Privacy Policy

Privacy Policy

We are ARMA Connect Limited (referred to as we, us and our in this Privacy Policy), a company incorporated in England and Wales with company registration number 05340053 and whose registered office address is Hilden Park House 79 Tonbridge Road, Hildenborough, Tonbridge, Kent, TN11 9BH.

The information set out in this Privacy Policy is provided to individuals whose personal data we process (you or your) as data controller, in compliance with our obligations under the Data Protection Act 2018 and the UK GDPR (as defined in the Data Protection, Privacy and Electronic Communications Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations SI 2019/419) (GDPR).  ___________________________________________________________________________

This Privacy Policy includes:

  1. Data controller details.
  2. How we collect your information.
  3. Information we collect and purpose for processing.
  4. Sharing your information.
  5. International transfers.
  6. Retention of personal data.
  7. Your rights in respect of your personal data.
  8. Automatic decision making.
  9. Security.
  10. Changes to this Privacy Policy.
  11. When you are located outside of the UK.

__________________________________________________________________________

  1. Data controller details

    • We are the data controller in relation to the processing of the personal information that you provide to us.
    • You can contact us by email at info@arma-connect.com (please include “Personal Data Request” in your subject heading to ensure it receives the correct attention).

 

  1. How we collect your information

    • The information we hold about you is generally collected from the way that you engage with us, for example by doing any of the following:
      • through engaging with us via our website (Site), including contact form submissions;
      • providing us with information in the course of performing a contract we have in place with you or your business;
      • contacting us offline, for example by telephone, SMS, email or by post;
      • interacting with us using social media; and
      • providing us with information in the course of your employment or engagement with us.
    • We may also obtain information from publicly available sources, including public databases, registers and records.
    • We may also receive information as part of a transaction which involves the transfer of your personal data to us from third parties. Where personal data is received from a third party, we will only process it for the purposes consistent with those for which it was originally collected, or as otherwise permitted by the Data Protection Act 2018 and the GDPR.

 

  1. Information we collect and purpose for processing

    • The types of personal data that we may collect, use, store and transfer about you will depend on the relationship we have with you. We have set out below the types of information collected together with the purpose and legal grounds for processing.

Customers/suppliers

Personal data

We may use your information based on the following legal grounds, for the following purposes:

  • Contact details such as your name, business email address, landline/mobile phone numbers
  • Employment information such as your position/title
  • If it is necessary for the performance of our contract or for the purposes of entering into a contract: for the purpose of negotiating and entering into contractual agreements with you, in the course of providing or receiving goods and services and handling any complaints or disputes raised by you.
  • If it is in our legitimate business interests to do so: for internal record keeping for administration purposes, in order to communicate with you regarding any goods, services and fees (or in relation to any changes to our Site or services); for the purpose of communications in relation to establishing a commercial relationship, communications regarding the service and fees; for dealing with any complaints or issues raised by you (including any enquiries submitted via our contact form); for insight purposes (e.g. to analyse market trends and demographics, to develop the service which we offer to you or other individuals in the future) and to send information to you about products and services which we think may be of interest to you for marketing purposes. You may at any time unsubscribe from receiving marketing communications from us (see further below).
  • Compliance with a legal obligation: in order to prevent fraud or money laundering or to comply with any other legal or regulatory requirements.
  • Where consent has been obtained: for regular business purposes and any of the above purposes.
  • Financial information such as bank details and transaction history
  • If it is necessary for the performance of our contract: for the purpose of issuing/receiving/making payments in the course of providing our services to you or receiving goods or services.
  • If it is in our legitimate business interests to do so: for the purpose of enquiring, requesting or purchasing goods or services; for internal record keeping for administration purposes, for the purpose of retaining evidence of payment transactions, for insight purposes (e.g. to analyse market trends and demographics in relation to our or your fees).
  • Compliance with a legal obligation: in order to prevent fraud or money laundering or to comply with any other relevant legal or regulatory requirements.
  • Where consent has been obtained: for any of the above purposes.

Employees / Contractors

Personal data

We may use your information based on the following legal grounds, for the following purposes:

  • Contact details such as your name, home/work addresses, email address
  • Employee information such as position/title, date of birth, employment history and CV, references from previous employers, professional specialisms, education and qualifications, languages spoken, salary and benefits, national insurance numbers, passports, identity cards etc.
  • Health information such as medical treatment or food allergies
  • Financial information such as bank details and transaction history
  • Compliance with a legal obligation and our legitimate interest in processing such information: for contacting individuals where we need to do so; for obtaining/verifying evidence of identity; for arranging the payment of remuneration and benefits; for ensuring job suitability; to confirm that the individual is entitled to work in the UK and for the purpose of security and prevention of crime.

Visitors of our Site

Personal data

We may use your information based on the following legal grounds, for the following purposes:

  • Technical and device information (including internet protocol (IP) address, log and usage data, device data, and data collected by Google reCAPTCHA)
  • If it is in our legitimate business interests to do so: we may use certain technical log data (such as your IP address) for research or statistical purposes; to identify and analyse user traffic and trends and for ensuring the proper administration of our Site (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data); for analytics and insight purposes e.g. to monitor market trends and demographics and to improve the user experience within our Site and marketing, and customer relationships and experiences; and to ensure that content from our Site is presented in the most effective manner for you and for your computer or other device from which you access our Site and/or the services we offer through the Site.
  • Cookies (and other web-tracking technology)
  • We may use “cookies” and other anonymous web tracking technologies (such as “web beacon” and “pixel tags”) implemented by us or by third party service providers. A cookie is a small file of letters and numbers that is sent to your device when you visit our Site, allowing our Site to recognise your browser if you revisit it. Cookies may store your online preferences and other information about the interaction you make in the Site.
  • Where we collect “essential” cookies we will rely on the legitimate interest We will only collect and process “non-essential” cookies where your consent has been obtained.
  • For more information on cookies and what you can do to disable certain cookies on our Site, please read our Cookie Policy.
  • We do not collect any special categories of personal data about you unless you are an employee (details set out above). Nor do we collect any information about criminal convictions and offences unless you are an employee.

 

  1. Sharing your information

    • Please note that personal information we are holding about you may be shared with and processed by:
      • any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006;
      • regulators, fraud prevention agencies or other third parties for the purposes of monitoring and/or enforcing our compliance with any legal and regulatory obligations, including statutory or regulatory reporting or the detection or prevention of unlawful acts;
      • any third party in the context of actual or threatened legal proceedings, provided we can do so lawfully (for example in response to a court order);
      • other parties and/or their professional advisers involved in a matter where required as part of the conduct of the services;
      • our own professional advisers and auditors for the purpose of seeking professional advice or to meet our audit responsibilities;
      • our service providers and agents (including their subcontractors) or third parties which process information on our behalf (e.g. internet services, hosting and data storage and security platform providers, our bank, and payment processing providers) so that they may help us to provide you with the products, services and information you have requested; and
      • any organisation to whom we may transfer our agreement with you or if we sell (or negotiate to sell) our business or any of our assets (provided that adequate protections and safeguards are in place).
    • Please note that we may include links within our Site to third party social media providers such as LinkedIn, but we will not share your information with such providers without your consent.

 

  1. International transfers

We will not transfer personal data relating to you to a country which is outside the UK or EEA unless:

  • the country or recipient is covered by an adequacy decision of the UK government under GDPR Article 45;
  • appropriate safeguards have been put in place which meet the requirements of GDPR Article 46 (for example using the approved International Data Transfer Agreement for transfers of personal data outside the UK); or
  • one of the derogations for specific situations under GDPR Article 49 is applicable to the transfer. These include (in summary):
    • the transfer is necessary to perform, or to form, a contract to which we are a party:
      • with you; or
      • with a third party where the contract is in your interests;
    • the transfer is necessary for the establishment, exercise or defence of legal claims;
    • you have provided your explicit consent to the transfer; or
    • the transfer is of a limited nature and is necessary for the purpose of our compelling legitimate interests.

 

  1. Retention of personal data

    • We have systems in place to periodically review and delete data that is no longer being used by us for the purposes set out in this Privacy Policy. Unless we are required or permitted by law to hold on to your data for a specific retention period, we will only hold your personal information within our systems:
      • if you are a visitor to our Site, for a period of 12 months since your last interaction with us;
      • if you are a customer or supplier, for a period of 6 years after you cease being a customer or supplier; and
      • if you are an employee, for a period of 6 years after you cease being an employee.
    • Where we no longer need your personal information, we will dispose of it in a secure manner.
    • In some circumstances you can ask us to delete your data: see your legal rights at paragraph 7 below for further information.
    • In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

 

  1. Your rights in respect of your personal data

    • You have certain rights under existing data protection laws, including the right to (upon written request) access a copy of your personal data that we are processing. In accordance with the Data Protection Act 2018 and the GDPR,
      • you have the following rights:
        • right to access: the right to request certain information about you, access to and copies of the personal information about you that we are holding (please note that you are entitled to request one copy of the personal information that we hold about you at no cost, but for any further copies, we reserve the right to charge a reasonable fee based on administration costs);
        • right to rectification: the right to have your personal information rectified if it is inaccurate or incomplete;
      • in certain circumstances, you will also have the following rights:
        • right to erasure/“right to be forgotten”: the right to withdraw your consent to our processing of the data (if the legal basis for processing is based on your consent) and the right to request that we delete or erase your personal information from our systems (however, this will not apply if we are required to hold on to the information for compliance with any legal obligation, for tax or accounting purposes, or if we require the information to establish or defend any legal claim);
        • right to restriction of use of your information: the right to stop us from using your personal information or limit the way in which we can use it;
        • right to data portability: the right to request that we return any information you have provided in a structured, commonly used and machine-readable format, or that we send it directly to another company, where technically feasible; and
        • right to object: the right to object to our use of your personal information including where we use it for our legitimate interests or for marketing purposes.
      • Please note that, if you withdraw your consent to the use of your personal information for purposes set out in this Privacy Policy, we may not be able to provide you with access to all or certain parts of our Site.
      • If you consider our use of your personal information to be unlawful, you have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office. Please see further information on their website: ico.org.uk.

 

  1. Automatic decision making

We do not make decisions based solely on automated data processing, including profiling.

 

  1. Security

    • We have put in place appropriate technical and organisational measures to protect your information from unauthorised or unlawful processing, accidental loss, destruction or damage.
    • We have also put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
    • We will do our best to protect your personal information, but we cannot guarantee the security of your information. It is important that all details of any username, password and/or other identification information created to access our Site are kept confidential by you and should not be disclosed to or shared with anyone.

 

  1. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time, for example to keep it up to date, to implement minor technical adjustments and improvements or to comply with legal requirements. We will always inform you on our Site when we update this Privacy Policy, so please read it when you visit the Site (the “last updated” reference tells you when we last updated our Privacy Policy).

 

  1. When you are located outside of the UK

    • Your access to the Site or use or receipt of the services that we offer to you may be subject to other data protection laws and you must comply with all applicable laws and regulations (whether of the country in which you reside or from which you access the Site, receive the services, or otherwise). We will not be liable or responsible if you break any such law or regulation.
    • We make no representation that the Site or our services are appropriate or available for use or receipt outside of the United Kingdom. If you access the Site or receive our services from any jurisdiction outside of the United Kingdom, you do so out of your own volition.

 

Our Privacy Policy was last reviewed on 08/05/2026 and is next due for review on 8/05/2027.