Privacy policy

Privacy Policy & Data Protection Disclosure

Last Updated: August 2026

Armora Beast ("we", "us", or "our"), a trading name of NexBuy Ltd, values your personal privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit www.armorabeast.com or make a purchase, in full accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Personal Information We Collect

We collect personal information that is necessary to process orders and provide a secure e-commerce experience:

  • Direct Account & Transaction Data: When you place an order or register an account, we collect your full name, billing address, shipping address, email address, telephone number, and secure payment token identifiers.

  • Customer Care Communications: If you contact customer support via email, telephone, or online form, we collect the contents of your message, order references, and communication history.

  • Automated Technical Usage Data: When you browse our website, we automatically collect technical usage metrics including your IP address, browser type, device operating system, time zone, and pages viewed using technical cookies and pixel tags.

2. Lawful Bases & Purposes of Data Processing

Under UK GDPR Article 6, we process your personal data only under valid legal bases:

Processing Purpose Lawful Basis Scope & Details
Order Fulfillment & Support Contractual Performance Fulfilling sales contracts, processing payments, arranging shipping, sending order notifications, and handling returns or warranty claims.
Tax & Financial Compliance Legal Obligation Retaining order and financial transaction records to comply with UK HM Revenue & Customs (HMRC) tax laws, accounting rules, and fraud prevention regulations.
Website Performance & Security Legitimate Interests Processing technical usage data to improve website functionality, monitor network security, prevent fraudulent orders, and analyze store performance.
Marketing Communications Explicit Consent Sending promotional newsletters and product drops. You may withdraw your consent at any time via the unsubscribe link in any email.

3. Data Sharing & Trusted Third-Party Processors

We never sell, rent, or trade your personal data. We disclose information only to vetted third-party service providers who process data on our behalf under strict Data Processing Agreements:

  • E-Commerce Infrastructure: Our e-commerce platform provider (Shopify) hosts our website and processes order cart workflows securely.

  • Payment Gateway Providers: We use PCI-DSS Level 1 compliant payment gateways (including Stripe and PayPal). We never store your raw credit/debit card numbers on our servers.

  • Logistics & Carrier Partners: We share your delivery name, address, and telephone number with shipping couriers (such as Royal Mail, DHL, and DPD) solely to complete order delivery and send SMS/email tracking updates.

4. Cookies, Pixel Tags & Tracking Technologies

We use cookies and similar tracking technologies to ensure our website operates correctly:

  • Strictly Necessary Cookies: Essential for shopping cart functionality, user login sessions, and checkout security.

  • Analytical Cookies: Help us understand how visitors interact with our pages so we can optimize performance.

  • Marketing Cookies: Used only with your consent to deliver relevant product recommendations.

You can control or disable non-essential cookies via your browser settings at any time without losing core browsing capabilities.

5. Your UK GDPR Statutory Consumer Rights

Under UK data protection law, you have enforceable legal rights regarding your personal data:

  • Right of Access: Request a copy of all personal data we hold about you free of charge (Subject Access Request).

  • Right to Rectification: Request that we correct inaccurate or incomplete personal information.

  • Right to Erasure ('Right to be Forgotten'): Request the deletion of your personal data where it is no longer necessary for contractual or legal tax retention purposes.

  • Right to Object & Opt-Out: Object to direct marketing communications or processing based on legitimate interests at any time.

  • Right to Complain to the ICO: Lodge a formal complaint with the UK supervisory authority, the Information Commissioner's Office (ICO) at www.ico.org.uk. (We kindly ask that you contact our team first so we can resolve your concerns directly).

6. Data Retention Schedule & Contact Details

We retain order and financial records for 6 years from the end of the financial year to comply with UK HMRC statutory accounting rules. Routine customer service queries are archived after 24 months.

To exercise your privacy rights, contact our Data Protection Officer at:

  • Email: care@armorabeast.com

  • Phone: +44 7848 489126

  • Postal Address: NexBuy Ltd (Company No. 15893123), 62 Windermere Crescent, Luton, LU3 2PR, United Kingdom