FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
E-commerce

Atome

PreferencesOfficial website

Atome is a buy now pay later (BNPL) provider that lets shoppers split a purchase into interest free instalments at checkout. When a merchant adds the Atome widget or checkout, it sets cookies for session management, fraud prevention and conversion attribution, and processes shopper and order data. Under the GDPR and the ePrivacy Directive, its non essential cookies require prior consent and cross border transfers must be safeguarded.

Block Atome until consentScan my site
Overview

What does Atome do?

What is Atome?

Atome is a buy now pay later service that lets shoppers split the cost of a purchase into several interest free instalments. Merchants add Atome as a payment option through a widget on the product or checkout page, and shoppers complete an eligibility check before the order is approved. It is operated by the Singapore based Advance Intelligence Group and is widely used across Asia.

What data and cookies does it collect?

When the Atome widget loads it sets cookies for session management, fraud prevention and conversion attribution, and reads device data such as IP address and browser. To approve an instalment plan, Atome processes identity, contact and order information and runs an affordability or fraud assessment. Some cookies are persistent identifiers used to recognise the device and attribute the sale.

GDPR and ePrivacy implications

The attribution and fraud cookies are not strictly necessary, so storing them is governed by Article 5(3) of the ePrivacy Directive and requires consent. The instalment eligibility check can involve profiling of the shopper financial situation, which carries heightened obligations under the GDPR, including transparency about the logic and possible effects of any automated decision.

Consent requirements

Block Atome non essential cookies until the shopper accepts them through a Consent Management Platform, while genuinely necessary checkout cookies may load to complete a requested payment. Provide clear information about the instalment assessment, log consent, and let shoppers refuse non essential tracking as easily as they accept it.

Data transfers

Because Atome is operated from Singapore, personal data of EU shoppers may be transferred to Singapore and other Asia Pacific locations that do not benefit from an EU adequacy decision. Such transfers must rely on Standard Contractual Clauses or another Chapter V safeguard, supported by a Transfer Impact Assessment. Document the recipients and the safeguards in your records of processing.

Practical compliance steps

List the Atome cookies and domains in your cookie policy, classify them and gate non essential ones behind consent. Clarify the controller roles between your business and Atome, sign the appropriate data processing or sharing terms, and inform shoppers about the affordability assessment and their rights. Reassess the transfer safeguards periodically and after any change to the integration.

Compliance

Atome and the GDPR

Atome is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR)
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive (Cookie Law)

Impact assessment (DPIA)

Atome processes identity, contact, device and order data to assess instalment eligibility and to prevent fraud, and sets cookies including persistent identifiers for attribution. Key DPIA considerations: (1) BNPL involves a creditworthiness or affordability assessment that may amount to profiling with legal or significant effects; (2) fraud prevention and device cookies create persistent identifiers; (3) data may be transferred to Singapore and other Asia Pacific countries without an EU adequacy decision; (4) the merchant and Atome must define their respective controller roles. A DPIA is recommended because BNPL combines financial profiling with international transfers.

Sample text for your banner

We offer Atome so you can pay in interest free instalments. The Atome checkout sets cookies and processes your identity, device and order data to assess eligibility and prevent fraud, and may transfer data to Singapore. You can withdraw your consent to non essential cookies at any time through our cookie settings.
Cookies and trackers

What Atome sets and contacts

Tracking method
JavaScript checkout widget and cookies
Server location
Singapore and Asia Pacific (Amazon Web Services), with regional CDN
Data transferred outside the EU
Atome is operated from Singapore, so checkout data of EU shoppers may be transferred to Singapore and other Asia Pacific locations. Singapore is not covered by an EU adequacy decision, so transfers rely on Standard Contractual Clauses under Article 46 GDPR with a Transfer Impact Assessment.

Cookies set (3)

NameTypeDurationPurpose
atome_sessionFunctionalSessionMaintains the shopper session through the Atome instalment checkout.
_atm_idAttribution / Analytics1 yearPersistent identifier used to attribute completed orders and recognise returning devices.
atm_fraudSecurity6 monthsSupports device recognition and fraud prevention during the instalment eligibility check.

Third-party domains contacted (3)

  • atome.sg
  • api.atome.sg
  • static.atome.sg
Questions

Frequently asked questions about Atome

Can't find your question? Write to us, we answer fast.

What cookies does Atome set?

Atome sets cookies for session management, fraud prevention and conversion attribution when its widget or checkout loads. The attribution and fraud cookies are persistent identifiers that are not strictly necessary, so they require consent, while a narrow set of cookies needed to complete a requested payment may be treated as essential.

Does Atome require cookie consent?

Yes for the non essential cookies. The attribution and tracking cookies Atome sets need prior consent under the GDPR and the ePrivacy Directive, so they should not load until the shopper accepts. Cookies strictly necessary to process a payment the shopper has requested can rely on a different basis.

What is the legal basis for Atome?

Consent under Article 6(1)(a) GDPR covers the attribution cookies, while processing needed to provide the instalment service the shopper requested can rely on contract under Article 6(1)(b). Fraud prevention may rely on legitimate interest, but any profiling with significant effects requires careful justification and transparency.

Does Atome transfer data outside the EU?

Yes. Atome operates from Singapore, so shopper data may be transferred to Singapore and other Asia Pacific countries that lack an EU adequacy decision. These transfers must use Standard Contractual Clauses or another Chapter V mechanism with a Transfer Impact Assessment, and you should document them.

Do I need a DPIA for Atome?

A DPIA is recommended because BNPL combines an affordability or fraud assessment, which can amount to profiling with significant effects, with international transfers. Documenting the purposes, the logic of any automated decision, the risks and the safeguards helps you meet Article 35 GDPR and demonstrate accountability.

How do I implement Atome compliantly?

Add Atome through a CMP that blocks its non essential cookies until consent, keep payment essential cookies separate, and disclose everything in your cookie and privacy notices. Define the controller relationship with Atome, sign the relevant terms, document transfer safeguards, and explain the instalment assessment to shoppers.

Are there alternatives to Atome?

Other BNPL providers include Klarna, Clearpay, Scalapay and Alma, the last two being European, which can reduce transfer complexity for EU merchants. All BNPL options involve an eligibility assessment and tracking cookies, so the compliance work is similar regardless of provider.

How do I update my cookie policy for Atome?

Describe the Atome cookies, their purpose and duration in your cookie policy, list the Atome domains, and state that data may be transferred to Singapore and other Asia Pacific locations. Explain the affordability assessment in your privacy notice and keep both aligned with the live integration.

Same category

More services: E-commerce

See the whole category

Cartum

Cartum is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Cartum integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Cartum helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Tokeet

Tokeet is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Tokeet supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Tokeet ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

E-commerce

Culqi

Culqi is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Culqi integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Culqi helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Levar

Levar is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Levar enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Levar empowers marketing teams to achieve measurable growth.

Preferences

Shopapps

Shopapps is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Shopapps integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Shopapps helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

VNTANA

Vntana is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Vntana enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Vntana empowers marketing teams to achieve measurable growth.

Marketing

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site