Privacy Policy

1. Introduction

Armazem LTD ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store and protect your information when you visit our website or make a purchase from us.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We may collect the following types of personal information:

• Identity data: name, username or similar identifier.
• Contact data: email address, billing address, delivery address, phone number.
• Transaction data: details of products you have purchased from us.
• Technical data: IP address, browser type and version, time zone setting, browser plug-in types, operating system and platform, and other technology on the devices you use to access this website.
• Usage data: information about how you use our website, products and services.
• Marketing data: your preferences in receiving marketing from us and your communication preferences.

3. How We Collect Your Data

We collect data through:

• Direct interactions: when you fill in forms, place an order, or contact us.
• Automated technologies: cookies, server logs and similar technologies.
• Third parties: analytics providers such as Google Analytics and payment processors.

4. How We Use Your Information

We use your personal data for the following purposes:

• To process and fulfil your orders, including managing payments and delivering products.
• To manage our relationship with you, including providing customer support and responding to enquiries.
• To improve our website, products and services.
• To send you marketing communications where you have consented to receive them.
• To comply with legal obligations, such as tax and accounting requirements.
• To detect and prevent fraud.

5. Payment Processing

All payments on our website are processed securely by Stripe, Inc., a leading global payment processor. When you make a purchase, your payment details (such as card number, expiry date and CVV) are transmitted directly to Stripe using industry-standard encryption (TLS/SSL).

We do not store your full payment card details on our servers. Stripe handles all payment data in accordance with the Payment Card Industry Data Security Standard (PCI DSS). For more information about how Stripe processes your data, please refer to Stripe's Privacy Policy.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your browsing experience, analyse website traffic and understand where our visitors come from. You can set your browser to refuse all or some browser cookies, but this may affect your ability to use certain features of our website.

7. Data Sharing and Disclosure

We may share your personal data with:

• Service providers: payment processors (Stripe), delivery companies, IT service providers and marketing platforms.
• Legal authorities: where required by law or to protect our legal rights.
• Business transfers: in connection with any merger, sale of assets or acquisition.

We do not sell your personal data to third parties.

8. International Transfers

Some of our service providers are based outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK government, to protect your personal data.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. This includes encryption, access controls and regular security assessments.

10. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting or reporting requirements. Typically, we retain order and customer data for six years in accordance with UK tax law.

11. Your Legal Rights

Under UK data protection law, you have the following rights:

• Access: request a copy of your personal data.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your personal data in certain circumstances.
• Restriction: request limited processing of your data.
• Portability: request transfer of your data to another party.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: where we rely on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details below. You also have the right to complain to the UK Information Commissioner's Office (ICO).

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us:

Armazem LTD
90 York Way, Islington, N1 9AG, GB
Email: privacy@herbaluxcare.com