferences and understand how our Services are used.
Where required by applicable law, we will provide appropriate choices regarding non-essential cookies or similar technologies.
3. INFORMATION WE RECEIVE FROM OTHER SOURCES
We may receive information from third parties where reasonably necessary to provide or administer the Services, including:
payment processors and financial institutions;
suppliers, manufacturers and distributors;
freight carriers and logistics providers;
credit bureaus, credit insurers, banks and trade references, where applicable and permitted;
fraud-prevention and identity-verification providers;
technology, hosting and security providers; and
other parties with whom you authorize us to interact.
If you apply for commercial credit, we may request or obtain information concerning creditworthiness from third parties where you have provided any required authorization or where otherwise permitted by law.
4. HOW WE USE PERSONAL INFORMATION
We may use personal information for purposes including:
Providing the Atorym Services
To:
establish and administer customer accounts;
authenticate authorized users;
provide access to the Platform;
respond to RFQs;
prepare and deliver quotations;
process and fulfil Orders;
coordinate sourcing, transportation and delivery;
process payments;
manage returns, cancellations and warranty matters; and
otherwise perform our contractual obligations.
Credit Administration
Where commercial credit is requested or provided, to:
evaluate credit applications;
verify information supplied to us;
establish and administer credit limits and payment terms;
manage accounts receivable;
assess payment risk;
collect overdue amounts; and
protect Atorym against credit loss, fraud or misuse.
Customer Service and Communications
To:
respond to questions and support requests;
provide quotation, order and delivery updates;
communicate changes affecting your account or transactions; and
maintain our business relationship with you.
Security, Fraud Prevention and Compliance
To:
protect accounts and the Platform;
investigate suspected fraudulent, unauthorized or unlawful activity;
maintain appropriate records;
enforce agreements and policies;
protect Atorym, our customers and other parties; and
comply with applicable legal, regulatory, accounting and reporting requirements.
Improving Our Services
We may use information to understand how customers interact with Atorym, improve our Platform and workflows, troubleshoot issues, develop new functionality and improve the customer experience.
Where reasonably possible, we may use aggregated or de-identified information for analytics and business planning.
Marketing
We may use appropriate contact information to communicate about Atorym products, services, platform updates or other commercial matters where we have consent or are otherwise permitted to do so by applicable law.
You may unsubscribe from promotional electronic communications using the unsubscribe mechanism included in the communication.
Unsubscribing from promotional messages will not prevent us from sending transactional communications relating to your account, quotations, Orders, payments, deliveries or other existing business matters.
5. HOW WE DISCLOSE PERSONAL INFORMATION
Atorym does not sell personal information for monetary consideration.
We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy.
Suppliers and Fulfilment Partners
We may provide necessary information to manufacturers, suppliers, distributors or other fulfilment partners in order to source, process or fulfil an Order.
We seek to limit information shared to what is reasonably necessary for the relevant transaction.
Freight and Logistics Providers
We may provide job-site addresses, contact names, telephone numbers, shipment information and delivery instructions to freight brokers, carriers and logistics providers for purposes of coordinating delivery.
Payment and Financial-Service Providers
We may disclose necessary information to payment processors, banks, financial institutions and other service providers involved in processing or administering payments.
Credit Providers and Credit-Related Parties
Where applicable, information may be disclosed to or obtained from credit bureaus, banks, trade references, credit insurers, collection agencies or other organizations involved in assessing, administering or collecting commercial credit, where permitted by law and subject to any required authorization.
Technology and Professional Service Providers
We may use third parties to provide services such as:
cloud hosting;
data storage;
cybersecurity;
authentication;
email and communications;
analytics;
accounting;
customer support;
payment processing; and
legal and professional services.
These providers may process personal information on Atorym's behalf as necessary to perform their services.
Legal and Regulatory Purposes
We may disclose information where required or permitted by applicable law, including in response to lawful court orders, subpoenas, regulatory requirements or requests from government or law-enforcement authorities.
We may also disclose information where reasonably necessary to investigate fraud, enforce agreements, collect amounts owing or protect the rights, property or safety of Atorym or others.
Business Transactions
Personal information may be disclosed in connection with a proposed or completed financing, investment, merger, acquisition, reorganization, sale of assets or similar business transaction, subject to applicable law and appropriate confidentiality protections.
6. CROSS-BORDER PROCESSING
Atorym may use service providers located in Canada, the United States or other jurisdictions.
As a result, personal information may be processed or stored outside the province or country in which it was collected.
Information processed in another jurisdiction may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies or governmental authorities in accordance with applicable law.
Where Atorym transfers personal information to a service provider for processing, Atorym remains responsible for personal information under its control and takes reasonable steps to require appropriate protection of that information.
Canadian privacy guidance specifically recognizes cross-border processing but requires organizations to remain accountable and transparent about the practice.
7. COOKIES AND SIMILAR TECHNOLOGIES
Atorym may use cookies and similar technologies for purposes including:
account authentication;
maintaining secure sessions;
fraud and security monitoring;
remembering user preferences;
operating Platform functionality; and
understanding and improving Platform performance and usage.
You may be able to control certain cookies through your browser settings or through cookie-preference tools made available by Atorym.
Disabling certain cookies may affect the functionality of the Services.
If Atorym introduces advertising or other non-essential tracking technologies in the future, this Policy and our cookie controls will be updated as appropriate.
8. RETENTION OF PERSONAL INFORMATION
Atorym retains personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected and to meet applicable legal, accounting, tax, contractual, dispute-resolution and business requirements.
Retention periods vary depending on the nature of the information and the applicable purpose.
For example, Atorym may retain transaction, invoice and accounting information for longer periods where required for legal or financial-recordkeeping purposes.
When personal information is no longer reasonably required, we take appropriate steps to securely delete, destroy or anonymize it.
PIPEDA requires organizations to limit retention to what is required for identified purposes.
9. SAFEGUARDS
Atorym uses administrative, technical and physical safeguards appropriate to the sensitivity of the personal information under our control.
These may include access controls, authentication measures, encryption where appropriate, system monitoring, contractual protections with service providers and internal procedures designed to reduce unauthorized access, use, disclosure, loss or alteration.
No method of electronic transmission or storage can be guaranteed to be completely secure. Accordingly, Atorym cannot guarantee absolute security.
Customers are responsible for protecting their account credentials and for notifying Atorym promptly if they believe an account has been compromised.
PIPEDA requires safeguards proportionate to the sensitivity of the information being protected.
10. PRIVACY AND SECURITY INCIDENTS
Atorym maintains procedures intended to identify, assess and respond to suspected privacy and security incidents.
Where required by applicable law, Atorym will report qualifying breaches to the appropriate regulatory authority and notify affected individuals.
11. YOUR CHOICES AND PRIVACY RIGHTS
Subject to applicable law, you may request information regarding personal information Atorym holds about you and may request access to or correction of that information.
You may also:
update certain account information directly through the Platform;
withdraw consent to certain uses of personal information, subject to legal or contractual restrictions and reasonable notice;
unsubscribe from promotional communications; and
ask questions about Atorym's retention or deletion of your personal information.
Withdrawal of consent may affect Atorym's ability to provide certain Services where the information is reasonably necessary to provide those Services or fulfil contractual or legal obligations.
To make a privacy request, contact our Privacy Officer using the contact information below.
We may take reasonable steps to verify identity before responding to a request.
PIPEDA provides individuals with rights relating to access and correction of personal information and requires organizations to make their privacy practices and complaint procedures readily available.
12. INFORMATION RELATING TO OTHER INDIVIDUALS
If you provide Atorym with personal information about another individual—for example, a job-site contact, employee, purchaser or accounts-payable contact—you are responsible for ensuring that you are authorized to provide that information and that it may lawfully be used for the purposes for which it is provided.
13. BUSINESS CONTACT INFORMATION
Certain information concerning an individual in a professional capacity—such as a person's name, title, business telephone number, business address or business email address—may not constitute personal information subject to PIPEDA where it is used solely to communicate with that individual in relation to their employment, business or profession.
Atorym may nevertheless handle such information in accordance with this Privacy Policy as a matter of responsible business practice.
14. CHILDREN
The Services are intended for businesses and commercial users and are not directed to children or minors.
Atorym does not knowingly collect personal information from children through the Services.
If you believe a child has provided personal information to Atorym, please contact us.
15. THIRD-PARTY WEBSITES AND SERVICES
The Platform may contain links to websites or services operated by third parties.
Atorym does not control the privacy practices of independent third parties. We encourage users to review the privacy policies of any third-party services they choose to access.
16. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our Services, technology, business practices or legal requirements.
The current version will be posted on atorym.com together with its effective date.
Where changes are material and additional notice is appropriate, we may notify registered users through the Platform, by email or through another appropriate method.
17. PRIVACY OFFICER AND CONTACT INFORMATION
Atorym has designated a Privacy Officer who is responsible for overseeing our privacy practices and responding to privacy inquiries, access requests and complaints.
Questions, requests or complaints regarding this Privacy Policy or Atorym's handling of personal information may be directed to:
Privacy Officer
Atorym Inc.
1008-381 Front Street West, Toronto
Ontario, Canada M5V 3R8
Email: privacy@atorym.com
We will investigate privacy complaints and respond within a reasonable period.
If you are not satisfied with our response, you may have the right to contact the Office of the Privacy Commissioner of Canada or another applicable privacy regulator.