OWNER/LEGAL REVIEW REQUIRED. This is a structural draft of a GDPR privacy notice. The controller identity, lawful bases, retention periods, processors and transfer mechanisms below must be completed from how the business actually operates and reviewed by a qualified adviser. A privacy notice that does not describe real processing is worse than none.
Who controls your data
Controller: CONTROLLER: REGISTERED ENTITY TO BE CONFIRMED
Data protection contact: DPO OR CONTACT
What we collect and why
Account and order data. Name, address, contact details and order history, processed to perform the contract between us.
Firearms permit data. Where you buy a restricted item we collect and verify permit details. This is data of a sensitive and regulated kind. It is processed to comply with our legal obligations as a licensed dealer, retained for the period national law requires, and not used for anything else.
Delivery country. Stored in a cookie so the catalogue can show what is available to you. It is a preference, not an identifier.
Technical data. Server logs and security data, processed on the basis of our legitimate interest in running a secure service.
Who we share it with
Carriers, payment providers and, where the law requires it, national firearms authorities. Processors are listed at PROCESSOR LIST REQUIRED.
How long we keep it
RETENTION PERIODS REQUIRED. Records tied to firearms transactions are held for the period set by national law, which is generally longer than ordinary commercial records.
Your rights
Under the GDPR you may request access to your data, correction of it, erasure where it applies, restriction of processing, portability, and you may object to processing carried out on the basis of legitimate interests. Where processing rests on consent you may withdraw it at any time without affecting what was done before.
You may also complain to your national supervisory authority. Exercising a right will not affect what we are legally obliged to retain in connection with a firearms transaction.
Transfers outside the EU
TRANSFER MECHANISMS REQUIRED