Privacy Policy

1. Introduction

Armologic Ltd. ("we", "us", "our"), a company registered in the United Kingdom, operates the ArmoWatch platform and website (armowatch.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our products, or interact with our services.

We are committed to protecting your privacy in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection legislation.

2. Data Controller

Armologic Ltd. is the data controller responsible for your personal data. If you have any questions about this policy or our data practices, please contact us at privacy@armowatch.com.

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, email address, company name, job title when you register for an account or request a demo.
• Contact Information: Details provided when you submit a contact form, subscribe to our newsletter, or communicate with our support team.
• Payment Information: Billing details processed through our payment partner, Paddle. We do not directly store payment card details.
• Support Data: Information provided in support tickets, including descriptions of issues and uploaded attachments.

3.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on pages, referring URLs.
• Device Information: Browser type, operating system, screen resolution, IP address.
• Cookies: Essential and functional cookies as described in our Cookie Policy.

4. How We Use Your Information

We use your personal data for the following purposes:

• Providing and maintaining our services and platform.
• Processing transactions and managing your subscription via Paddle.
• Responding to enquiries, support requests, and providing customer service.
• Sending product updates, security advisories, and service notifications.
• Sending marketing communications (with your consent), including our newsletter.
• Improving our website, products, and services based on usage patterns.
• Complying with legal obligations and enforcing our terms of service.

5. Legal Basis for Processing

We process your personal data on the following legal grounds under UK GDPR:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you (e.g., providing the ArmoWatch platform).
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., improving our services, fraud prevention).
• Consent: Where you have given explicit consent (e.g., marketing emails, newsletter).
• Legal Obligation: Processing required to comply with applicable laws and regulations.

6. Data Sharing

We do not sell your personal data. We may share your data with:

• Paddle: Our payment processing partner (Merchant of Record) for subscription and billing management.
• Service Providers: Trusted third-party providers who assist in operating our platform (e.g., email delivery, hosting).
• Legal Requirements: When required by law, regulation, or legal process.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy. Account data is retained for the duration of your subscription plus 30 days. Support ticket data is retained for 3 years after resolution. Marketing consent records are retained until withdrawal.

8. Your Rights

Under UK GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your personal data.
• Right to Restrict Processing: Request limitation of processing.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at privacy@armowatch.com.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS 1.2+), access controls, regular security assessments, and secure data storage practices.

10. International Transfers

Your data is primarily processed within the United Kingdom and the European Economic Area. Where transfers occur outside these regions, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

• Email: privacy@armowatch.com
• Company: Armologic Ltd., United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.