PRIVACY & DATA PROTECTION

Privacy Policy

Last updated: 5 August 2026
This Privacy Policy explains how AMRO Security collects, uses, stores and shares personal information when you visit our website, purchase a product, contact us, create an account or otherwise interact with our services.
We process personal information in accordance with applicable data-protection laws, including the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003, as amended.

Who We Are

This website is operated by:

Trading name: AMRO Security

Email: Info@amrosecurity.co.uk

Telephone: +44 1322531145

For the purposes of UK data-protection law, Amro Security is the controller of personal information where we decide how and why that information is used.

Our online store is hosted by Shopify. Shopify processes certain personal information to provide its ecommerce platform and may also process information for its own consumer-facing services.

Personal information we collect

Depending on how you interact with us, we may collect the following categories of information.

Identity information

  • Name
  • Account username
  • Title, where provided
  • Business or organisation name

Contact information

  • Email address
  • Telephone number
  • Billing address
  • Delivery address

Order and transaction information

  • Products ordered
  • Order number
  • Order value
  • Delivery method
  • Payment status
  • Returns, refunds and warranty information
  • Correspondence concerning an order

Complete payment-card information is normally handled by Shopify and the payment provider selected at checkout. We generally receive transaction details and confirmation of whether payment was successful rather than your complete card number.

Account information

  • Login details
  • Saved addresses
  • Order history
  • Account preferences

Customer-support information

  • Messages submitted through our contact form
  • Emails and chat conversations
  • Photographs, screenshots or videos you send us
  • Product troubleshooting information
  • Reviews or feedback

Website and technical information

  • Internet Protocol address
  • Browser and device type
  • Operating system
  • Pages visited
  • Referral source
  • Approximate location derived from technical information
  • Cookie identifiers
  • Website interaction and shopping-basket activity

Marketing information

  • Newsletter subscription status
  • Marketing preferences
  • Responses to promotions
  • Engagement with marketing emails

We do not intentionally request special-category information such as health, religious, political or biometric information through our online store.

How We Obtain Information

We may receive personal information:

  • Directly from you when you order, create an account, contact us or subscribe to marketing
  • Automatically when you use our website
  • From Shopify and connected Shopify services
  • From payment providers
  • From delivery, fulfilment and tracking providers
  • From fraud-prevention and security providers
  • From marketing, advertising and analytics providers
  • From applications and integrations installed on our store
  • From social-media platforms when you interact with our accounts or advertisements
  • From another person who places an order for delivery to you

Where someone provides your details as a recipient, they must have a lawful reason to provide them.

How and Why We Use Information

We use personal information for the following purposes.

Processing and fulfilling orders

We use identity, contact, order and transaction information to:

  • Accept and process purchases
  • Take payment
  • Confirm orders
  • Arrange delivery
  • Provide tracking
  • Process cancellations, returns and refunds
  • Provide warranty and after-sales assistance

Our principal lawful basis is that processing is necessary to perform our contract with you or take steps at your request before entering into a contract.

Customer service

We use contact, order and correspondence information to answer questions, resolve problems and provide product guidance.

Depending on the enquiry, our lawful basis is performance of a contract or our legitimate interest in supporting customers and operating our business effectively.

Fraud prevention and website security

We may use transaction, account and technical information to:

  • Confirm transactions
  • Detect suspicious activity
  • Prevent fraud
  • Protect accounts
  • Maintain website security
  • Enforce our terms

Our lawful bases may include legitimate interests and compliance with legal obligations.

Legal and financial obligations

We may process information to:

  • Maintain accounting and tax records
  • Respond to legal claims
  • Comply with consumer-protection requirements
  • Respond to lawful requests from authorities
  • Meet regulatory obligations

The lawful basis is compliance with a legal obligation or, where applicable, our legitimate interests in establishing or defending legal claims.

Improving our website and services

We may use aggregated or appropriately limited website information to understand performance, improve navigation, diagnose technical problems and develop our services.

We rely on legitimate interests for essential operational analysis. Where non-essential cookies or tracking technologies are involved, we rely on consent where required.

Marketing

We may use your contact details to send information about AMRO Security products, promotions or news where:

  • You have consented; or
  • Applicable law permits us to contact an existing customer about our own similar products.

You can unsubscribe at any time.

Reviews and feedback

We use reviews and feedback to understand customer experiences, improve products and display customer opinions where permission has been provided.

Our lawful basis may be consent or our legitimate interest in improving and promoting our business.

Shopify, Applications and Connected Products

Shopify

Shopify provides the technology used to operate our website, checkout, customer accounts and parts of our payment and privacy infrastructure.

Information submitted through the store may therefore be processed by Shopify and its service providers.

Store applications

We may use Shopify applications for services such as:

  • Order tracking
  • Customer chat
  • Reviews
  • Rewards
  • Email marketing
  • Analytics
  • Fraud prevention
  • Delivery and fulfilment
  • Cookie consent
  • Customer support

These providers receive only the information reasonably needed to provide their service, subject to their contractual and legal obligations.

Connected-product applications

Some smart locks, video doorbells and cameras may connect to applications or cloud services operated by third-party providers.

Those applications may process information such as:

  • Device identifiers
  • Account details
  • Access logs
  • Motion notifications
  • Video or audio
  • Images
  • Unlocking records
  • Face or fingerprint templates

Their collection and use of information is governed by the privacy information supplied with the relevant application or device.

AMRO itself receives facial-recognition templates, fingerprints or other biometric information, this policy needs specialist revision before publication.

Shopify: Your data is stored on Shopify's secure servers. Review Shopify's privacy policy for details on their data practices.

Who We Share Information With

We may share relevant information with:

  • Shopify and its affiliated services
  • Payment processors
  • Banks and payment networks
  • Delivery companies
  • Warehousing and fulfilment providers
  • Order-tracking services
  • Customer-support and chat providers
  • Email and communications providers
  • Website hosting, security and technical providers
  • Analytics and advertising providers, subject to your cookie choices
  • Accountants, insurers, solicitors and professional advisers
  • Government authorities, regulators, courts or law-enforcement bodies where legally required
  • A purchaser, investor or successor where our business or assets are sold, reorganised or transferred

We require service providers to process information appropriately and only for authorised purposes.

We do not sell personal information for money.

In some jurisdictions, the use of advertising cookies or sharing identifiers with advertising providers may legally be treated as a “sale,” “sharing” or use for targeted advertising. Where applicable, eligible visitors may use our cookie controls or data-sharing opt-out page.

International Transfers

Some service providers may process personal information outside the United Kingdom.

Where UK personal information is transferred internationally, we use an appropriate legal mechanism where required, which may include:

  • A UK adequacy regulation
  • The UK International Data Transfer Agreement
  • The UK Addendum to approved standard contractual clauses
  • Another safeguard permitted by applicable law

You may contact us to request further information about the safeguards used for relevant international transfers.

Customers outside the UK may also have additional rights under their local privacy laws.

How long we retain information and how we protect it

We retain personal information only for as long as reasonably needed for the purpose for which it was collected, including legal, accounting, tax, fraud-prevention and dispute-resolution requirements.

Information - Intended retention period

Orders, payments, invoices and accounting records - Normally six years from the end of the relevant company financial year

Customer accounts - While active and normally up to two years after closure

General customer support correspondence - Normally up to two years after the matter is closed

Returns and warranty records - For the applicable claim or warranty period and any necessary legal period

Marketing information - Until you unsubscribe or we determine that it is no longer appropriate to retain it

Marketing suppression records - As long as necessary to ensure we respect your opt-out

Cookie and analytics information - According to the periods described in our Cookie Policy or cookie-preference tool

Fraud and security records - For as long as reasonably necessary to protect the business and comply with legal obligations

UK companies are generally required to retain relevant financial and accounting records for six years from the end of the financial year to which they relate.

We use reasonable organisational and technical measures intended to protect information from loss, misuse, alteration, unauthorised access or disclosure.

No internet-based service can guarantee absolute security. You are responsible for keeping account passwords confidential and for contacting us if you suspect unauthorised account activity.

Cookies, analytics and marketing communications

Cookies

Our website uses cookies and similar technologies to:

  • Operate checkout and shopping-basket functions
  • Keep the website secure
  • Remember settings
  • Understand website performance
  • Measure advertising
  • Personalise content where enabled

Strictly necessary technologies may operate without consent where legally permitted. Non-essential analytics, advertising and personalisation technologies should not be activated for UK users before valid consent has been obtained.

You can manage your choices through our cookie banner or the Cookie Preferences link in the footer.

More information should be provided in a separate Cookie Policy.

Email marketing

You can unsubscribe from marketing emails by:

  • Using the unsubscribe link in the email
  • Updating your customer preferences
  • Contacting us

You have an absolute right to object to the use of your personal information for direct marketing.

Unsubscribing from marketing does not prevent us from sending necessary service messages about an order, account, delivery, return or security issue.

Your Rights, Complaints and Contact Information

Depending on your location and the circumstances, you may have the right to:

  • Be informed about our use of your personal information
  • Request access to your information
  • Request correction of inaccurate or incomplete information
  • Request deletion in certain circumstances
  • Request restriction of processing
  • Object to processing based on legitimate interests
  • Object to direct marketing
  • Receive certain information in a portable format
  • Withdraw consent where processing relies on consent
  • Raise concerns about significant decisions made solely through automated processing

These rights are not absolute and may depend on the lawful basis and circumstances.

To exercise a right, contact:

AMRO Security Privacy Enquiries

Email: Info@amrosecurity.co.uk

Telephone:+44 1322 531145

We may ask for reasonable information to confirm your identity before responding.

Complaints

Please contact us first so that we can investigate your concern.

You also have the right to complain to the UK Information Commissioner’s Office if you believe your information has been handled unlawfully.

Customers outside the UK may also be entitled to complain to their local data-protection authority.

Children

Our website and products are not directed at children under 18, and children should not place orders through the website.

If we learn that we have collected personal information from a child without appropriate authorisation, we will take reasonable steps to delete it.

Changes to this policy

We may update this Privacy Policy when our services, technology, applications or legal obligations change.

The latest version will be published on this page with an updated revision date. Where a change materially affects how we use information, we will provide additional notice where appropriate.

Privacy contact information
Trading name
AMRO Security
Legal name
AMRO Security
Privacy email