Privacy Data protection policy

Need some help or want to chat?

About

  • Terms and Conditions
  • Payment Policy
  • Shipping and Return Policy
  • Order Cancellation and Refund Policy
  • Privacy and Data Protection Policy
  • Cookie Policy
  • FAQs

Need some help or want to chat?

About

RM Group and Resources Limited - Privacy and Data Protection Policy

Effective date: July 2026

RM Group and Resources Limited trading as AR(C6) offers dietary health supplements and skincare products.

This Privacy and Data Protection Policy explains how AR(C6) collects, uses, stores, shares, and protects personal data when customers visit the website, place orders for dietary health supplements or skincare products, contact support, or interact with marketing communications. It should be read together with the Terms and Conditions of Sale and Cookie Policy.

1. Who controls your data

Is the controller of personal data processed through the website unless stated otherwise. Contact details should be listed in the website footer, checkout, and contact page.

2. What data may be collected

Depending on how the website is used, AR(C6) may collect:

  • Identity and contact details, such as name, billing address, delivery address, email address, and telephone number.
  • Account details, such as username, login credentials, and account preferences.
  • Order and transaction details, such as products ordered, payment status, delivery details, refunds, and communications about purchases.
  • Technical and usage information, such as IP address, browser type, device identifiers, pages viewed, approximate location, and cookie-related data.
  • Customer service records, such as emails, live chat messages, reviews, complaints, and product safety or adverse reaction reports.
  • Marketing preferences, including consent choices, email engagement, and promotion participation.

3. Sensitive or health-related information

Because the website sells supplements and skincare products, customers may choose to disclose allergy details, product reactions, or other health-related information when making a complaint or support request. Such information should only be provided where necessary, and it will be handled with additional care and only for legitimate purposes such as customer support, product safety, legal compliance, or claim handling.

4. How data is used

Personal data may be used to:

  • Process and fulfil orders, payments, deliveries, returns, cancellations, and refunds.
  • Provide customer service and respond to enquiries.
  • Maintain website security, prevent fraud, and verify transactions.
  • Comply with legal, tax, accounting, consumer protection, and product safety obligations.
  • Improve website functionality, user experience, and product offerings.
  • Send service-related communications such as order confirmations, dispatch updates, recall notices, and policy updates.
  • Send marketing communications where permitted by law or where valid consent has been obtained.

5. Legal bases for processing

Where UK GDPR or EU GDPR applies, AR(C6) relies on one or more of the following legal bases:

  • Performance of a contract, for orders, payments, shipping, returns, and account services.
  • Compliance with legal obligations, such as tax, consumer rights, safety, and fraud prevention requirements.
  • Legitimate interests, including website security, service improvement, and business administration, provided these interests are not overridden by the customer’s rights.
  • Consent, where required for non-essential cookies, certain marketing activities, or other optional processing.
  • Establishment, exercise, or defense of legal claims, where relevant.

6. Sharing of personal data

Personal data may be shared with trusted third parties where reasonably necessary, including payment processors, website hosts, analytics providers, marketing service providers, fraud prevention partners, customer support tools, warehouse and fulfilment partners, delivery carriers, professional advisers, insurers, and regulators. Data will not be sold in the ordinary sense unless expressly stated and lawfully permitted.

7. International transfers

Because customers may be located in the USA, UK, Europe, and other parts of North America, personal data may be processed outside the customer’s home jurisdiction. Where required by law, AR(C6) will use appropriate safeguards for international transfers, such as adequacy decisions, contractual safeguards, or other lawful transfer mechanisms.

8. Retention

Personal data is retained only for as long as reasonably necessary for the purposes described in this policy, including order fulfilment, support, recalls, accounting, legal compliance, dispute resolution, and record-keeping. Retention periods may vary depending on the type of data and applicable law.

9. Marketing

Customers may unsubscribe from marketing emails at any time using the unsubscribe link or by contacting customer support. Transactional or service messages relating to orders, product safety, or legal notices may still be sent where necessary.

10. Cookies and tracking

The website uses cookies and similar technologies. Further details, including how to manage preferences, are set out in the Cookie Policy.

11. Your rights

Depending on the customer’s location and applicable law, rights may include:

  • Access to personal data.
  • Correction of inaccurate data.
  • Deletion of personal data in certain circumstances.
  • Restriction of processing.
  • Objection to certain processing.
  • Data portability where legally applicable.
  • Withdrawal of consent where processing relies on consent.
  • Complaint to a data protection regulator or other competent authority.

Customers in certain US states may also have additional privacy rights relating to access, deletion, correction, portability, and opt-out rights where applicable under local state law.

12. Security

AR(C6) uses reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure. However, no internet transmission or storage system can be guaranteed to be completely secure.

13. Children

The website is not directed to children, and products should not be ordered by anyone who does not meet the legal age requirements in their jurisdiction. Personal data known to relate to children will not knowingly be collected except where lawfully necessary and permitted.

14. Changes to this policy

This policy may be updated from time to time. The latest version published on the website will apply from its effective date.

14. Contact

Privacy and data protection enquiries should be sent to:

Company Full Legal Name: RM Group and Resources Limited trading as AR(C6)
Registered Address: Unit A, 82 James Carter Road, Mildenhall, IP28 7DE, UK.
Email: customercare@arc6.world

Vegan * hormone free * Backed by science *