Who We Are
This website is operated by:
Trading name: AMRO Security
Email: Info@amrosecurity.co.uk
Telephone: +44 1322531145
For the purposes of UK data-protection law, Amro Security is the controller of personal information where we decide how and why that information is used.
Our online store is hosted by Shopify. Shopify processes certain personal information to provide its ecommerce platform and may also process information for its own consumer-facing services.
Personal information we collect
Depending on how you interact with us, we may collect the following categories of information.
Identity information
- Name
- Account username
- Title, where provided
- Business or organisation name
Contact information
- Email address
- Telephone number
- Billing address
- Delivery address
Order and transaction information
- Products ordered
- Order number
- Order value
- Delivery method
- Payment status
- Returns, refunds and warranty information
- Correspondence concerning an order
Complete payment-card information is normally handled by Shopify and the payment provider selected at checkout. We generally receive transaction details and confirmation of whether payment was successful rather than your complete card number.
Account information
- Login details
- Saved addresses
- Order history
- Account preferences
Customer-support information
- Messages submitted through our contact form
- Emails and chat conversations
- Photographs, screenshots or videos you send us
- Product troubleshooting information
- Reviews or feedback
Website and technical information
- Internet Protocol address
- Browser and device type
- Operating system
- Pages visited
- Referral source
- Approximate location derived from technical information
- Cookie identifiers
- Website interaction and shopping-basket activity
Marketing information
- Newsletter subscription status
- Marketing preferences
- Responses to promotions
- Engagement with marketing emails
We do not intentionally request special-category information such as health, religious, political or biometric information through our online store.
How We Obtain Information
We may receive personal information:
- Directly from you when you order, create an account, contact us or subscribe to marketing
- Automatically when you use our website
- From Shopify and connected Shopify services
- From payment providers
- From delivery, fulfilment and tracking providers
- From fraud-prevention and security providers
- From marketing, advertising and analytics providers
- From applications and integrations installed on our store
- From social-media platforms when you interact with our accounts or advertisements
- From another person who places an order for delivery to you
Where someone provides your details as a recipient, they must have a lawful reason to provide them.
How and Why We Use Information
We use personal information for the following purposes.
Processing and fulfilling orders
We use identity, contact, order and transaction information to:
- Accept and process purchases
- Take payment
- Confirm orders
- Arrange delivery
- Provide tracking
- Process cancellations, returns and refunds
- Provide warranty and after-sales assistance
Our principal lawful basis is that processing is necessary to perform our contract with you or take steps at your request before entering into a contract.
Customer service
We use contact, order and correspondence information to answer questions, resolve problems and provide product guidance.
Depending on the enquiry, our lawful basis is performance of a contract or our legitimate interest in supporting customers and operating our business effectively.
Fraud prevention and website security
We may use transaction, account and technical information to:
- Confirm transactions
- Detect suspicious activity
- Prevent fraud
- Protect accounts
- Maintain website security
- Enforce our terms
Our lawful bases may include legitimate interests and compliance with legal obligations.
Legal and financial obligations
We may process information to:
- Maintain accounting and tax records
- Respond to legal claims
- Comply with consumer-protection requirements
- Respond to lawful requests from authorities
- Meet regulatory obligations
The lawful basis is compliance with a legal obligation or, where applicable, our legitimate interests in establishing or defending legal claims.
Improving our website and services
We may use aggregated or appropriately limited website information to understand performance, improve navigation, diagnose technical problems and develop our services.
We rely on legitimate interests for essential operational analysis. Where non-essential cookies or tracking technologies are involved, we rely on consent where required.
Marketing
We may use your contact details to send information about AMRO Security products, promotions or news where:
- You have consented; or
- Applicable law permits us to contact an existing customer about our own similar products.
You can unsubscribe at any time.
Reviews and feedback
We use reviews and feedback to understand customer experiences, improve products and display customer opinions where permission has been provided.
Our lawful basis may be consent or our legitimate interest in improving and promoting our business.
Shopify, Applications and Connected Products
Shopify
Shopify provides the technology used to operate our website, checkout, customer accounts and parts of our payment and privacy infrastructure.
Information submitted through the store may therefore be processed by Shopify and its service providers.
Store applications
We may use Shopify applications for services such as:
- Order tracking
- Customer chat
- Reviews
- Rewards
- Email marketing
- Analytics
- Fraud prevention
- Delivery and fulfilment
- Cookie consent
- Customer support
These providers receive only the information reasonably needed to provide their service, subject to their contractual and legal obligations.
Connected-product applications
Some smart locks, video doorbells and cameras may connect to applications or cloud services operated by third-party providers.
Those applications may process information such as:
- Device identifiers
- Account details
- Access logs
- Motion notifications
- Video or audio
- Images
- Unlocking records
- Face or fingerprint templates
Their collection and use of information is governed by the privacy information supplied with the relevant application or device.
AMRO itself receives facial-recognition templates, fingerprints or other biometric information, this policy needs specialist revision before publication.
Shopify: Your data is stored on Shopify's secure servers. Review Shopify's privacy policy for details on their data practices.
Who We Share Information With
We may share relevant information with:
- Shopify and its affiliated services
- Payment processors
- Banks and payment networks
- Delivery companies
- Warehousing and fulfilment providers
- Order-tracking services
- Customer-support and chat providers
- Email and communications providers
- Website hosting, security and technical providers
- Analytics and advertising providers, subject to your cookie choices
- Accountants, insurers, solicitors and professional advisers
- Government authorities, regulators, courts or law-enforcement bodies where legally required
- A purchaser, investor or successor where our business or assets are sold, reorganised or transferred
We require service providers to process information appropriately and only for authorised purposes.
We do not sell personal information for money.
In some jurisdictions, the use of advertising cookies or sharing identifiers with advertising providers may legally be treated as a “sale,” “sharing” or use for targeted advertising. Where applicable, eligible visitors may use our cookie controls or data-sharing opt-out page.
International Transfers
Some service providers may process personal information outside the United Kingdom.
Where UK personal information is transferred internationally, we use an appropriate legal mechanism where required, which may include:
- A UK adequacy regulation
- The UK International Data Transfer Agreement
- The UK Addendum to approved standard contractual clauses
- Another safeguard permitted by applicable law
You may contact us to request further information about the safeguards used for relevant international transfers.
Customers outside the UK may also have additional rights under their local privacy laws.
How long we retain information and how we protect it
We retain personal information only for as long as reasonably needed for the purpose for which it was collected, including legal, accounting, tax, fraud-prevention and dispute-resolution requirements.
Information - Intended retention period
Orders, payments, invoices and accounting records - Normally six years from the end of the relevant company financial year
Customer accounts - While active and normally up to two years after closure
General customer support correspondence - Normally up to two years after the matter is closed
Returns and warranty records - For the applicable claim or warranty period and any necessary legal period
Marketing information - Until you unsubscribe or we determine that it is no longer appropriate to retain it
Marketing suppression records - As long as necessary to ensure we respect your opt-out
Cookie and analytics information - According to the periods described in our Cookie Policy or cookie-preference tool
Fraud and security records - For as long as reasonably necessary to protect the business and comply with legal obligations
UK companies are generally required to retain relevant financial and accounting records for six years from the end of the financial year to which they relate.
We use reasonable organisational and technical measures intended to protect information from loss, misuse, alteration, unauthorised access or disclosure.
No internet-based service can guarantee absolute security. You are responsible for keeping account passwords confidential and for contacting us if you suspect unauthorised account activity.
Cookies, analytics and marketing communications
Cookies
Our website uses cookies and similar technologies to:
- Operate checkout and shopping-basket functions
- Keep the website secure
- Remember settings
- Understand website performance
- Measure advertising
- Personalise content where enabled
Strictly necessary technologies may operate without consent where legally permitted. Non-essential analytics, advertising and personalisation technologies should not be activated for UK users before valid consent has been obtained.
You can manage your choices through our cookie banner or the Cookie Preferences link in the footer.
More information should be provided in a separate Cookie Policy.
Email marketing
You can unsubscribe from marketing emails by:
- Using the unsubscribe link in the email
- Updating your customer preferences
- Contacting us
You have an absolute right to object to the use of your personal information for direct marketing.
Unsubscribing from marketing does not prevent us from sending necessary service messages about an order, account, delivery, return or security issue.
Your Rights, Complaints and Contact Information
Depending on your location and the circumstances, you may have the right to:
- Be informed about our use of your personal information
- Request access to your information
- Request correction of inaccurate or incomplete information
- Request deletion in certain circumstances
- Request restriction of processing
- Object to processing based on legitimate interests
- Object to direct marketing
- Receive certain information in a portable format
- Withdraw consent where processing relies on consent
- Raise concerns about significant decisions made solely through automated processing
These rights are not absolute and may depend on the lawful basis and circumstances.
To exercise a right, contact:
AMRO Security Privacy Enquiries
Email: Info@amrosecurity.co.uk
Telephone:+44 1322 531145
We may ask for reasonable information to confirm your identity before responding.
Complaints
Please contact us first so that we can investigate your concern.
You also have the right to complain to the UK Information Commissioner’s Office if you believe your information has been handled unlawfully.
Customers outside the UK may also be entitled to complain to their local data-protection authority.
Children
Our website and products are not directed at children under 18, and children should not place orders through the website.
If we learn that we have collected personal information from a child without appropriate authorisation, we will take reasonable steps to delete it.
Changes to this policy
We may update this Privacy Policy when our services, technology, applications or legal obligations change.
The latest version will be published on this page with an updated revision date. Where a change materially affects how we use information, we will provide additional notice where appropriate.
