Privacy policy

Privacy & data Effective & last updated: 26 February 2025

1. Introduction

At Armor-X New Zealand ("we", "our", "us"), we value your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website https://armor-x.co.nz/, purchase our products, or interact with us.

By using our website, you agree to this policy. If you do not agree, please discontinue use.

2. What information we collect

2.1 Information you provide to us

• Personal details: name, email, phone number, billing/shipping address.
• Transaction data: order details, payment information (processed securely via third parties).
• Account information: if you create an account, we store login credentials.

2.2 Information collected automatically

• Device & browser data: IP address, browser type, OS.
• Website interaction data: pages visited, time spent, actions taken.
• Cookies & tracking technologies: see Section 7 for details.

2.3 Information from third parties

• Payment processors: we do not store credit card details; payments are processed securely via Shopify Payments, PayPal, or other providers.
• Analytics & advertising: we use Google Analytics, Meta (Facebook) Pixel, and other tracking tools to measure site activity.

3. How we use your information

Purpose	Lawful basis (Privacy Act 2020 & GDPR)
Processing transactions & shipping	Contractual necessity
Customer support & communication	Legitimate interest
Fraud prevention & security	Legal obligation
Marketing (email/SMS)	Consent (opt-in required)
Analytics & website improvements	Legitimate interest

You may opt out of marketing communications at any time (see Section 6).

4. How long we keep your data

We retain personal data only as long as necessary for its intended purpose.

Data type	Retention period
Order history	7 years (for tax/legal compliance)
Account information	Until account deletion request
Marketing preferences	Until you opt out

When no longer needed, data is securely deleted or anonymised.

5. Who we share your data with

We do not sell your personal data. However, we share necessary data with:

• Payment providers: Shopify Payments, PayPal, Stripe (for transaction processing).
• Shipping partners: NZ Post, DHL (to fulfil orders).
• Marketing & analytics: Google, Meta (for advertising & analytics).
• Legal authorities: if required by law (fraud, disputes, investigations).

Each provider has its own privacy policies. We recommend reviewing them.

6. Your privacy rights

Under New Zealand's Privacy Act 2020, you have the right to:

• Access: request a copy of your personal data.
• Correct: update incorrect or incomplete information.
• Delete: request deletion of your data (unless legally required).
• Restrict processing: limit how we use your data.
• Withdraw consent: opt out of marketing emails, cookies, or tracking.

To exercise your rights, email info@armor-x.co.nz with the subject line "Privacy Request".

7. Cookies & tracking

We use cookies for website functionality, analytics, and advertising. You can control cookie settings via your browser or our cookie consent banner.

Type of cookie	Purpose
Essential cookies	Required for site functionality (e.g. checkout).
Analytics cookies	Track visitor behaviour (Google Analytics).
Marketing cookies	Used for ads & retargeting (Facebook, Google Ads).

You can manage cookie preferences at any time via our banner or browser settings.

8. Data security measures

• SSL encryption: all transactions and sensitive data are encrypted.
• Firewall & DDoS protection: our hosting and Shopify have security layers.
• PCI compliance: payment data follows PCI-DSS standards.
• Limited access: only authorised personnel can view personal data.

Despite our efforts, no method of transmission is 100% secure. Contact us if you suspect a data breach.

9. International data transfers

If you access our site from outside New Zealand, your data may be transferred internationally (e.g. via Shopify, Google). We ensure adequate protection through standard security measures.

10. Children's privacy

We do not knowingly collect data from individuals under 18 years old. If a minor has provided data, parents can request its deletion.

11. Changes to this privacy policy

We may update this policy from time to time. Changes will be posted here, with a last updated date at the top. If we make significant changes, we will notify you via email or website alert.

12. Contact us