Additional Information

ARMEXIS respects your privacy and is committed to protecting personal data.

This Privacy Notice explains how we collect, use, disclose, retain, and protect personal data relating to people who interact with us. This includes customers, suppliers, business partners, professional advisers, contractors, consultants, job applicants, website visitors, visitors to our premises, and other professional contacts.

It should be read alongside any more specific privacy notice provided to you, for example during recruitment, employment, site access, security screening, or another activity involving particular uses of personal data.

The controller responsible for the personal data covered by this notice is:

 ARMEXIS

In this notice, “ARMEXIS”, “we”, “us”, and “our” refer to the legal entity identified above.

Questions about this notice, our handling of personal data, or the exercise of your data protection rights should be directed to:

ARMEXIS Data Protection Team

Email: privacy@armexis.co.uk

Where another member of the ARMEXIS group processes personal data as a separate controller, the identity of that entity will be explained at the relevant time.

The personal data we collect depends on the nature of your relationship with ARMEXIS and the way in which you interact with us. It may include:

• your name, title, employer, job title, and professional responsibilities;
• business and personal contact details;
• correspondence, meeting records, and information about our relationship with you;
• contractual, procurement, payment, invoicing, and account information;
• identity, right-to-work, qualification, employment history, and recruitment information;
• visitor records, access credentials, CCTV images, and site-security information;
• information required for due diligence, compliance, vetting, screening, or security purposes;
• health and safety information where relevant and lawful;
• information concerning disputes, complaints, incidents, investigations, or legal claims; and
• technical information associated with your use of our website, including your IP address, browser, device, referring website, pages visited, and date and time of access.

We seek to collect only the personal data that is reasonably necessary for the relevant purpose.

We may collect personal data:

• directly from you, including through correspondence, meetings, website forms, applications, contracts, visits, and other interactions;
• from the organisation for which you work;
• from customers, suppliers, contractors, business partners, and professional advisers;
• from recruitment agencies, referees, due diligence providers, and screening or vetting bodies;
• from government departments, regulators, law enforcement bodies, or other public authorities where lawful;
• from publicly available sources, including corporate registers, professional websites, and business publications; and
• through our website, systems, premises, access controls, and security arrangements.

Where we obtain personal data from another source, we will handle it in accordance with applicable data protection law.

We may process personal data for the following purposes.

We use personal data to:

• respond to enquiries;
• communicate with customers, suppliers, partners, advisers, and other stakeholders;
• manage existing and prospective business relationships;
• arrange meetings, demonstrations, visits, and events; and
• maintain appropriate records of discussions, decisions, and correspondence.

Depending on the circumstances, this processing is undertaken because it is necessary to take steps before entering into a contract, to perform a contract, or for our legitimate interests in operating and developing our business and maintaining professional relationships.

We use personal data to:

• evaluate prospective customers, suppliers, contractors, and partners;
• negotiate, enter into, and administer contracts;
• procure goods and services;
• supply products, services, and technical support;
• administer accounts, payments, invoices, and commercial records; and
• manage quality, delivery, warranty, and contractual matters.

This processing may be necessary for contractual purposes, to comply with legal obligations, or for our legitimate interests in managing our commercial operations and protecting our contractual position.

When you apply for a role or engagement with ARMEXIS, we may use personal data to:

• assess your application, qualifications, experience, and suitability;
• communicate with you about the recruitment process;
• verify your identity, references, qualifications, and right to work;
• undertake lawful screening, vetting, or security checks where required; and
• establish and administer an employment or contractor relationship if your application is successful.

This processing may be necessary to take steps before entering into a contract, to comply with legal obligations, or for our legitimate interests in recruiting appropriately qualified, trustworthy, and suitable personnel.

Successful applicants will receive further privacy information relevant to the employment or engagement relationship.

We may use personal data to:

• protect our people, premises, systems, information, intellectual property, and other assets;
• administer visitor access and site-security arrangements;
• operate CCTV, access-control systems, and visitor records;
• manage health, safety, environmental, and security risks;
• prevent and investigate unauthorised access, misconduct, fraud, crime, and security incidents; and
• meet customer, contractual, regulatory, governmental, or lawful security requirements.

This processing may be necessary to comply with legal obligations or for our legitimate interests in maintaining safe and secure operations and protecting confidential or security-sensitive information.

We may process personal data to:

• comply with legal, regulatory, contractual, tax, accounting, audit, and reporting obligations;
• undertake proportionate due diligence and compliance checks;
• establish, exercise, or defend legal rights and claims;
• investigate complaints, incidents, suspected wrongdoing, or policy breaches;
• respond to lawful requests from courts, regulators, government departments, or law enforcement bodies; and
• maintain appropriate corporate, compliance, and audit records.

This processing may be necessary to comply with a legal obligation, for the establishment, exercise, or defence of legal claims, or for our legitimate interests in maintaining effective governance, compliance, and risk management.

We may use website and technical data to:

• operate and secure our website;
• identify and resolve technical problems;
• understand how our website is used;
• improve its content, performance, and usability; and
• protect our website and systems from misuse or attack.

This processing is undertaken where necessary for our legitimate interests in operating a secure and effective website. Where consent is legally required for a cookie or similar technology, we will request that consent separately.

Depending on the processing concerned, we may rely on one or more of the following lawful bases:

• your consent;
• taking steps at your request before entering into a contract;
• performing a contract with you;
• compliance with a legal obligation;
• protection of someone’s vital interests;
• the performance of a task carried out in the public interest, where applicable; or
• our legitimate interests, or those of a third party, provided those interests are not overridden by your rights and interests.

Where we rely on legitimate interests, those interests may include:

• operating and developing our business;
• managing professional and commercial relationships;
• protecting people, premises, systems, assets, and information;
• maintaining cyber, physical, personnel, and supply-chain security;
• preventing fraud and other unlawful activity;
• conducting proportionate due diligence;
• managing risk, disputes, and legal claims; and
• maintaining business continuity and operational resilience.

In limited circumstances, we may need to process particularly sensitive personal data, such as health information, or personal data relating to criminal allegations, proceedings, or convictions.

We will process this information only where it is necessary, proportionate, and permitted by law. Where required, we will identify an appropriate additional legal condition, implement safeguards, restrict access, and maintain any policy documentation required by law.

Relevant circumstances may include employment and occupational-health obligations, health and safety, safeguarding, security screening, vetting, the prevention or detection of unlawful acts, and the establishment, exercise, or defence of legal claims.

We may share personal data, where necessary and lawful, with:

• ARMEXIS group companies;
• customers, suppliers, subcontractors, and business partners;
• professional advisers, including legal advisers, accountants, auditors, and insurers;
• banks, payment providers, and financial institutions;
• IT, communications, cloud-hosting, cyber-security, and data-storage providers;
• recruitment, human resources, payroll, occupational-health, screening, and vetting providers;
• security, facilities-management, and site-access providers;
• government departments, regulators, courts, tribunals, law enforcement bodies, and other public authorities; and
• parties involved in a proposed or completed corporate transaction, restructuring, investment, or transfer of all or part of our business.

We do not sell personal data.

Where a service provider processes personal data on our behalf, we require it to use that information only for authorised purposes and to protect it appropriately.

We may also disclose personal data where required by law or where reasonably necessary to protect legal rights, safety, security, or the integrity of our operations.

Some recipients or service providers may be located outside the United Kingdom, or may store or access personal data from another country.

Where personal data is transferred internationally, we will use a lawful transfer mechanism and appropriate safeguards where required. These may include a UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another mechanism permitted by data protection law.

You may contact the ARMEXIS Data Protection Team for further information about the safeguards relevant to a particular transfer.

We use proportionate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure, access, or misuse.

These measures may include access controls, authentication, staff training, confidentiality obligations, secure storage, network and system security, supplier assurance, incident-management procedures, data minimisation, and secure deletion.

Access to personal data is limited to people who have a legitimate need to use it for an authorised purpose.

No method of transmission or storage is completely secure. We therefore review and develop our security arrangements in light of the nature of the information, the risks involved, and applicable legal, contractual, and operational requirements.

ARMEXIS operates in a security-conscious engineering and manufacturing environment. Some information held by us may be subject to contractual confidentiality, export-control requirements, security restrictions, legal privilege, government requirements, or other controls.

We will apply such controls where they lawfully affect the collection, use, retention, or disclosure of personal data. Any restriction placed on an individual’s request will be considered on its particular facts and applied only where permitted or required by law.

Nothing in this notice limits the data protection rights available to an individual or gives ARMEXIS a general right to withhold personal data merely because it is commercially or operationally sensitive.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, regulatory, contractual, security, accounting, audit, and reporting requirements.

The appropriate retention period will depend on matters including:

• the nature and sensitivity of the personal data;
• the purpose for which it is used;
• the duration of the relevant relationship or contract;
• applicable legal and regulatory requirements;
• relevant limitation periods;
• security, audit, and investigation requirements; and
• whether the information is needed to establish, exercise, or defend legal claims.

When personal data is no longer required, we will securely delete, destroy, or anonymise it, unless continued retention is required or permitted by law.

Depending on the circumstances and the lawful basis for processing, you may have the right to:

• be informed about how your personal data is used;
• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• object to direct marketing;
• receive certain personal data in a portable format;
• withdraw consent where processing is based on consent; and
• seek safeguards in relation to certain solely automated decisions.

These rights are not absolute. A request may be limited or refused where permitted by law, including where disclosure would adversely affect another person’s rights, reveal legally privileged material, or engage another applicable statutory exemption.

You have the right to object at any time to the use of your personal data for direct marketing.

To exercise a right, please contact privacy@armexis.co.uk. We may need to verify your identity before acting on a request.

We will not normally charge a fee. However, the law may allow us to charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive.

We may use professional contact details to provide relevant information about ARMEXIS, its capabilities, activities, events, or business developments where this is lawful.

You may ask us to stop sending marketing communications at any time by using the unsubscribe facility in the communication, where provided, or by contacting privacy@armexis.co.uk.

Opting out of marketing will not prevent us from sending necessary operational, contractual, security, or administrative communications.

Our website may use cookies and similar technologies to support security, essential functionality, performance, analytics, and user experience.

Where required by law, non-essential cookies will not be used unless you have provided consent. Further information should be provided through the website’s cookie notice or consent-management facility.

We may use CCTV, visitor records, identity checks, access-control systems, and related security measures at our premises.

These measures may be used to protect people and property, manage access, maintain site security, support health and safety, prevent and detect crime, investigate incidents, and meet legal, contractual, or security requirements.

Appropriate signage or further privacy information will be provided where required. Access to security records is restricted, and the information will be retained only for an appropriate period, subject to any incident, investigation, legal claim, or security requirement.

Our website and general business services are not directed towards children, and we do not knowingly seek to collect children’s personal data through them.

If we become aware that children’s personal data has been collected without an appropriate lawful basis, we will take reasonable steps to delete, restrict, or otherwise protect it.

ARMEXIS does not currently make decisions about individuals based solely on automated processing where those decisions produce legal or similarly significant effects.

If this changes, we will provide the information and safeguards required by law.

Our website may contain links to websites operated by other organisations. We are not responsible for their content, security, or handling of personal data. You should review the privacy information provided by the relevant organisation before submitting personal data to it.

If you have a concern about our handling of personal data, please contact the ARMEXIS Data Protection Team at privacy@armexis.co.uk. We would welcome the opportunity to consider and address the matter.

You may also have the right to raise a complaint with the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

Website: https://ico.org.uk/

We may update this notice to reflect changes in our operations, legal requirements, technology, or personal-data practices.

The current version will be published on the ARMEXIS website. Material changes may also be communicated by another appropriate method where required.