Privacy policy

Armour Sermon ("we," "our," or "us") operates this e-commerce website and related services (collectively, the "Platform"). We are established in the United Kingdom and serve as the data controller responsible for your personal information.

By accessing or using our Platform, you acknowledge and accept the practices described in this Privacy Policy.

1. DATA CONTROLLER DETAILS

Address: 52 Grosvenor Gardens, London SW1W 0AU, United Kingdom
Email: support@armoursermon.com
Customer Service Hours: Monday to Friday, 10:00 a.m. – 6:00 p.m. (GMT)

2. TYPES OF PERSONAL INFORMATION WE COLLECT

The personal data we collect varies based on how you interact with our Platform and may include:

Identification and Contact Details: Name, email address, phone number, shipping address, and billing address.

Purchase and Transaction Data: Products ordered or returned, order amounts, payment references, and limited payment details (complete card numbers are processed by our payment partners and are not stored by us).

Account Data (for registered users): Login credentials, usernames, and saved preferences.

Support Communications: Messages, attachments, and correspondence exchanged with our customer service team.

Technical and Usage Information: IP addresses, device identifiers, browser type, operating system, pages visited, clickstream data, and cookie identifiers.

3. HOW WE COLLECT YOUR INFORMATION

Directly from you: When you place orders, create accounts, subscribe to communications, or contact customer support.

Automatically: Through cookies, pixels, and similar tracking technologies as you browse our Platform.

From third parties: Via service providers who assist with payment processing, shipping, marketing, and analytics.

4. WHY WE PROCESS YOUR DATA AND OUR LEGAL BASIS (GDPR ARTICLE 6)

We process your personal information for the following purposes:

Order Processing and Account Management (fulfilling purchases, coordinating deliveries, handling returns, providing customer support) — Legal basis: Performance of a contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).

Payment Handling and Fraud Prevention — Legal basis: Legitimate interests (Art. 6(1)(f)) and compliance with legal obligations including financial and tax regulations (Art. 6(1)(c)).

Platform Improvement and Analytics (understanding user behavior, resolving technical issues, enhancing functionality) — Legal basis: Legitimate interests (Art. 6(1)(f)).

Marketing and Promotional Activities (sending newsletters, personalized offers, and targeted advertisements) — Legal basis: Consent where required by law (Art. 6(1)(a)); otherwise legitimate interests (Art. 6(1)(f)). You can opt out at any time.

Legal and Regulatory Compliance (meeting tax obligations, financial reporting, responding to lawful requests from authorities) — Legal basis: Legal obligation (Art. 6(1)(c)).

5. COOKIES AND TRACKING TECHNOLOGIES

We deploy cookies and similar technologies to:

Enable core website functionality (essential cookies),
Remember your settings and preferences,
Measure site performance and user engagement, and
Deliver relevant marketing content where permitted.

Where legally required, we will seek your consent for non-essential cookies when you first visit our Platform. You may adjust your cookie preferences at any time through our cookie settings panel or your browser controls. Please note that disabling certain cookies may affect Platform functionality.

6. SHARING YOUR INFORMATION

We disclose personal data only as necessary to operate our Platform:

E-commerce Platform Provider (Shopify): Hosting, order management, and security services.

Payment Processors: Secure transaction handling and fraud detection.

Logistics and Fulfillment Partners: Order dispatch and return processing.

Technology and Analytics Providers: Cloud infrastructure, email delivery, and performance measurement.

Professional Advisors: Legal, accounting, and compliance support as needed.

Corporate Transactions: In the event of a merger, acquisition, or asset sale, your data may be transferred to the successor entity.

We do not sell your personal information to third parties under any circumstances.

7. INTERNATIONAL DATA TRANSFERS

Some of our service providers (including Shopify and its sub-processors) may process your data outside the United Kingdom or European Economic Area. When such transfers occur, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs). You may request copies of relevant transfer documentation by contacting us (certain information may be redacted for confidentiality).

8. DATA RETENTION

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy and to comply with legal requirements. Our standard retention periods are:

Transaction and Invoice Records: Up to 10 years (as required by tax and accounting laws).

Account Information: For the duration of your account's active status; deleted or anonymized after extended inactivity and expiration of any legal retention period.

Customer Service Records: Up to 3 years following resolution (extended if needed for legal proceedings).

Marketing Preferences: Until you withdraw consent or object to processing; thereafter your details are suppressed from promotional communications.

9. YOUR RIGHTS UNDER DATA PROTECTION LAW

Under the UK GDPR and EU GDPR, you have the right to:

- Access the personal data we hold about you,

- Request correction of inaccurate or incomplete data,

- Request deletion of your data under certain circumstances,

- Restrict or object to processing,

- Receive your data in a portable format, and

- Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, please email us at support@armoursermon.com. We may need to verify your identity before processing your request. We will respond within one month (this period may be extended by up to two months for complex requests, with prior notification).

You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO). Residents of the EEA may contact their local data protection authority.

10. CHILDREN'S PRIVACY

Our Platform is not designed for or directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately so we can delete it.

11. AUTOMATED DECISION-MAKING

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant impacts on you (as defined under GDPR Article 22).

12. SHOPIFY PLATFORM

Our online store is powered by Shopify, which provides hosting, order management, analytics, and security infrastructure. Shopify processes your data as our data processor and may independently control certain aggregated or platform-level data. For further details, please review Shopify's Privacy Policy and Privacy Portal.

13. UPDATES TO THIS POLICY

We may revise this Privacy Policy periodically. Any updates will be posted on this page with an updated "Last Modified" date. Where significant changes are made, we will notify you as required by applicable law.

14. CONTACT INFORMATION

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: