ARMTED Privacy Policy

This Privacy Policy explains how ARMTED collects, uses, stores, shares and otherwise processes information relating to users and other individuals when they access or use ARMTED websites, mobile applications, services and related functionality.

ARMTED is operated by:

Integral Dot sp. z o.o.

For privacy-related questions, you may contact:

office@armted.com

Additional corporate information is available in the ARMTED Legal Notice / Imprint.

---

1. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed in connection with ARMTED, including ARMTED:

• websites;
• mobile applications;
• user accounts;
• profiles;
• Pulse and other social functionality;
• posts, comments, photographs and videos;
• Listings;
• catalogues and directories;
• messaging;
• groups and events;
• Explore and map functionality;
• location-based functionality;
• Booking;
• Paid Services;
• ARMTED Partners;
• business and organization profiles;
• support;
• moderation and reporting;
• verification;
• security;
• recommendations and personalization;
• advertising and promoted content; and
• other Services made available by ARMTED.

Some Services may be introduced, modified, restricted, suspended or discontinued over time.

This Privacy Policy applies to personal data processed through such Services while they are available.

Additional privacy notices or jurisdiction-specific supplements may apply depending on your location, the Service used or applicable law.

---

2. Who Controls Your Personal Data

Unless another notice expressly provides otherwise, the controller responsible for the processing described in this Privacy Policy is:

Integral Dot sp. z o.o.

Contact:

office@armted.com

Additional registration and corporate details are provided in the ARMTED Legal Notice / Imprint.

For certain activities involving independent businesses, shooting ranges, clubs, stores, service providers, advertisers or other organizations accessible through ARMTED, those entities may independently determine how they process personal data.

In such circumstances, they may act as independent controllers for their own processing activities.

---

3. Information We Collect

The information ARMTED processes depends on:

• whether you have an account;
• the Services you use;
• the permissions you grant;
• the content you provide;
• your privacy choices;
• your device;
• your location;
• your interactions with ARMTED;
• the market in which you use ARMTED; and
• applicable legal requirements.

We may process the categories of information described below.

3.1. Account Information

When you create or maintain an ARMTED account, we may process information such as:

• user identifier;
• username;
• handle;
• display name;
• email address;
• telephone number;
• password credentials in protected form;
• authentication information;
• account status;
• verification status;
• account creation date;
• account settings;
• preferred language;
• market or country;
• profile settings; and
• other information associated with the account.

Where you use third-party authentication, such as Apple or Google authentication, we may receive identifiers and account information made available through that authentication process.

We do not receive your password for the relevant third-party account.

3.2. Profile Information

Depending on the information you choose to provide and the functionality available, we may process:

• profile photograph;
• cover photograph;
• biography or profile description;
• interests;
• clubs;
• affiliations;
• location information;
• links;
• public profile information;
• user activity displayed on the profile;
• verification indicators; and
• other profile fields.

Some profile information may be visible to other users or publicly accessible depending on your settings and the relevant Service.

3.3. User Content

We process content that you create, upload, publish, submit or otherwise make available through ARMTED.

This may include:

• posts;
• reposts;
• comments;
• photographs;
• videos;
• captions;
• descriptions;
• Listings;
• Listing photographs and videos;
• reviews;
• ratings;
• group content;
• event content;
• business content;
• support attachments;
• reports;
• appeals; and
• other User Content.

User Content may contain information about you or other people.

You should not upload personal information about another person unless you have an appropriate right or lawful basis to do so.

3.4. Photographs and Videos

When you upload photographs or videos, ARMTED may process:

• the media file;
• thumbnails;
• previews;
• transcoded or optimized versions;
• technical metadata;
• upload information;
• associations with posts, Listings, profiles, catalogues or other resources; and
• information derived from the media where necessary to operate, secure, organize or moderate the Services.

Publicly submitted photographs and videos may be displayed and otherwise used in accordance with the ARMTED Terms of Service, including the User Content licence granted under those Terms.

For example, where permitted under the Terms, a photograph of a firearm submitted with a Listing may also be used to illustrate the corresponding firearm model, manufacturer, category or other catalogue entry, or in ARMTED editorial or promotional materials.

This Privacy Policy explains the processing of personal data involved in those activities. The intellectual-property licence governing ARMTED’s right to use User Content is contained in the Terms of Service.

3.5. Listings

When you create, edit, publish, promote or interact with a Listing, we may process:

• Listing identifier;
• seller or publisher identifier;
• title;
• description;
• category;
• condition;
• manufacturer;
• model;
• calibre or other product attributes;
• photographs;
• videos;
• price information;
• location;
• contact information;
• publication status;
• moderation status;
• promotion status;
• Listing revisions;
• compliance declarations;
• applicable legal-document versions;
• reports concerning the Listing;
• interactions with the Listing; and
• related technical information.

We may also process information necessary to determine which Listing rules, restrictions or jurisdiction-specific requirements apply.

3.6. Location Information

ARMTED may process location information where necessary to provide location-based Services.

Depending on your device permissions and the functionality used, this may include:

• country;
• region;
• city;
• approximate location;
• precise latitude and longitude;
• manually selected location;
• Listing location;
• business location;
• event location;
• Booking location; and
• location derived from technical information such as IP address.

Location information may be used to:

• show nearby shooting ranges, businesses, events, Listings or users where applicable;
• provide maps;
• determine distance;
• provide location-relevant search results;
• determine applicable market or jurisdiction;
• improve recommendations;
• prevent fraud and abuse;
• protect platform security; and
• provide other location-based functionality.

Where device permission is required for precise location, you may control that permission through your device settings.

Certain functionality may be unavailable or less accurate if location access is disabled.

3.7. Messages and Communications

When you use ARMTED messaging or communication functionality, we may process:

• sender and recipient identifiers;
• message content;
• photographs and other media attached to messages;
• timestamps;
• delivery information;
• conversation identifiers;
• message status;
• reports;
• blocking information; and
• technical information necessary to provide the communication service.

Private messages are not treated as public User Content merely because they are transmitted through ARMTED.

ARMTED may nevertheless process communications where reasonably necessary and legally permitted for:

• providing messaging functionality;
• delivering messages;
• security;
• fraud prevention;
• abuse prevention;
• investigating reports;
• enforcing ARMTED rules;
• protecting users;
• complying with legal obligations; and
• establishing, exercising or defending legal claims.

ARMTED does not claim a general right to publish private messages for advertising or promotional purposes.

3.8. Social Graph and Interactions

We may process information concerning your relationships and interactions within ARMTED, including:

• follows;
• followers;
• blocked users;
• memberships;
• clubs;
• groups;
• invitations;
• reactions;
• likes;
• comments;
• shares or reposts;
• saved content;
• Listing interactions;
• profile interactions;
• event interactions; and
• other social activity.

This information may be used to operate social features and, where permitted, to improve recommendations and personalization.

3.9. Search, Explore and Discovery Activity

We may process information concerning how you discover and interact with content, including:

• searches;
• search terms;
• filters;
• map interactions;
• categories viewed;
• profiles viewed;
• Listings viewed;
• posts viewed;
• events viewed;
• businesses viewed;
• interactions with recommendations;
• interaction timestamps; and
• other discovery activity.

We may use this information to operate and improve search, ranking, recommendation and discovery functionality.

3.10. Booking Information

If you use Booking functionality, we may process information such as:

• Booking identifier;
• user identifier;
• Provider or location;
• selected date and time;
• booking status;
• number of participants or other Booking details;
• cancellation information;
• communications relating to the Booking;
• Provider information;
• Booking history; and
• related support or dispute information.

ARMTED may share information necessary to perform the Booking with the relevant Provider.

The Provider may independently process information received in connection with the underlying service.

3.11. Business and ARMTED Partners Information

Where you use ARMTED on behalf of a business, shooting range, club, store, gunsmith or other organization, we may process:

• organization information;
• organization identifiers;
• business contact details;
• business address;
• business verification information;
• role;
• permissions;
• ownership or administrative relationship;
• invitations;
• membership information;
• actions taken on behalf of the organization;
• catalogue information;
• Booking configuration;
• Listing activity;
• gallery content;
• business communications; and
• audit information.

We may process information necessary to verify that a person is authorized to represent or manage an organization.

3.12. Verification Information

Where ARMTED provides or requires verification, we may process information concerning:

• email verification;
• telephone verification;
• user verification status;
• seller verification status;
• business verification;
• authority to represent an organization;
• verification timestamps;
• verification decisions; and
• information reasonably necessary to conduct the relevant verification.

If ARMTED introduces identity-document, age, licence or other enhanced verification, additional information will be provided where required before such processing begins.

3.13. Paid Services and Payment Information

When you purchase a Paid Service from ARMTED, we may process:

• order identifier;
• user or business identifier;
• Service purchased;
• price;
• currency;
• taxes;
• payment status;
• payment-provider identifiers;
• transaction identifiers;
• promotion information;
• refund information;
• chargeback information;
• invoice or billing information where applicable; and
• related support information.

Payment card or other payment credentials may be processed directly by a payment provider.

ARMTED does not necessarily receive or store complete payment-card information.

Payments for ARMTED Paid Services concern ARMTED platform functionality such as publication or promotion and do not constitute payment by ARMTED for an item displayed in a firearm or other user Listing.

3.14. Support Information

When you contact ARMTED, we may process:

• your contact details;
• account information;
• ticket information;
• correspondence;
• attachments;
• technical information;
• previous support interactions;
• the subject of your request;
• internal notes; and
• information necessary to investigate and respond.

3.15. Reports, Moderation and Appeals

We may process information associated with:

• content reports;
• user reports;
• Listing reports;
• message reports;
• illegal-content notices;
• moderation decisions;
• moderator notes;
• evidence;
• warnings;
• sanctions;
• restrictions;
• suspensions;
• appeals;
• appeal decisions;
• fraud indicators; and
• related records.

Such information may be retained where reasonably necessary to maintain platform integrity, prevent repeat abuse, resolve disputes and comply with legal obligations.

3.16. Privacy Requests

When you exercise privacy rights, we may process:

• request type;
• request content;
• identity-verification information;
• request status;
• communications;
• exported information;
• decisions;
• reasons for decisions;
• deletion or anonymization records; and
• information required to demonstrate compliance with applicable law.

3.17. Device and Technical Information

When you use ARMTED, we may automatically receive technical information such as:

• IP address;
• device type;
• operating system;
• application version;
• browser type;
• language;
• time zone;
• device or application identifiers;
• session information;
• network information;
• request information;
• timestamps;
• error information;
• crash information;
• performance information; and
• security-related technical information.

3.18. Push Notifications

Where you enable push notifications, ARMTED may process:

• push token;
• device information;
• notification preferences;
• delivery information; and
• interactions with notifications.

You may generally control device-level notifications through your operating-system settings.

Marketing push notifications, where offered, may additionally be subject to separate preference or consent requirements.

3.19. Cookies and Similar Technologies

ARMTED websites and Services may use:

• cookies;
• local storage;
• SDKs;
• pixels;
• device identifiers; and
• similar technologies.

These technologies may support:

• authentication;
• security;
• preferences;
• functionality;
• analytics;
• personalization;
• advertising; and
• measurement.

Further information is provided in the ARMTED Cookie Policy.

Where applicable law requires consent before using a particular technology, ARMTED will request the required consent before activating it.

---

4. Information We Receive From Other Sources

ARMTED may receive information from sources other than directly from you.

These sources may include:

• authentication providers;
• payment providers;
• businesses and Providers using ARMTED;
• users who interact with you;
• users who report content or accounts;
• public sources;
• business directories;
• catalogue sources;
• service providers;
• fraud and security providers;
• authorities where legally appropriate; and
• other sources where the receipt and use of information is lawful.

For example, ARMTED may receive information about a shooting range, club, store or other organization from public sources or third-party datasets before that entity claims or manages its ARMTED profile.

ARMTED may combine information received from different lawful sources where appropriate for the purposes described in this Privacy Policy.

---

5. How We Use Information

ARMTED may process information for the purposes described below.

5.1. Providing the Services

We use information to:

• create and maintain accounts;
• authenticate users;
• provide profiles;
• publish and display User Content;
• provide Pulse;
• provide messaging;
• provide Listings;
• provide catalogues;
• provide Explore and maps;
• provide events and groups;
• provide Booking;
• provide Partners functionality;
• provide Paid Services;
• process support requests;
• provide notifications; and
• otherwise operate ARMTED.

5.2. Personalizing ARMTED

Subject to applicable law, ARMTED may use information about your use of the Services to personalize your experience.

This may include information concerning:

• content you view;
• content you interact with;
• accounts you follow;
• searches;
• interests;
• Listings;
• categories;
• location;
• language;
• market;
• groups;
• events;
• Booking activity;
• business interactions; and
• other usage signals.

We may use these signals to determine which content, accounts, Listings, businesses, events or Services may be more relevant to you.

5.3. Recommendations and Ranking

ARMTED may use information to operate and improve:

• Pulse ranking;
• content recommendations;
• account recommendations;
• Listing recommendations;
• business recommendations;
• event recommendations;
• search ranking;
• Explore results;
• catalogue recommendations; and
• other discovery systems.

Recommendation systems may consider multiple signals and may change over time.

No user has a guaranteed right to a particular ranking, recommendation or level of visibility.

5.4. Advertising and Commercial Content

ARMTED may display:

• advertisements;
• sponsored content;
• promoted Listings;
• promoted posts;
• promoted events;
• promoted businesses;
• commercial recommendations; and
• other paid or commercial content.

Subject to applicable law, ARMTED may use information available through your use of the Services to determine which commercial content may be relevant to you.

Such information may include, where legally permitted:

• general location;
• language;
• market;
• interests;
• content interactions;
• searches;
• categories viewed;
• Listings viewed;
• business interactions;
• engagement signals; and
• other usage information.

Where applicable law requires consent for a particular form of personalized advertising, tracking or profiling, ARMTED will request that consent separately.

Where consent is not legally required and another lawful basis is available, ARMTED may process information in accordance with that lawful basis and applicable rights such as the right to object.

ARMTED may also display contextual or non-personalized advertising.

5.5. Measuring Advertising and Promotions

Where legally permitted, ARMTED may process information to:

• measure impressions;
• measure clicks;
• measure engagement;
• assess promotion performance;
• detect invalid traffic;
• prevent advertising fraud;
• prepare aggregate reports;
• improve advertising systems; and
• determine eligibility for promotional functionality.

Where such processing requires consent, it will be subject to the applicable consent preference.

5.6. Operating and Improving Catalogues

ARMTED may process information and eligible User Content to build, maintain and improve catalogues and directories.

This may include:

• firearm catalogues;
• manufacturer pages;
• model pages;
• product classifications;
• calibre information;
• categories;
• business directories;
• shooting-range directories; and
• other structured information.

Information may be classified, associated, corrected, normalized or supplemented to improve catalogue quality.

Eligible photographs and videos may be associated with catalogue entries as permitted by the Terms of Service.

5.7. Analytics and Product Development

We may use information to:

• understand how ARMTED is used;
• measure Service performance;
• identify errors;
• improve usability;
• develop new functionality;
• evaluate existing functionality;
• test changes;
• conduct research;
• understand market trends;
• improve search;
• improve recommendations; and
• make product and business decisions.

Where possible and appropriate, we may use aggregated or anonymized information for these purposes.

5.8. Security and Fraud Prevention

We may process information to:

• authenticate users;
• secure accounts;
• detect unauthorized access;
• prevent fraud;
• identify scams;
• detect spam;
• prevent abuse;
• detect automated attacks;
• investigate suspicious activity;
• protect ARMTED infrastructure;
• protect users;
• enforce restrictions;
• prevent circumvention of sanctions; and
• maintain platform integrity.

5.9. Moderation and Enforcement

We may process information to:

• detect potential violations;
• investigate reports;
• review content;
• enforce Terms and policies;
• restrict content;
• restrict functionality;
• issue warnings;
• suspend accounts;
• terminate accounts;
• investigate illegal activity;
• handle appeals; and
• maintain evidence of enforcement actions.

Moderation may involve human review and, where used, automated or assisted systems.

5.10. Legal and Regulatory Compliance

We may process information where reasonably necessary to:

• comply with applicable law;
• respond to lawful requests;
• respond to court orders;
• respond to regulatory authorities;
• meet accounting or tax requirements;
• preserve legally required records;
• investigate suspected unlawful conduct;
• protect legal rights;
• establish, exercise or defend legal claims; and
• comply with obligations applicable to online platforms.

5.11. Communications

We may use your contact information to send:

• account communications;
• security alerts;
• verification messages;
• Booking information;
• payment information;
• support communications;
• moderation notifications;
• legal notices;
• Service-related notifications; and
• other operational communications.

These communications are distinct from marketing communications.

5.12. Marketing Communications

Where permitted by applicable law, ARMTED may send marketing communications concerning:

• ARMTED;
• new functionality;
• events;
• promotions;
• Paid Services;
• businesses;
• products or services available through ARMTED; and
• other relevant commercial information.

Where consent is required, marketing will be sent only on the basis of the applicable consent.

Separate preferences may be maintained for channels such as:

• email;
• SMS; and
• marketing push notifications.

You may withdraw a marketing consent or opt out using the mechanisms made available by ARMTED.

Withdrawal does not affect processing lawfully carried out before withdrawal.

---

6. Legal Bases for Processing

The legal basis applicable to processing depends on the activity, jurisdiction and circumstances.

Where laws such as the GDPR require ARMTED to identify a legal basis, ARMTED may rely on the bases described below.

6.1. Performance of a Contract

We may process information where necessary to:

• create and maintain your account;
• authenticate you;
• provide requested Services;
• publish content at your request;
• provide messaging;
• provide Listings;
• process Bookings;
• provide Paid Services;
• provide Partners functionality; and
• otherwise perform our contractual obligations.

6.2. Legitimate Interests

Where permitted by applicable law, ARMTED may process information where necessary for legitimate interests pursued by ARMTED or another party, provided those interests are not overridden by applicable rights and interests.

Such interests may include:

• operating and improving ARMTED;
• protecting users;
• preventing fraud;
• maintaining security;
• preventing abuse;
• moderation;
• enforcing Terms and policies;
• understanding Service usage;
• improving recommendations;
• developing Services;
• protecting legal rights;
• operating commercially sustainable Services;
• measuring performance;
• maintaining catalogues and directories; and
• presenting relevant content and, where legally permitted, commercial content.

Where applicable, users may have a right to object to processing based on legitimate interests.

6.3. Consent

We rely on consent where applicable law requires or where ARMTED chooses consent as the appropriate basis.

This may include certain:

• marketing communications;
• analytics technologies;
• advertising technologies;
• tracking technologies;
• personalization activities;
• precise-location functionality; or
• other optional processing.

Consent may be withdrawn at any time using the available controls.

Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

6.4. Legal Obligations

We may process information where necessary to comply with legal obligations, including obligations concerning:

• taxation;
• accounting;
• authorities;
• platform regulation;
• privacy rights;
• lawful orders;
• consumer protection; and
• other mandatory legal requirements.

6.5. Protection of Vital Interests and Other Legal Bases

In exceptional circumstances, information may be processed to protect vital interests or on another legal basis recognized by applicable law.

---

7. Personalization, Profiling and Automated Systems

ARMTED may analyze information and interactions to organize, rank and personalize Services.

This may involve creating or using signals concerning matters such as:

• interests;
• content preferences;
• categories;
• language;
• location;
• accounts followed;
• engagement;
• searches;
• Listings;
• events;
• businesses; and
• other activity.

These signals may influence:

• Pulse;
• search results;
• recommendations;
• Explore;
• suggested users;
• suggested Listings;
• suggested businesses;
• suggested events;
• commercial content; and
• advertisements where applicable.

ARMTED may modify its recommendation and ranking systems over time.

Where applicable law gives you specific rights concerning profiling or automated decision-making, those rights are described in the applicable jurisdiction-specific supplement.

ARMTED does not intend ordinary content recommendation or advertising systems to make decisions producing legal effects or similarly significant effects concerning users unless expressly disclosed otherwise.

---

8. How We Share Information

ARMTED does not disclose personal data indiscriminately.

We may disclose information in the circumstances described below.

8.1. Other Users and the Public

Information you choose to publish may be visible to:

• other ARMTED users;
• visitors;
• search engines where applicable;
• recipients of shared links; and
• the wider public,

depending on the Service and privacy settings.

Public information may include:

• profile information;
• posts;
• comments;
• photographs;
• videos;
• Listings;
• reviews;
• events;
• business information; and
• other content designated as public.

Users should assume that publicly published information may be copied or redistributed by other people outside ARMTED.

8.2. Booking Providers

Where you make a Booking, ARMTED may provide the relevant Provider with information reasonably necessary to:

• identify the Booking;
• provide the booked service;
• contact you where appropriate;
• manage the Booking; and
• resolve Booking-related issues.

The Provider may process that information under its own privacy responsibilities.

8.3. Service Providers

We may use third parties to support ARMTED, including providers of:

• hosting;
• cloud infrastructure;
• object storage;
• content delivery;
• databases;
• authentication;
• communications;
• email;
• SMS;
• push notifications;
• payment processing;
• analytics;
• error monitoring;
• security;
• customer support;
• verification;
• mapping;
• moderation tools; and
• other infrastructure or professional services.

Such providers may process information on ARMTED’s behalf or, depending on the service, as independent controllers.

ARMTED seeks to provide providers only with information reasonably necessary for the relevant purpose.

8.4. Payment Providers

Payment information may be disclosed to payment processors, banks, payment networks and other entities involved in processing Paid Services.

Those parties may independently process information where required for:

• transaction processing;
• fraud prevention;
• regulatory compliance;
• chargebacks; and
• financial recordkeeping.

8.5. Business Transactions

If ARMTED or its operator is involved in:

• a merger;
• acquisition;
• financing;
• restructuring;
• reorganization;
• sale of assets;
• transfer of a Service;
• insolvency process; or
• another corporate transaction,

information may be disclosed or transferred as part of that transaction, subject to applicable law.

8.6. Legal Requests and Protection

We may disclose information where we reasonably believe disclosure is necessary and legally permitted to:

• comply with law;
• respond to lawful governmental requests;
• comply with court orders;
• protect users;
• investigate fraud;
• prevent serious harm;
• enforce legal rights;
• protect ARMTED;
• establish, exercise or defend legal claims; or
• address security incidents.

ARMTED may challenge or narrow requests where appropriate and legally possible.

8.7. With Your Direction or Consent

We may disclose information where you direct us to do so or where you provide legally valid consent.

---

9. Advertising Partners and Third Parties

ARMTED may work with advertisers, measurement providers and other commercial partners.

Depending on the advertising model and applicable law, advertising may be:

• contextual;
• based on general market or location;
• based on ARMTED activity;
• personalized; or
• measured using interaction data.

ARMTED may provide advertisers with aggregated information concerning campaign performance.

Where legally permitted and appropriately disclosed, information may also be processed for advertising measurement, audience selection or personalization.

Where consent is required for advertising-related tracking or data sharing, ARMTED will request that consent before engaging in the relevant processing.

Jurisdiction-specific supplements may provide additional rights concerning advertising, sale or sharing of personal information.

---

10. Cookies, SDKs and Similar Technologies

Further information about cookies, local storage, SDKs and related technologies is provided in the ARMTED Cookie Policy.

Where ARMTED provides consent controls, users may be able to separately manage categories such as:

• Necessary;
• Analytics;
• Personalization; and
• Marketing.

Technologies classified as necessary may operate without optional consent where permitted because they are required to provide, secure or maintain requested functionality.

Non-essential technologies will be subject to applicable consent requirements.

---

11. International Data Transfers

ARMTED operates internationally and may use service providers located in different countries.

As a result, information may be processed outside the country in which you reside.

Where applicable law restricts international transfers of personal data, ARMTED will use an appropriate transfer mechanism where required.

Depending on the jurisdiction, such mechanisms may include:

• adequacy decisions;
• approved contractual clauses;
• recognized certification frameworks;
• legally permitted derogations; or
• another lawful transfer mechanism.

Additional information applicable to users in the EEA, United Kingdom or other jurisdictions may be provided in a jurisdiction-specific supplement.

---

12. Data Retention

ARMTED retains personal data for no longer than reasonably necessary for the purposes for which it is processed, subject to applicable legal requirements.

Retention periods may depend on:

• the nature of the information;
• the Service involved;
• whether the account remains active;
• contractual requirements;
• security requirements;
• fraud risks;
• moderation requirements;
• accounting requirements;
• tax requirements;
• applicable limitation periods;
• pending disputes;
• legal claims;
• regulatory obligations; and
• technical backup cycles.

Different categories of information may therefore have different retention periods.

ARMTED may retain certain information after account deletion where necessary and legally permitted for purposes including:

• legal compliance;
• taxation;
• accounting;
• fraud prevention;
• security;
• enforcement;
• moderation evidence;
• payment records;
• dispute resolution;
• legal claims; and
• responding to authorities.

Where continued identification is unnecessary, ARMTED may anonymize information instead of retaining it in identifiable form.

Aggregated or properly anonymized information may be retained and used without the same retention limitations applicable to personal data, where it no longer constitutes personal data under applicable law.

---

13. Account Deletion

Users may request deletion of their ARMTED account through the mechanisms provided by ARMTED.

Account deletion may result in information being:

• deleted;
• anonymized;
• disassociated from the account; or
• retained where a lawful reason requires or permits retention.

Deletion may not immediately remove information from technical backups, provided backup copies are protected and handled in accordance with applicable retention procedures.

Certain records may continue to be retained where required or permitted for the purposes described in Section 12.

13.1. User Content After Account Deletion

The treatment of User Content following account deletion depends on:

• the nature of the content;
• whether it contains personal data;
• applicable law;
• other users’ rights;
• technical context; and
• rights validly granted to ARMTED under the Terms of Service.

Account deletion does not automatically require ARMTED to reverse every previous lawful publication, distribution or incorporation of User Content.

For example, subject to applicable law and the Terms of Service, a photograph or video previously and validly incorporated into an ARMTED catalogue, firearm model page, editorial material or promotional material may continue to be used where ARMTED retains a valid right to do so.

Where continued use involves personal data and applicable law requires deletion or cessation of processing, applicable data-protection requirements will prevail.

13.2. Content Shared With Others

Deletion of an account may not remove copies of information:

• shared by other users;
• independently saved by recipients;
• reposted by others;
• distributed outside ARMTED; or
• otherwise outside ARMTED’s reasonable control.

---

14. Security

ARMTED uses organizational and technical measures designed to protect information against:

• unauthorized access;
• unauthorized disclosure;
• accidental loss;
• destruction;
• alteration;
• misuse; and
• other security risks.

Measures may include, where appropriate:

• access controls;
• authentication;
• role-based permissions;
• administrative access restrictions;
• audit logging;
• encryption;
• secure infrastructure;
• monitoring;
• backups;
• incident-response procedures; and
• other security controls.

No Internet-based service can guarantee absolute security.

Users are responsible for protecting their credentials and should notify ARMTED if they believe their account has been compromised.

---

15. Your Choices and Controls

Depending on the Services and your jurisdiction, ARMTED may provide controls concerning:

• profile information;
• visibility;
• location permissions;
• notifications;
• blocked users;
• marketing communications;
• cookie preferences;
• analytics preferences;
• personalization preferences;
• advertising preferences; and
• other privacy-related functionality.

The availability of a particular control may depend on the relevant platform, Service and jurisdiction.

Device permissions may additionally be controlled through your operating-system settings.

---

16. Marketing Preferences and Consent

Where ARMTED relies on consent for marketing or another optional activity, consent is separate from acceptance of the Terms of Service.

ARMTED may maintain separate consent records for purposes including:

• marketing email;
• marketing SMS;
• marketing push notifications;
• analytics;
• marketing tracking; and
• personalization where consent is the applicable legal basis.

Consent is voluntary where applicable law requires it to be voluntary.

You may withdraw consent through the controls provided by ARMTED or by contacting ARMTED where appropriate.

Withdrawing consent for marketing does not prevent ARMTED from sending necessary:

• security;
• transactional;
• account;
• Booking;
• payment;
• legal;
• moderation; or
• other non-marketing communications.

---

17. Your Privacy Rights

Privacy rights vary by jurisdiction.

Depending on applicable law, you may have rights including the right to:

• obtain information about processing;
• access personal data;
• obtain a copy of personal data;
• correct inaccurate information;
• complete incomplete information;
• request deletion;
• request restriction of processing;
• object to processing;
• receive portable data;
• withdraw consent;
• object to direct marketing;
• exercise rights concerning profiling or automated decision-making;
• lodge a complaint with a competent authority; and
• exercise other rights provided by applicable law.

These rights are not absolute.

ARMTED may refuse or limit a request where applicable law permits or requires it, including where necessary to:

• comply with legal obligations;
• protect other people’s rights;
• prevent fraud or abuse;
• preserve evidence;
• establish, exercise or defend legal claims; or
• address another legally recognized exception.

---

18. Exercising Your Rights

Where available, privacy rights may be exercised through ARMTED account or Privacy & Data functionality.

You may also contact:

office@armted.com

ARMTED may request information reasonably necessary to:

• identify your account;
• verify your identity;
• understand the request;
• locate relevant information; and
• protect information from unauthorized disclosure.

Verification requirements will be proportionate to the nature and sensitivity of the request.

Where legally permitted, ARMTED may reject requests that are manifestly unfounded, excessive, fraudulent or submitted by a person who cannot establish appropriate authority.

---

19. Data Export

Where available or required by applicable law, ARMTED may provide functionality allowing users to obtain information associated with their accounts.

An export may include applicable categories such as:

• profile information;
• posts;
• comments;
• Listings;
• Bookings;
• settings;
• account information;
• relevant activity information; and
• other personal data within the scope of the request.

The precise scope and format may depend on applicable law and technical circumstances.

An export does not necessarily include information that would adversely affect:

• the rights of another person;
• security;
• confidential information;
• trade secrets;
• ARMTED intellectual property; or
• information that applicable law permits ARMTED to withhold.

---

20. Children and Age-Restricted Services

ARMTED may establish eligibility requirements for particular Services or markets.

The minimum age applicable to an ARMTED account or particular functionality may depend on:

• applicable law;
• jurisdiction;
• Service;
• nature of the activity; and
• applicable ARMTED rules.

Certain firearm-related or otherwise regulated activities may be subject to additional legal age requirements independent of general account eligibility.

ARMTED does not represent that creation of an account establishes legal eligibility to possess, acquire, sell, transfer or otherwise engage with a firearm or another regulated item.

Where ARMTED becomes aware that personal data has been collected in circumstances prohibited by applicable child-privacy law, ARMTED may take appropriate steps to delete or otherwise address that information.

---

21. Sensitive Information

Certain information processed through ARMTED may receive enhanced protection under applicable law.

Depending on jurisdiction, this may include information such as:

• precise geolocation;
• identity-verification information;
• certain government identifiers; or
• other information legally classified as sensitive.

ARMTED will process such information in accordance with applicable legal requirements.

Users should avoid unnecessarily publishing sensitive personal information in public posts, profiles, Listings, comments or other publicly visible areas.

---

22. Information About Other People

If you provide ARMTED with personal information concerning another person, you are responsible for ensuring that you are legally permitted to provide that information.

This may occur, for example, when:

• uploading a photograph or video depicting another person;
• mentioning another user;
• inviting someone;
• submitting organization information;
• reporting content;
• submitting a Booking involving another participant; or
• contacting support concerning another person.

ARMTED may process that information as reasonably necessary for the relevant Service and lawful purpose.

---

23. Public Information

ARMTED contains social, catalogue, directory and Listing functionality designed to make certain information public.

Before publishing information, users should consider whether they want that information to be publicly accessible.

Public information may potentially:

• be indexed by search engines;
• appear in search results;
• be viewed without an ARMTED account;
• be shared through links;
• be copied by others;
• be displayed in other ARMTED Services;
• be incorporated into ARMTED catalogues where permitted; and
• remain available in third-party copies after deletion from ARMTED.

Privacy settings do not guarantee that another person will not independently copy information that was available to them.

---

24. Aggregated, Anonymized and Derived Information

ARMTED may create aggregated, statistical or anonymized information from information processed through the Services.

Where information has been anonymized so that it no longer constitutes personal data under applicable law, ARMTED may use it for purposes including:

• analytics;
• research;
• product development;
• catalogue development;
• market analysis;
• trend analysis;
• Service planning;
• security;
• recommendation-system development;
• advertising measurement;
• business intelligence; and
• other lawful commercial purposes.

ARMTED may retain such non-personal information after deletion of the underlying account.

ARMTED may also derive classifications, statistics, performance metrics and other insights from use of the Services, subject to applicable privacy law where those outputs remain personal data.

---

25. Changes to ARMTED Services

ARMTED may introduce, modify, restrict, suspend or discontinue Services and functionality.

Such changes may affect what information ARMTED processes.

For example, ARMTED may:

• introduce or discontinue Booking;
• introduce new social functionality;
• introduce new advertising systems;
• change recommendation functionality;
• introduce new Paid Services;
• modify Listings;
• introduce additional verification;
• introduce new business functionality; or
• discontinue existing functionality.

Where a change creates a materially new processing purpose or requires additional disclosure, legal basis or consent, ARMTED will take the measures required by applicable law.

The existence of a description of a Service in this Privacy Policy does not constitute a guarantee that the Service will remain available.

---

26. Third-Party Services and Links

ARMTED may contain links to or integrations with third-party websites, applications and services.

Those third parties may process information under their own privacy policies.

ARMTED does not control independent third-party processing merely because a third-party service is linked from or integrated with ARMTED.

Users should review relevant third-party privacy information where appropriate.

---

27. Changes to This Privacy Policy

ARMTED may update this Privacy Policy to reflect:

• changes to the Services;
• new functionality;
• changes in processing;
• new providers;
• new technologies;
• new advertising models;
• changes in legal requirements;
• organizational changes; or
• clarification of existing practices.

The current version will identify its effective date and version.

Where required by applicable law, ARMTED will provide appropriate notice of material changes.

A Privacy Policy is primarily a notice explaining processing practices.

ARMTED will not treat acceptance of this Privacy Policy as a substitute for a separate consent where applicable law requires consent for a particular processing activity.

---

28. Jurisdiction-Specific Privacy Supplements

Additional privacy terms may apply depending on where you live or use ARMTED.

ARMTED may maintain jurisdiction-specific supplements for jurisdictions including:

• the European Economic Area;
• the United Kingdom;
• Switzerland;
• the United States;
• individual U.S. states;
• Australia; and
• other markets.

Such supplements may provide additional information concerning:

• legal bases;
• controller details;
• international transfers;
• regulatory authorities;
• statutory rights;
• sensitive information;
• profiling;
• automated decision-making;
• targeted advertising;
• sale or sharing of personal information;
• appeal rights; and
• other locally required disclosures.

Where an applicable supplement conflicts with this Global Privacy Policy, the supplement applies to the extent necessary to satisfy applicable law.

---

29. No Sale or Sharing Representation Unless Specifically Stated

Terms such as “sell”, “sale”, “share”, “sharing”, “targeted advertising” and similar expressions may have specific meanings under particular privacy laws.

Nothing in this Global Privacy Policy should be interpreted as a representation that ARMTED does or does not engage in a legally defined “sale” or “sharing” of personal information in every jurisdiction.

Where applicable law requires ARMTED to disclose whether particular activities constitute sale, sharing or targeted advertising, the applicable jurisdiction-specific supplement will provide that disclosure and any required rights or controls.

---

30. Regulatory Authorities

Depending on your jurisdiction, you may have the right to lodge a complaint with a competent privacy or data-protection authority.

ARMTED encourages users to contact ARMTED first where appropriate so that we have an opportunity to address the issue, but contacting ARMTED does not limit a statutory right to contact an authority directly.

Applicable jurisdiction-specific supplements may identify the relevant supervisory authority or provide additional information.

---

31. Contact

For questions concerning this Privacy Policy, ARMTED’s processing of personal data or the exercise of privacy rights, contact:

Integral Dot sp. z o.o.

Email: office@armted.com

Additional corporate and contact information is available in the ARMTED Legal Notice / Imprint.

If ARMTED appoints a Data Protection Officer, representative or other privacy contact where required by applicable law, the relevant contact information will be published in this Privacy Policy or the applicable jurisdiction-specific supplement.