Privacy policy
My Armadura (Pty) Ltd
Version 1.01 | Last Updated: 08 September 2026
My Armadura (Pty) Ltd ("My Armadura") is committed to protecting your privacy and complying with applicable data protection and privacy laws. This Privacy Policy will inform you as to how we process your Personal Information when you engage with us and tell you about your privacy rights and how the law protects you (as Data Subject).
It is important that you read this Privacy Policy so that you are fully aware of how and why we are using your Personal Information. This Privacy Policy supplements other notices and privacy policies and is not intended to override them.
By providing Personal Information to My Armadura, registering a Service Account, submitting an enquiry, or clicking a "Submit", "Register", "Contact", "Connect", "WhatsApp", "Email" or similar button, you consent to the processing of your Personal Information in accordance with this Privacy Policy.
1. IMPORTANT INFORMATION AND WHO WE ARE
RESPONSIBLE PARTY
My Armadura (Pty) Ltd is the Responsible Party and responsible for your Personal Information (collectively referred to as "My Armadura", "we", "us" or "our" in this Privacy Policy).
Registration Number: 2021/862680/07
INFORMATION OFFICER
Full Name: Kirsten Kiwi
Contact Details: +27 69 676 6796
Email: kirsten@myarmadura.co.za
DEPUTY INFORMATION OFFICER
Full Name: Christo Claassen
Contact Details: +27 69 676 6796
Email: christo@fortunainvestmentholdings.com
COMPLAINTS
South Africa: You can lodge a complaint with the Information Regulator: http://www.justice.gov.za/inforeg/
We encourage you to contact us first to resolve any issues.
a) Privacy Policy Updates
i) We regularly review our Privacy Policy. The latest update date is on the first page. Older versions are available upon request. Future changes will be posted on our website or shared during your interactions with us, and will apply immediately once published.
ii) Please keep your Personal Information accurate and up to date by informing us of any changes during your relationship with us.
b) Third-Party Sites: We do not control third-party sites linked to ours. These sites may use cookies or collect your data. We are not responsible for how these sites handle user information.
c) Third-Party Links: Our Site(s) may link to external websites, plugins or apps. Sharing your Personal Information with them is at your own risk; we are not liable for any loss or damage resulting from such disclosures, as we do not control how third parties use your data. Always read their privacy policies when you leave our site.
2. THE DATA WE COLLECT ABOUT YOU
a) We collect your Personal Information, as defined in this Policy. It does not include data where the identity of the Data Subject has been removed (anonymous data).
b) We may Process different kinds of Personal Information about you when we engage with you, which we have grouped together as follows:
Identity Data: First name, Last name, Age, Nationality, Username or Similar Identifier, Job Title and Employer details (where you engage with us as a wholesale or trade customer), Date of Birth and Gender.
Contact Data: Billing address, Physical address, Delivery address, Email address, Telephone numbers, and details of your public social media profiles.
Location Data: Information relating to your country, region, time zone and other general location-related information associated with your use of the Services.
Account Data: Username, Password and Login credentials for your online account, Account Creation Date, and Account Activity.
Order and Purchase Data: Products purchased, Order History, Order Value, Delivery and Collection details, Returns, Exchanges and Refund History.
Loyalty and Rewards Data: Membership of the Armadura X Rewards programme, Style Shares balance earned and redeemed, Referral details (including the name and contact details of a person you refer to us), Birthday Rewards, Coupon Codes and Social Media Engagement Rewards.
Financial Data: Payment card details and/or banking details.
Transaction Data: Details about payments to and from us and other details of Services you have accessed on our website.
Technical Data: Internet protocol (IP) address, Your login data, Browser type and version, Time zone setting and location, Browser plug-in types and versions, Operating system and platform, Other technology on the devices you use to access this website/portal.
Usage Data: Information relating to interaction with our website, products and services, including URL clickstream data, pages or services viewed, performance and error data, interaction and navigation behaviour, customer service contact details, and service transaction instructions exchanged via our APIs.
Marketing and Communications Data: Marketing preferences in receiving marketing from My Armadura and third parties, your communication preferences (communications related to the Services).
Aggregate Data and Pattern Data ("Pattern Data"): Aggregated statistical, demographic or transactional information derived from Personal Information, which does not identify a Data Subject. If combined with Personal Information so as to enable identification, it will be treated as Personal Information and processed in accordance with this Privacy Policy.
Special Personal Information: Religious, Biometric and Health (including disability) information.
Additional Personal Information: You may choose to provide additional Personal Information to us. When you do so, you agree to provide accurate and current information, and to not impersonate or misrepresent any person or entity or falsely state your affiliation with anyone or anything.
c) You may choose to provide additional Personal Information to us, in which event you agree to provide accurate and current information, and not to impersonate or misrepresent any person or entity or falsely state or otherwise misrepresent your affiliation with anyone or anything.
d) Special Personal Information: We do not collect any Special Personal Information about you, unless with your consent.
e) Children Information (Children Data): We do not process the Personal Information of a child.
f) Submission of Personal Information on Behalf of Another: If you submit someone else's personal information, you must obtain their consent first. We will assume you have this consent and process the information as instructed. By submitting such information, you agree to indemnify us against any third-party claims related to a lack of proper consent or legal exception.
g) If You Fail to Provide Personal Information: If required by law or contract, we may not be able to offer or continue Services if you do not provide requested Personal Information. If this happens, we will let you know.
3. HOW IS PERSONAL INFORMATION COLLECTED?
We use different methods to collect data from and about you, including through:
DIRECT INTERACTIONS
- Placing an order for Products through our website, or enquiring about an order;
- Joining the Armadura X Rewards programme, redeeming Style Shares, referring a friend or claiming a coupon or promotional offer;
- Engaging with us via Microsoft Teams, Zoom or any other video conferencing facility;
- Subscribing to our newsletter/blog or seminars/webinars (where applicable);
- Requesting information about our Products, availability, delivery, returns or exchanges;
- Submitting a return, exchange, refund or warranty request;
- Creating an account on our website, or updating your account details;
- Providing us with feedback;
- Engaging with us through our customer support channels;
- Visiting or using any of our Channels.
AUTOMATED TECHNOLOGIES
- As you interact with our Channels, we automatically collect Technical Data and Usage Data about your equipment, browsing actions, patterns and device(s). This Personal Information is collected using cookies (see section 4 below), pixels, tags, server logs and other similar technologies;
- We collect information about the products you view, add to your basket or wishlist, the bundles you build, and orders you begin but do not complete, in order to improve the shopping experience and to send you reminders where you have consented to receive them;
- We may also receive Technical Data about you if you visit other websites employing our cookies.
THIRD PARTIES / PUBLICLY AVAILABLE SOURCES
- Analytics providers such as Google ("How Google uses information from sites or apps that use our services");
- Advertising networks;
- Search information providers;
- Third-party service providers that provide a service or product to you, subject to your consent to us to collect the information;
- Contact, Financial and Transaction Data from providers of technical, payment and delivery services.
4. COOKIES
See our Cookies Policy.
5. HOW WE USE YOUR PERSONAL INFORMATION
a) We do not sell Personal Information in exchange for monetary consideration. However, certain disclosures of Personal Information to service providers, analytics providers, advertising providers and technology providers may constitute "sharing", "targeted advertising" or a similar activity under applicable privacy laws. Most commonly, we will use Personal Information in the following circumstances:
i) where you have given us your consent; or
ii) where we need to perform the contract we are about to enter into or have entered into with you; or
iii) where it is necessary for the protection of the Data Subject's legitimate interest; or
iv) where it is necessary for our legitimate interests (or those of a Third-Party) and your interests and fundamental rights do not override those interests; or
v) where we need to comply with a legal obligation.
b) We will get your consent before sending third-party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us or using such automated facilities made available by us.
c) Purposes for which we will use Personal Information:
i) The list below outlines how we use Personal Information and the legal grounds for doing so, including legitimate interests where relevant.
ii) We may process your data under multiple lawful bases depending on its use. Contact us if you need clarification about which legal basis applies to your case.
iii) Personal Information may also be processed for advertising, marketing, analytics, profiling, recommendation and platform personalisation purposes, subject to applicable law and any consent requirements.
PURPOSE / TYPE OF DATA / LAWFUL BASIS
To register you as a customer (where applicable) and create and manage your account
Type of data: Identity, Contact, Account
Lawful basis: Performance of a contract / Consent
To process and deliver your order, including managing payments, delivery, collection, returns, exchanges and refunds
Type of data: Identity, Contact, Order and Purchase, Financial, Transaction
Lawful basis: Performance of a contract / Legal obligation
To administer the Armadura X Rewards programme, including earning and redeeming Style Shares, referrals, birthday rewards, coupons and promotional offers
Type of data: Identity, Contact, Account, Order and Purchase, Loyalty and Rewards
Lawful basis: Performance of a contract / Consent
To enable you to submit Product reviews, ratings, feedback, competition entries and survey responses
Type of data: Identity, Contact, Usage, Marketing and Communications
Lawful basis: Consent / Legitimate interests
To make suggestions and recommendations about Products that may be of interest to you
Type of data: Identity, Order and Purchase, Usage, Technical, Location
Lawful basis: Consent / Legitimate interests
Communication and relationship management
Type of data: Identity Data, Contact Data, Assessment Participation Data
Lawful basis: Consent / Legitimate interests
Billing and payment administration
Type of data: Financial Data, Transaction Data, Identity Data, Contact Data
Lawful basis: Contract / Legal obligation
Marketing (where permitted)
Type of data: Identity, Contact and Marketing preferences
Lawful basis: Consent / Legitimate interests (existing users)
Website administration, analytics and business operations
Type of data: Technical, usage and location information
Lawful basis: Legitimate interests
Compliance with legal and regulatory obligations
Type of data: Information required by law or regulation
Lawful basis: Legal obligation
Customer support, complaints handling and dispute resolution
Type of data: Identity, contact and transactional information
Lawful basis: Contract / Legal obligation
Security monitoring, fraud prevention and website protection
Type of data: Identity, technical and usage information
Lawful basis: Legitimate interests / Legal obligation
Maintaining audit trails, records and evidentiary information relating to assessments and reports
Type of data: Identity Data, Assessment Participation Data, Behavioural Assessment Data, Content Data and Technical Data
Lawful basis: Legal obligation / Legitimate interests
Delivering relevant website content and advertisements
Type of data: Identity, contact, profile, usage, technical and location information
Lawful basis: Legitimate interests
Making suggestions and recommendations regarding businesses and website features
Type of data: Identity, contact, profile, usage and marketing preferences
Lawful basis: Legitimate interests / Consent
d) Marketing: We strive to provide you with choices regarding certain Personal Information uses, particularly around marketing and advertising.
i) Promotional Offers
For Clients: We may use your contact details to send service-related communications. You may opt out at any time (see section 5(d)(iii) below).
For Non-Clients: We may collect your email through staff or our mailing system. Before sending any direct marketing, we will obtain your consent (opt-in).
ii) Third-Party Marketing
We will get your express opt-in consent before we share your Personal Information with any third party for marketing purposes.
Please note: We may share anonymised, aggregated data for advertising, but we never disclose information that identifies individuals.
iii) Opting Out
You can ask us or third parties to stop sending you marketing messages at any time by logging into the website, unsubscribing via the email communication, or contacting us at any time and requesting to opt out of our marketing services.
Where you opt out of receiving these marketing messages, this will not apply to Personal Information provided to us as a result of a Service purchase, service experience or other transactions.
e) Automated Processing and Decision Making
We do not use any automated processing and/or decision-making tools, including but not limited to AI Systems, to process your Personal Information in order to provide our Services. In the event that this should change, we will update this Policy to reflect the same.
f) Change of Purpose
i) We will use your Personal Information only for its original purpose unless a compatible reason arises. If you want more details on this compatibility, please contact us.
ii) For any unrelated use, we will notify you and explain the legal basis.
iii) Your information may also be processed without your knowledge or consent when required or permitted by law.
6. DISCLOSURES OF PERSONAL INFORMATION
a) We may share Personal Information with the following parties for the purposes outlined above:
i) Internal Third-Parties: Our group companies, partners or correspondents, who are required to follow this Policy when processing your Personal Information.
ii) External Third-Parties: As defined in the Definitions section, as well as those specified by your instructions.
iii) Third-Parties involved in business changes: If we sell, transfer or merge our business or assets, new owners may use your Personal Information per this Privacy Policy.
iv) During the preceding 12 months we may have disclosed the categories of Personal Information described in section 2 to service providers, contractors, hosting providers, analytics providers, payment providers, advertising providers, professional advisers and regulatory authorities for the purposes described in this Privacy Policy.
b) All Third-Parties must protect your Personal Information, act lawfully, and only process it for approved purposes per our instructions. Service providers are not permitted to use your Personal Information for their own purposes.
c) We may also share Personal Information with External Third-Parties if necessary to:
i) Comply with laws, regulations or legal requests;
ii) Enforce our Terms of Use and investigate potential violations;
iii) Address fraud, security or technical issues;
iv) Protect against imminent harm to the rights, property or safety of My Armadura, website users or the public, as allowed by law;
v) We may disclose Personal Information to analytics providers, advertising partners, cloud service providers and technology providers in connection with providing, maintaining, securing, improving and promoting the Services.
7. INTERNATIONAL TRANSFERS
a) We may transfer Personal Information internationally, including to countries that may not provide the same level of protection as the jurisdiction in which the Personal Information was collected. Where required by law, appropriate contractual, technical, organisational or other safeguards will be implemented. All transfers comply with the relevant Data Protection Legislation.
b) We maintain records of all cross-border transfers and safeguards, and will provide this information on request.
c) By submitting your Personal Information, you consent to its transfer outside your country when necessary.
8. DATA SECURITY
a) We have implemented technological and organisational safeguards to protect Personal Information from loss, unauthorised access, alteration or disclosure. Access is restricted to those with a business need, all of whom are bound by confidentiality.
b) Procedures are in place for suspected breaches; we will notify you and regulators if legally required.
c) Certain legislation obliges us to report specific offences to authorities within set timeframes. We cannot be held responsible for any resulting consequences from such reporting.
9. DATA RETENTION
How long will we use your Personal Information for?
a) As long as needed to fulfil the purposes it was collected for and meet legal, regulatory, tax, accounting or reporting requirements. If necessary, we may retain it longer for complaints or best practices related to our relationship with you.
b) You may request deletion of your data; see your legal rights below.
c) Retention periods depend on the type and sensitivity of your Personal Information, risk of unauthorised disclosure, processing purposes and applicable laws.
d) Sometimes we anonymise your data for research or statistics so it is no longer linked to you, and may use this indefinitely without further notice.
e) For purposes of determining appropriate retention periods, we consider the nature and sensitivity of the Personal Information, the purposes for which the Personal Information was collected, the potential risk of harm arising from unauthorised use or disclosure, legal and regulatory obligations, dispute resolution requirements and our legitimate business needs.
10. RECORDS
We will maintain thorough, accurate and current records of Personal Information processing, including access, control, security, approved subcontractors, purposes and categories of processing, transfers to third countries and safeguards, customer instructions, and an overview of technical and organisational security measures, as well as the retention and disposal of Personal Information.
11. SOCIAL MEDIA
a) Our website may offer social plug-ins from platforms like Facebook, Instagram or LinkedIn. If you interact with these networks via our site, your activity may be visible to them and reflected in your profile according to your privacy settings. To prevent this, log out of your social account or adjust your privacy preferences before visiting.
b) This Privacy Policy applies to Personal Information we process when you engage with us on our social media pages, while the platforms' own processing of your Personal Information is governed by their respective terms and privacy policies.
c) Please use social media responsibly and with care. We will never request personal or sensitive information through social media; for such matters, please contact us directly by phone or email.
d) Our social media pages may share links, and some platforms shorten URLs. Check the authenticity of links before clicking, as we cannot guarantee safety against spam or hacking and are not liable for any resulting damages.
12. DATA SUBJECT'S LEGAL RIGHTS
a) Under certain circumstances, you have the following rights under data protection laws in relation to your Personal Information:
i) Request Access: You may request access to the Personal Information we hold about you (a "data subject access request"). A prescribed fee may apply. Please refer to our PAIA Manual on our website.
ii) Request Correction: You may request that inaccurate or incomplete Personal Information be corrected, subject to verification.
iii) Request Deletion: You may request deletion of your Personal Information where there is no lawful basis to continue processing it. Erasure may be refused where required by law. This does not limit our rights to use Aggregate Data and Pattern Data.
iv) Object to Processing: You may object to processing based on legitimate interests or for direct marketing purposes, unless we have compelling legitimate grounds to continue.
v) Request Restriction of Processing: You may request restriction of processing where accuracy is disputed, processing is unlawful, the data is required for legal claims, or an objection is under consideration.
vi) Withdraw Consent at Any Time: Where processing is based on consent, you may withdraw consent at any time. This will not affect prior lawful processing and may limit the Services we can provide.
b) If you wish to exercise any of the rights set out above, please contact us using the details in section 1 above.
c) Fee Required: No fee is payable unless prescribed by law. We may charge a reasonable fee or refuse requests that are unfounded, repetitive or excessive.
d) Verification: We may request information to verify your identity and protect your Personal Information.
e) Response Time: We aim to respond within 30 (thirty) days, unless the request is complex, in which case we will notify you.
13. SUBCONTRACTORS
We may appoint subcontractors to assist in providing our services. All subcontractors are required to adhere to applicable Data Protection Legislation and contractual obligations to ensure the confidentiality and security of your Personal Information.
14. PERSONAL INFORMATION BREACH
a) In the event of a security compromise as contemplated in section 22 of POPIA, we are committed to managing the incident promptly, responsibly and transparently. Where there are reasonable grounds to believe that the personal information of a data subject has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and the affected data subjects as soon as reasonably possible after becoming aware of the compromise, unless the identity of the data subjects cannot be established.
b) Such notification will be provided in accordance with section 22(4) of POPIA and will include sufficient information to allow affected data subjects to take protective measures, including:
i) A description of the possible consequences of the security compromise;
ii) A description of the measures taken or proposed to be taken by us to address the security compromise;
iii) Recommendations to the data subject on how to mitigate the potential adverse effects of the security compromise; and
iv) If known, the identity of the unauthorised person who may have accessed or acquired the personal information.
c) We maintain a record of all breaches, even those not requiring notification, to ensure compliance with the Data Protection Legislation.
15. DEFINITIONS
a) Artificial Intelligence (AI) System or AI Systems means a computer-based technology which is designed to perform tasks that typically require human intelligence. It encompasses a variety of techniques, such as machine learning and natural language processing, enabling the system to learn, adapt and make decisions autonomously.
b) Armadura X Rewards means our customer loyalty programme, through which Style Shares are earned and redeemed, as described on our Sites.
c) Channels means any of our technology channels made available for you to access our Products, for example website(s), app(s) or social media sites.
d) Consent means any voluntary, specific and informed expression of will in terms of which permission is given for the processing of Personal Information.
e) Data Subject means the person to whom Personal Information relates and, in this document, refers to you as the party providing Personal Information that will be processed by us or a relevant third party.
f) Data Protection Legislation means any and all applicable laws relating to the protection of data or of Personal Information and shall include the Protection of Personal Information Act (POPIA).
g) Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best Service and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your Personal Information for our legitimate interests. We do not use your Personal Information for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.
h) Operator means a person who processes personal information for a responsible party in terms of a contract or mandate, without coming under the direct authority of that party.
i) Performance of Contract means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
j) PAI Act means the Promotion of Access to Information Act, Act 2 of 2000.
k) Personal Information means information as defined under applicable data protection legislation.
l) POPIA means the Protection of Personal Information Act, Act 4 of 2013.
m) Personnel means My Armadura employees, directors or authorised subcontractors.
n) Products means the phone covers, straps, pouches, accessories and other goods offered for sale by My Armadura through our Sites, and has the same meaning as in our Terms of Use.
o) Responsible Party means a public or private body or any other person which, alone or in conjunction with others, determines the purpose of and means for processing Personal Information.
p) Sites means our website and/or app and/or social media sites and/or other communication channels.
q) Special Personal Information means information that may be sensitive information, such as details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and biometric information or criminal convictions and offences.
r) Third-Parties:
i) Internal Third-Parties: Partners, affiliates, employees, shareholders, directors and/or agents of My Armadura (if applicable), acting as joint responsible parties or operators and who may also provide IT and system administration services and undertake leadership reporting.
ii) External Third-Parties:
- Service providers acting as operators who provide IT and system administration services;
- Professional advisers acting as operators (i.e. correspondents and counsel/advocates) or joint Responsible Parties, including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services;
- The South African Revenue Service, regulators and other authorities acting as operators or joint Responsible Parties who require reporting of processing activities in certain circumstances;
- Courts of law or any other authorities where we have an obligation under law to share your Personal Information;
- In the event that we sell or buy any business or assets, the prospective seller or buyer of such business or assets, to whom we may disclose your Personal Information.