Privacy Statement

Armage LLC (“Armage”, “we”, “us”) is a limited liability company organised in Florida, United States.

For the personal data described here, Armage is the controller (the “business” under US state privacy laws): we decide why and how it is processed.

This Statement covers the public website at arm-age.com, the forms on it, and the emails we exchange with you as a result.

It does not cover:

• services we provide to clients under a written agreement, including client portals. Those are governed by the agreement and any notice provided with the service;
• websites and services run by others, even when we link to them.

What you give us

What is collected automatically

• Connection data. Like every website, ours receives your IP address, browser type, the page requested and the time of the request. Our hosting provider processes this to deliver the site and protect it from attacks.
• Abuse prevention. When you send a form, we briefly use your IP address and similar technical signals to prevent spam and abuse. They are not used to identify or profile you.

What we do not collect

• No analytics, advertising or social media trackers (see Cookies and Storage).
• No accounts, passwords or payment details on this website.
• No health information. Armage does not process patient data. Do not send patient, medical or other health information through our forms or by email. If we receive it, we delete it and ask you to resend without it.

Please only send personal data about other people, such as colleagues, when you are entitled to share it.

We use personal data only for the purposes below. Where the EU or UK GDPR applies, each has a legal basis.

We do not add you to marketing lists because you contacted us. If we ever offer a newsletter, it will be opt-in, with an unsubscribe link in every email.

No decision about you that has legal or similarly significant effects is made solely by automated means. People at Armage read and answer enquiries and review applications.

We do not use the personal data you send through this website to train artificial intelligence models.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

We share personal data only with service providers that process it on our instructions under contract:

• Hosting and security: delivers the website, processes form submissions and protects the site against attacks;
• Email delivery: sends the form notification to our team and the confirmation email to you;
• Business email: where our correspondence with you is kept.

You can ask us for the names of our current providers at any time.

We may also disclose personal data:

• to professional advisers, such as lawyers and accountants, under confidentiality duties;
• when required by law, or to protect the rights, safety or property of Armage or others;
• as part of a merger, acquisition or sale of assets, in which case this Statement continues to apply to your personal data.

Armage is based in the United States. Our providers process personal data in the United States and in other countries where they operate.

If you are in the European Economic Area, the United Kingdom or Switzerland, transfers of your personal data are protected by the safeguards in our providers’ data processing terms, such as the European Commission’s Standard Contractual Clauses and the UK Addendum, or by the EU–US Data Privacy Framework where the provider is certified.

We keep personal data only as long as we need it:

• Enquiries: for as long as we are in conversation or working together, then up to 24 months after our last contact, unless a contract or the law requires longer.
• Applications: up to 12 months after we decide on your application, so we can consider you for other roles. Ask us and we will delete it sooner.
• Abuse-prevention signals: only briefly.
• Connection and email delivery logs: the limited periods set by our providers for security and troubleshooting.

When personal data is no longer needed, we delete it or make it anonymous.

We protect personal data with measures appropriate to the risk, including:

• encrypted connections for the website and its forms;
• strict technical controls on what can run on our pages;
• checks on every form submission, and protection against automated abuse;
• access to enquiries and applications limited to the people who need it.

No method of transmission or storage is completely secure. If you believe you have found a vulnerability, please follow our Vulnerability Disclosure Policy.

Depending on where you live, you may have the right to:

• know what personal data we hold about you and get a copy;
• correct inaccurate personal data;
• have your personal data deleted;
• object to, or ask us to restrict, how we use it;
• receive it in a portable format;
• withdraw consent where we rely on it, without affecting earlier processing.

We honour these requests wherever you live, as far as the law allows. To make one, email info@arm-age.com from the address you used with us. We may ask for information to confirm your identity.

We acknowledge requests within five business days. Completing a request can take longer, within the deadline set by the law that applies to you:

• EEA, UK and Switzerland: within one month of receiving your request. For complex or numerous requests this can be extended by up to two further months, in which case we tell you within the first month and explain why.
• California and other US states with privacy laws: within 45 calendar days of receiving your request. When reasonably necessary this can be extended once by a further 45 days, in which case we tell you within the first 45 days.

If you are in the EEA, the UK or Switzerland, you can also complain to your data protection authority. We would appreciate the chance to address your concern first.

This section applies to residents of California and other US states with comprehensive privacy laws.

• Categories collected in the last 12 months: identifiers (name, email address, IP address), professional or employment information (organisation, role, experience) and internet activity limited to connection data. Sources, purposes and recipients are described above.
• Sale and sharing: we do not sell or share personal information, and have not in the last 12 months.
• Sensitive personal information: we do not ask for it and do not use it to infer characteristics about you.
• Opt-out signals: we honour Global Privacy Control. Because we do not sell or share personal information, no further opt-out is needed.
• Your rights: to know, access, correct and delete, and not to be discriminated against for using them. An authorised agent may make a request for you with your written permission; we will verify both of you.

arm-age.com is for businesses and professionals and is not directed to children under 16. We do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it.

We update this Statement when our practices change, for example before we add a new provider or a new way of collecting data. The date at the top shows the latest version. If a change is significant, we will say so on this page.

Armage LLC. Email info@arm-age.com for privacy questions and requests.