Privacy Policy

The Battle Master's Armory

Last updated: September 10, 2026

SECTION 1 – SCOPE, AGE ELIGIBILITY, & RESTRICTED MARKETS

1.1 Corporate Scope and Hosting Environment

The Battle Master's Armory ("the Company," "we," "us," or "our") is powered by Shopify, which hosts our e-commerce storefront, digital checkout interface, and underlying databases. Shopify automatically processes user metrics and personal identifiers on our behalf to provide our Services. This comprehensive Privacy Policy governs the data collection, processing, use, and disclosure parameters across all eleven (11) of our active global markets (including the United States, Canada, the United Kingdom, Australia, New Zealand, Japan, Thailand, Switzerland, Norway, the European Union, and the European Economic Area). By accessing our platform, interacting with our storefront, or initializing a checkout sequence, you confirm your explicit understanding of our data tracking boundaries.

1.2 Minimum Age Requirement (18+ Policy)

Our Services, storefront channels, and randomized mystery box consumer items are strictly restricted to individuals who are at least 18 years of age, or the legal age of majority in their specific jurisdiction. We do not knowingly collect, store, or process personal data or tracking metrics from minors. If underage data is detected or flagged, it will be scrubbed from our active databases immediately, any stored identifiers will be securely destroyed, and any pending transactions will be voided. By clicking our age-gate verification boxes, your explicit assent timestamp is permanently logged for contract enforcement and compliance audits.

1.3 Restricted Lanes Data Block (Germany Exclusion)

In accordance with our global corporate trade boundaries and regulatory risk models, the Company completely excludes and blocks all sales, data collection, and shipping routes to Germany. Our backend configurations and geo-location tracking arrays are optimized to automatically drop session signatures, reject account creations, block payment terminals, and delete checkout tracking files originating from IP addresses mapped to this blocked jurisdiction.

SECTION 2 – CHANNELS OF COLLECTION & GRANULAR DATA CATEGORIES

We process, collect, and categorize individual personal information and network inferences depending on how you interact with our storefront. To satisfy transparency rules under the California Consumer Privacy Act (CCPA/CPRA), the EU/UK General Data Protection Regulation (GDPR), and Canada's PIPEDA, the personal data collected within the preceding twelve (12) months is organized under these specific headings:

2.1 Information Sourced Directly From You

• Identifiers & Contact Details: Full legal name, billing address, physical delivery address, telephone number, email address, unique online identifiers, and your shop account credentials (usernames, encrypted passwords, security question answers, and layout settings).

• Commercial Disclosures: Manual customer communications, customer support tickets submitted via support@battlemastersarmory.com, and photo/video evidence submitted to warranty@battlemastersarmory.com regarding product defect claims or part replacement verifications.

2.2 Information Sourced Automatically Through Cookies and Tracking Pixels

• Internet or Electronic Network Activity: Unique device identifiers (such as MAC addresses, mobile ad tags, or browser fingerprint keys), specific browser environments, active network connection coordinates, IP address footprints, time zone configurations, session durations, page-view histories, clickstream data patterns, and specific usage analytics tracking how and when you navigate our catalog or add items to your cart.

• Geolocation Data: Precise or coarse regional geolocation metrics derived from your network IP address, used exclusively to verify your country market locale and dynamically display your native language storefront variations and clean, whole-dollar local currency pricing.

• Verification Log Metrics: Digital checkbox log metadata recording the exact timestamp of your explicit confirmation that you are 18 years of age or older to unlock our age-gated mystery boxes.

2.3 Information From Service Providers, Fulfillment, and Advertising Partners

• Financial Tokenization Data: Transaction confirmations, fraud risk screening tiers, and verified payment card metrics. All raw payment actions are processed securely via end-to-end tokenization loops via Shopify Payments and external terminals; the Company never harvests or stores your raw credit card numbers.

• Behavioral Marketing Parameters: Anonymized pixel signals, cross-context interest profiles, and audience segmentation data shared with our advertising partners, harvested via our embedded Meta (Facebook) Pixel, Google Analytics/Ads Tags, and TikTok Pixel arrays to serve personalized product retargeting ads.

• Cross-Border Supply Chain Logistics: Order routing, customs declaration data, and shipping milestones generated via our manufacturing facilities in China and private express courier lines (such as DHL and FedEx) under standard Delivered at Place (DAP) trade rules.

SECTION 3 – HOW WE USE AND DISCLOSE YOUR DATA

We utilize your collected personal information strictly for legitimate commercial purposes subject to this policy:

3.1 Contract Performance

Fulfilling your orders, organizing international shipping logistics, managing user profiles, processing returns, and routing tracking invoices.

3.2 Communication & Support Routing

Maintaining our business relationship, responding to general inquiries via support@battlemastersarmory.com, and resolving defective product claims via warranty@battlemastersarmory.com.

3.3 Platform Security & Fraud Screening

Authenticating user accounts, tracking malicious data files, verifying payment authorization logs, and investigating illegal, unsafe, or abusive activity on the storefront.

3.4 Marketing & Advertising

Customizing your browsing profile and showing you personalized cross-context advertisements based on items previously added to your cart. You may exercise your rights to opt out of targeted marketing platforms via the link configurations on our website.

3.5 Klaviyo Marketing Automation, Email, & SMS Disclosures

We utilize Klaviyo as our primary data processing partner for marketing automation, customer segment profiling, abandoned cart monitoring, email newsletters, and Short Message Service (SMS) text message communications. By inputting your information at checkout, opting into our subscription boxes, or interacting with our storefront, you acknowledge your explicit understanding of our automated communications data use:

• Data Processing & Abandoned Carts: Klaviyo’s integrated tracking code automatically monitors your real-time shopping session. If you input your email address or telephone number during a checkout sequence and subsequently abandon your shopping cart without finalizing your payment, these contact identifiers are captured and processed by Klaviyo to send automated web recovery notifications, emails, or SMS text alerts.

• Text Messaging (SMS) Compliance & Payout: When you provide your telephone number for shipping updates or opt into our promotional text lists, you explicitly assent to receive automated marketing messages. We do not sell or share your mobile opt-in data with unapproved third parties. Your mobile data is used exclusively to fulfill order notifications and target tailored text campaigns via Klaviyo.

3.6 Legal Disclosures & Business Operations

Complying with statutory laws; responding to valid subpoenas, search warrants, or government requests; participating in adversarial civil discovery; or executing structural business transitions such as corporate mergers or bankruptcy.

SECTION 4 – LEGAL BASES FOR PROCESSING DATA (EU, EEA, UK, CH, TH)

In strict compliance with European and international data protection laws, the Company processes your personal information under the following designated legal frameworks:

• Performance of a Contract: To finalize transactions, execute quality checks, package items at our China facilities, organize international logistics, enforce signature-required tracking, and resolve return/refund flows.

• Explicit Consent: For the deployment of non-essential cookies, cross-context behavioral marketing pixels, and automated promotional email loops.

• Legal Obligation: For statutory international customs auditing, cross-border tax reporting, age restriction verification, and financial tax records maintenance.

• Legitimate Interests: To defend our merchant storefront from malicious software, identify and mitigate transactional payment fraud, optimize global website performance, and maintain secure data evidence to successfully overturn fraudulent credit card chargeback reviews during bank disputes.

SECTION 5 – THIRD-PARTY LINKS AND CROSS-BORDER DATA TRANSFERS

5.1 Third-Party Platforms

Our storefront features hyperlinks and social media widgets operated by external entities. We assume zero responsibility or liability for the data privacy frameworks, accuracy, or security of outside domains. Navigating away from our hosted boundaries is done at your own risk.

5.2 International Data Transfers & Logistics Routing

To execute our direct cross-border retail contracts and deliver factory-direct pricing on our catalog, all data submitted by international buyers will be transmitted, processed, and stored outside of their home jurisdiction.

• Fulfillment Hubs in China: By completing a transaction, you explicitly authorize your name, telephone number, and physical shipping address to be securely transmitted to our manufacturing and fulfillment networks located in China for the sole purpose of product assembly, sorting, and packaging export processing.

• International Couriers & Customs Brokers (DAP Terms): Because shipments utilize Delivered at Place (DAP) trade terms, your shipping identifiers are passed directly to international express couriers (such as DHL, FedEx, and UPS) and foreign customs clearance agencies. These entities process your information to contact you via SMS or email to settle government-mandated import taxes, local GST/HST/VAT, and clearance fees prior to doorstep delivery.

• Guardrails: For shipments exiting the European Economic Area (EEA) or the United Kingdom (UK), the Company relies on recognized transfer mechanisms, including the European Commission's Standard Contractual Clauses (SCCs) and equivalent UK contractual instruments to maintain complete privacy safety outside your home country.

SECTION 6 – YOUR PRIVACY RIGHTS & OPT-OUT PREFERENCES

Depending on your geographic location, you possess specific legal rights regarding your personal information under regional laws (including US State Privacy Laws like CCPA/CPRA, the EU/EEA/UK GDPR, Canada's PIPEDA, New Zealand's Privacy Act, Japan's APPI, Thailand's PDPA, and the Australian Privacy Act). These non-discriminatory parameters grant you the right to access, know, correct, erase ("Right to be Forgotten"), or request the portability of the personal records we hold about you. You may submit a verified data query directly to support@battlemastersarmory.com or utilize the Shopify Privacy Portal link. Authorized agents submitting requests must provide explicit proof of authorization. All valid data requests will be verified and addressed within the mandatory statutory timelines required by your home jurisdiction.

6.1 Global Privacy Control (GPC)

If you visit our website with the Global Privacy Control (GPC) opt-out preference signal enabled, our platform automatically treats this as a request to opt out of data sharing and targeted behavioral pixel tracking for that specific device and browser environment. If the signal links to a verified Shopify account, the opt-out will apply to the profile as well. Other than the GPC extension standard, our systems do not recognize general "Do Not Track" configurations.

SECTION 7 – STATUTORY COMPLAINTS AND POLICY CHANGES

7.1 Data Complaints & Appeals

If you believe your data tracking options have been compromised, please contact support@battlemastersarmory.com. Depending on your jurisdiction, you retain the statutory right to appeal an administrative data choice or lodge a formal complaint directly with your local national data protection authority.

7.2 Changes to This Policy

The Company reserves the right to modify, change, or update this Privacy Policy at any time for operational, legal, or regulatory reasons. All structural updates will be published immediately on this page with an updated "Last updated" date. The specific policy version in active effect at the exact timestamp your checkout is finalized will govern your transaction.

SECTION 8 – COOKIE POLICY & AUTOMATED TRACKING TECHNOLOGIES

The Battle Master's Armory ("the Company") utilizes cookies, web beacons, tracking pixels, and clear GIFs to provide, optimize, protect, and analyze our Services across our eleven (11) active global markets. By interacting with or checking out on our platform, you explicitly acknowledge our use of these tracking technologies.

8.1 What Are Cookies?

Cookies are tiny text files placed securely onto your device (computer, smartphone, or tablet) when you visit our storefront. They act as a memory bank for the website, allowing our Shopify backend to recognize your secure browser signature, maintain your cart layout, and track your currency selections as you navigate between pages.

8.2 Categories of Cookies We Utilize

We deploy both first-party cookies (set directly by us) and third-party cookies (set by external merchant service providers or advertising networks) under the following functional frameworks:

• Strictly Necessary Cookies: These are vital to run our store and cannot be switched off in our systems. They manage core security protocols, remember your items when you change tabs, and lock in your language choices. Without these cookies, the shop checkout button cannot function properly.

• Performance & Analytics Cookies: Sourced predominantly through Shopify Core Analytics, these files collect anonymous metrics tracking how visitors move around our store, which lightsaber models get the most views, and where checkout drops occur. This text log data contains no personal info and is used purely to optimize site performance.

• Functional Cookies: These files allow our storefront to provide enhanced personalization. They track your localized currency preferences based on your global market point of entry, ensuring smooth transaction routing.

• Targeting & Advertising Cookies (Meta, Google, TikTok): These tracking pixels are set through our trusted advertising networks (such as Google, Meta, and TikTok). They build a basic profile of your interests to show you relevant, personalized cross-context advertisements on outside websites based on products you previously added to your cart.

• Klaviyo Optimization & Segment Cookies: We embed specialized Klaviyo scripts that deploy custom tracking cookies onto your local browser environment. These cookies securely log your unique customer identity token, track the specific lightsaber or mystery box catalog items you view, record custom variant choices, and tie your on-site behavioral actions directly to your designated email or mobile account profile.

8.3 Your Rights & Global Cookie Choices

You retain complete control over how automated tracking signatures interact with your device:

• Browser Modifications: You can change your computer settings to reject, block, or delete cookies at any time via your browser menu (Chrome, Safari, Edge, Firefox, etc.). Please note that blocking essential storefront tracking cookies can interfere with your shopping cart, disable the automatic checkout button lock, or disrupt smooth international currency conversions.

• Multi-Regional Prior-Consent Principle (EU, EEA, UK, Thailand): In compliance with the GDPR and PDPA, tracking cookies and marketing pixels are completely blocked from firing by default when a visitor arrives from these zones. Pixels will only execute after the user gives explicit, active consent via our frontend Cookie Compliance Banner. Users can completely withdraw this consent or opt-out at any time by clearing their browser cache or adjusting our cookie preference panel.

• Klaviyo SMS/Email Opt-Out: Every promotional email sent via Klaviyo contains a direct, single-click "Unsubscribe" hyperlink located permanently within the message footer layout. To permanently stop automated text message marketing streams, you may reply directly to any of our mobile text notifications with the single-word directive: "STOP".

• Targeted Ad Opt-Out Links: To opt out of behavioral retargeting networks permanently, you may utilize the standard opt-out configuration portals provided by the Digital Advertising Alliance or the Network Advertising Initiative.

8.4 Log Retention for Fraud Prevention & Chargeback Defense

While you have the right to modify or request erasure of personal analytics data under local privacy laws, the Company maintains its statutory merchant right to securely retain and archive essential transaction metadata, IP historical tracking logs, electronic checkbox click records, support emails, and cookie activity identifiers.

In accordance with global financial security laws and merchant platform guidelines permitting data retention for dispute resolution, these specific fraud-screening tracking files are permanently archived for chargeback defense. In the event of an open payment dispute, a chargeback review, or a fraudulent "friendly fraud" claim (such as contorting a localized DAP tax step or surprise final sale variation into an unauthorized fee dispute), the Company will disclose these securely retained data logs and tracking metrics directly to your issuing bank and credit network (Visa, Mastercard, Amex, Discover) to successfully prove authorization, reverse the chargeback, and recover all associated merchant penalties and legal fees.