Back to Home

Privacy Policy

Last updated: March 2026 · Version 1.0

1. Data Controller

AI Armory is the data controller responsible for your personal data. This privacy policy applies to data collected through our website at aiarmory.shop and is compliant with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Data We Collect

We collect the following categories of personal data:

2.1 Account Data

When you create an account: your name and email address.

2.2 Purchase Data

When you make a purchase: products purchased, transaction amounts, order history, and billing information (excluding payment card details, which are processed directly by our payment providers).

2.3 Usage Data

When you visit the Site: anonymised analytics data including pages visited, time spent on pages, browser type, device type, and referring URLs. This data is collected only with your consent.

2.4 Newsletter Data

If you subscribe to our newsletter: your email address.

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Performance of a contract — Processing account and purchase data is necessary to fulfil your order and provide access to purchased products.
  • Legitimate interests — We use anonymised analytics data to improve the Site, understand usage patterns, and enhance user experience. We have assessed that this processing does not override your rights and freedoms.
  • Consent— Newsletter subscriptions are based on your explicit opt-in consent. You can withdraw this consent at any time by unsubscribing.

4. Payment Processing

We do not store, process, or have access to your payment card details. All payments are processed securely by our third-party payment providers: Stripe and PayPal. These providers are PCI DSS compliant and handle all card data directly. Please refer to their respective privacy policies for information on how they process your payment data.

5. Data Sharing

We share your personal data only with the following third parties, and only to the extent necessary to operate the Site and fulfil orders:

  • Stripe— Payment processing.
  • PayPal— Payment processing.
  • Vercel— Website hosting and infrastructure.

We do not sell, rent, or trade your personal data to any third party for marketing or any other purpose.

6. Data Retention

  • Account and purchase data — Retained for 6 years after your last transaction, as required by UK tax law (HMRC record-keeping obligations).
  • Newsletter data — Retained until you unsubscribe. Upon unsubscription, your email is deleted from our mailing list within 30 days.
  • Analytics data — Anonymised and retained for a maximum of 26 months, after which it is automatically deleted.

7. Your Rights Under UK GDPR

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

  • Right of access — You can request a copy of the personal data we hold about you.
  • Right to rectification — You can request that we correct any inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”) — You can request deletion of your personal data, subject to our legal retention obligations.
  • Right to restrict processing — You can request that we limit how we use your data.
  • Right to data portability — You can request your data in a structured, commonly-used, machine-readable format.
  • Right to object — You can object to processing based on legitimate interests.
  • Right to withdraw consent — Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@aiarmory.shop. We will respond within one month of receiving your request.

8. International Data Transfers

Some of our service providers (Vercel, Stripe) are based in the United States. Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office (ICO), to protect your data to the same standard as required under UK GDPR.

9. Children

Our Site and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a person under 18, we will take steps to delete that data promptly.

10. Cookies

For detailed information about how we use cookies, please see our Cookie Policy.

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

We encourage you to contact us first at support@aiarmory.shop so we have the opportunity to resolve any concerns directly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

13. Contact

For any questions about this Privacy Policy or your personal data, please contact us at:

Email: support@aiarmory.shop