Privacy Policy

Data protection & privacy · Armatura

Last updated: 4 September 2026

1. Introduction and Scope

This Privacy Policy describes how Armatura ("we," "our," or "us") collects, uses, shares, and protects your personal information when you visit our website, make purchases, or interact with our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website, you acknowledge that you have read and understood this policy.

2. Information We Collect

Personal Information: Name, email, telephone number, billing and delivery address, and payment details.

Business Information: Business name, VAT registration number, and compliance-related data where applicable.

Technical Information: IP address, browser type, device information, pages visited, and timestamps.

Communication Data: Records of emails, telephone calls, and support interactions.

3. How We Use Your Information

• Order Processing: To fulfil orders and manage delivery and returns.
• Account Management: To maintain your account and preferences.
• Customer Support: To respond to enquiries and improve service quality.
• Legal Compliance: To meet regulatory, tax, and statutory obligations under UK law.
• Business Operations: Analytics and internal improvements to enhance your experience.

4. Lawful Basis for Processing

Under the UK GDPR, we process your personal data on the following lawful bases:

• Contract Performance: To fulfil our obligations under your purchase or service agreement.
• Legal Obligation: To comply with UK tax, consumer protection, and regulatory requirements.
• Legitimate Interests: To improve our services, prevent fraud, and ensure website security, where your rights do not override our interests.
• Consent: Where you have given explicit consent, such as for marketing communications (you may withdraw consent at any time).

5. Information Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Trusted partners assisting with website hosting, payment processing, and customer service operations.
• Delivery Partners: Royal Mail, DPD, Yodel, Evri, or other UK carriers to fulfil your orders.
• Payment Processors: Secure third-party processors (Stripe, PayPal, Klarna, Clearpay) for transaction handling.
• Legal Requirements: Disclosure when required by UK law, court order, or regulatory authority.
• Business Transfers: Data may transfer during mergers, acquisitions, or asset sales, subject to continued protection under this policy.

6. Data Security and Protection

We implement industry-standard security measures including encryption, SSL technology, secure servers, and restricted access controls to protect your personal data. Whilst we strive for maximum protection, no internet transmission or electronic storage system is completely secure, and we cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience, analyse website traffic, and improve functionality. Our use of cookies is governed by the Privacy and Electronic Communications Regulations 2003 (PECR).

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect website functionality. For full details, please refer to our separate Cookie Policy.

8. Your Privacy Rights

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data (subject to legal retention obligations).
• Right to Restrict Processing: Request limitation of how we use your data.
• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Right to Complain: Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or telephone 0303 123 1113.

To exercise any of these rights, please contact us using the details provided below.

9. Data Retention

We retain personal data only as long as necessary for the purposes set out in this policy and to comply with legal, accounting, and regulatory obligations. Typical retention periods include:

• Order and transaction data: Six years (in accordance with UK tax and accounting requirements).
• Marketing data: Until you withdraw consent or request deletion.
• Technical and analytics data: Typically 12-24 months.

10. Third-Party Services and Links

Our website may contain links to third-party websites, including payment providers, social media platforms, and delivery tracking services. We are not responsible for the privacy practices of external websites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are intended for users aged 18 and over. We do not knowingly collect personal data from children under the age of 13. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

12. International Data Transfers

Your personal data is primarily processed and stored within the United Kingdom. Where we engage service providers located outside the UK, we ensure that appropriate safeguards are in place, such as:

• UK adequacy decisions recognising equivalent data protection standards in the destination country.
• Standard contractual clauses approved by the ICO, with the UK addendum where required.
• Binding corporate rules or other legally recognised transfer mechanisms.

You may request further information about international transfers by contacting us.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of our services following any updates constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

14. Contact Information