Privacy & Cookie Policy
Privacy Information
Please take the time to read this page carefully, as it explains how we collect, handle, and store your information. This includes the collection, use, sharing, and transfer of data. If you provide us with information about yourself or another person, please make sure you have their consent to do so.
We will always handle personal data in full compliance with the General Data Protection Regulation (GDPR), which came into effect on 25 May 2018.
We are committed to ensuring that all data is processed lawfully, fairly, and transparently. We also take appropriate technical and organisational steps to protect your information from unauthorised or unlawful processing, accidental loss, or damage.
If you have any questions or require additional details, please reach out to us through our Contact Us page.
Who we are
We are a limited company registered in England and Wales under the company number: 0000000. Our registered office is at: INSERT FULL ADDRESS HERE .
How do we collect information
As both a Data Controller and Data Processor, we may collect information from you in the following situations:
-
When you register to use our website, including providing your contact details and any other required information.
-
When you place an order for products or services, such as your order details, contact information, and payment data.
-
When you complete online forms, engage with our services, post on blogs, enter competitions, or take part in any data submissions through our website.
-
When you register to access any product or service we offer by providing your contact details.
-
When you contact us offline, for example, by telephone, email, or post.
-
When you visit or browse our website, during which we may collect non-identifiable information such as your navigation path, number of pages visited, or time spent on each page.
You can browse our website without providing any personally identifiable information. We use Google Analytics and cookies to enhance our services, improve user experience, and understand how the website is used. Apart from general location data, the information gathered for analytical purposes primarily consists of anonymous traffic data, such as browser type, device details, and language preferences.
Most areas of our website can be accessed without registration, allowing you to browse freely without revealing your identity. However, certain services — such as placing orders or participating in community chats — may require you to provide personal details. If you choose not to share the requested personal data, it may limit your access to specific sections of the website or prevent you from completing certain actions, such as placing an order.
For further details, please refer to the Data Privacy Policy section below, which explains how your information is used and with whom it may be shared.
How we may use the information
We may use the information you provide to support the operation of our Website—both in-store and online—to process orders and enable you to access and use our services.
Your personal information may be used for the following purposes:
-
To respond to enquiries or handle requests, such as those submitted to our Customer Services Team.
-
To send administrative communications, including updates to the website, changes to our Terms and Conditions, policies, or order details. As these communications are essential to your use of the site, you may not opt out of receiving them.
-
To send updates, announcements, newsletters, or promotional materials related to our services.
-
To customise your experience on the site by displaying products, content, or offers that are relevant to your interests.
-
To process rewards, offers, or prizes as necessary.
-
To enable communication, allowing you to be contacted by us or by others through the site.
-
To facilitate participation in message boards, chats, or blogs available on our website.
-
To support business operations, such as performing data analysis and improving the management and delivery of our services.
For additional details, please refer to the Data Privacy Policy section below, which provides further information on how your data is used and with whom it may be shared.
Individual Rights
Under the General Data Protection Regulation (GDPR) 2018, individuals have several rights concerning the personal information we hold. These rights include, but are not limited to:
-
The right to access a copy of the personal information we hold about you.
-
The right to correct or update any personal data that is inaccurate or incomplete.
-
The right to request the deletion or removal of personal data where there is no legitimate reason for its continued processing.
-
The right to request that we stop processing your personal data. However, we may retain certain information necessary for maintaining historical sales records.
-
The right to object to specific uses of your personal information.
-
The right to withdraw consent previously given for the processing of your data.
-
The right to lodge a complaint with the Information Commissioner’s Office (ICO) at any time if you are dissatisfied with how we have handled your information.
Age Restriction & Children's Privacy
Our services are not intended for individuals under the age of 18. Under UK law, specifically the Violent Crime Reduction Act (VCRA) 2016, you must be at least 18 years old to purchase replica or realistic imitation firearms.
However, we acknowledge that individuals under the age of 18 may still access our website.
We do not knowingly collect personally identifiable information from children under the age of 13. If you are a parent or guardian and become aware that your child has provided us with personal information, please contact us immediately. Should we discover that we have collected personal information from a child under 13 without verified parental consent, we will take prompt action to delete that data from our servers.
International Transfer of Data
Your information may be stored, transferred, or maintained on computers located outside your state, province, country, or other governmental jurisdiction, where data protection laws may differ from those in your own region. While sensitive or personal data is generally stored on servers within the United Kingdom, some of our third-party service providers may operate servers in other parts of the world.
For further details, please refer to the Data Privacy Policy section below, which provides more information about how your data is used and with whom it may be shared.
Service Providers
ChatGPT said:
There may be occasions when we need to share your information with a third-party company. For further details regarding how your data is used and with whom it may be shared, please refer to the Data Privacy Policy section below.
Any information shared with third-party companies is provided solely for the purpose of performing specific tasks on our behalf. These companies are legally bound to keep your information confidential and are prohibited from disclosing it or using it for any purpose other than that which we have authorised.
Security
At On The Trigger Ltd., we take security extremely seriously and take every possible measure to safeguard your information. Our website is hosted on Microsoft Secure Servers, which are protected using the latest security software and encryption technologies to ensure the safety of sensitive data.
Our website also employs SHA256 SSL encryption, which secures the data transmitted between your home computer and our server. This 256-bit encryption technology ensures that your data remains unreadable during transfer and can only be decoded with a specific encryption key. SHA256 SSL encryption is a trusted standard used by many leading companies worldwide.
Our SSL Certificate is issued by Let’s Encrypt. Please note that our third-party providers may use different SSL providers; we recommend checking their details before using their websites or services.
Additionally, passwords are encrypted, salted, and hashed to provide an extra layer of security. If we have provided you with a password (or you have chosen one) to access certain parts of our website, products, or services, please ensure it is kept secure. We will never share your password with anyone.
Other Sites
If you access another website through a link on our site. Whether from a blog post, product page, or service. Please note that this Privacy Policy will no longer apply. We are not responsible for how third-party websites or services handle your information, and we strongly encourage you to review the privacy policies provided on those external sites or services.
If the linked site belongs to an associated company or is part of a third-party service we work with, it will be listed in the Data Privacy Policy section below.
Freedom of Information
You may contact us at any time to request any personally identifiable information we hold about you. This information typically relates to VCRA Defence information or your order details.
You have the right to:
-
Request access to the personally identifiable information we hold about you.
-
Correct or update any personally identifiable information that is inaccurate or incomplete.
-
Request deletion of personally identifiable information we hold about you.*
* Please note that certain information, such as details related to an order for an imitation firearm, may need to be retained permanently. For further details, see the Data Retention and Permanent Data Retention sections.
For additional information on how your data is used and shared, please refer to the Data Privacy Policy section below.
To make a request for information, please visit our Contact Us page.
Please note that when fulfilling such requests, we can only provide personally identifiable information stored on our systems, such as contact details, order information, and similar data. We cannot provide information that is not personally identifiable, as it cannot be linked to you.
Data Retention
At On The Trigger Ltd., we reserve the right to retain both personal and non-personal data related to orders or services accessed through our website.
Depending on how you use our site, this may include, but is not limited to:
-
Your name
-
Your address
-
Your contact details
-
Your payment information
-
Your site usage statistics
-
Copies of identification
-
Proof of address
-
Cookies
-
Your IP address or other unique web identifiers
This information is stored both in-house and with our third-party service providers for a reasonable period. However, certain data may need to be retained indefinitely due to legal requirements associated with the use of our services.
For further details on how your information is used and shared, please refer to the Data Privacy Policy section below.
Permanent Data Retention
Due to UK legal requirements concerning Realistic Imitation Firearms and Imitation Firearms, we reserve the right to retain information indefinitely related to the sale of replica and imitation firearms, guns, and rifles, whether two-toned or not.
This may include:
-
Your name
-
Your address
-
Your contact details
-
Your delivery details
-
Time and date of purchase
-
Proof of defence
-
Copies of photo ID
-
Copies of proof of address
This information will be stored permanently and is necessary in the event of any legal disputes arising from the misuse of these products.
No other personal information is required, and if requested, we can remove details such as payment methods or other information related to the sale.
Sensitive Information
We request that you do not submit or disclose any sensitive personal information on our website or through any of our partnered services. This includes information relating to racial or ethnic origin, sexual orientation, political opinions, or religious beliefs. This measure is in place to protect both yourself and others.
Data Privacy Policy
Through the use of our Website, we will collect various types of information, both Personal and Impersonal. Types of information collected typically include:
- Impersonal Data
This will typically refer to Website Usage Data, such as number of Page Views, Page Activity, and other data not directly attributable to an individual user. - Personally Trackable Data
This will typically refer to Data collected through an order, Account Activity, or Chat through our community help system. - Shared Information
Some information we may share with a 3rd party for use in Marketing or other Communications. This type of information will not contain private or personal information, but may be data like your Email Address, or Phone Number stored with our Phone Service.
This section will cover who has access to your data, including ourselves, and what it is used for. All information shared with 3rd parties will be treated with respect, and we will only deal with Trustworthy 3rd parties which typically we have met in person.
Impersonal Data
Impersonal data generally refers to website usage information that is not directly linked to an individual. This can include page views, page activity, and other data that cannot be attributed to a specific user.
We use several analytical tools to monitor general website activity. For example, Google Analytics tracks visits to pages, clicked links, time spent on the site, and popular search terms from our search box. This data is collected by third-party providers, stored securely on their servers, and accessed only by our web analysts. It is not available to regular staff.
By using our website, you consent to the sharing of impersonal data with the following companies:
Google
Clerk.io
Personally Trackable Data
We also collect personal data that can be attributed to an individual. This typically occurs during order processing, account activity, or community chat participation. Personal data is used internally by our staff to process orders and manage services.
Personal data may include:
Name
Username
Postal address (billing and shipping)
Telephone numbers (home and mobile)
Email address
Last four digits of credit/debit cards
Profile picture
Social media account ID
Country of residence
Some personal data may be retained indefinitely, particularly when legal requirements apply, such as proof of defence or proof of sale for replica imitation firearms.
We use third-party tools to fulfil orders. Order-related data may be stored in the cloud by these providers and accessed by our staff as required.
Shared Information
At times, we may share non-personal information with third-party companies for purposes such as marketing or communications. This information does not include sensitive or personally identifiable data and may include items such as email addresses for newsletters or phone numbers stored in our internal phone system.
By using our website, you agree that such information may be shared with:
- Mail Chimp
- Brevo
Other Information
Other data may occasionally be shared with third parties, but will not include sensitive data such as order details, card information, or payment information. Data shared is generally required to fulfil an order or service.
Courier and Shipping Information
To complete orders, we share delivery details with courier services. This may include:
Name
Address
Contact phone number
Contact email address
This information may appear on the parcel label and is necessary for delivery. Invoices included in parcels show order details and value but never include payment information. For EU and export orders, additional data may be included per local laws.
Privacy policies for our main couriers:
UKMail – ukmail.com/privacy-and-cookies
Royal Mail – royalmail.com/privacy-policy
UPS – ups.com/ro/em/help-center/legal-terms-conditions-privacy-notice.page
- Evri – evri.com/privacy-policy
Courier selection may vary depending on product restrictions, and you can choose your preferred courier during checkout.
Payment Information
We only require minimal payment information depending on your chosen transaction type. We do not store full card numbers or security codes.
Order data shared with third-party payment providers may include:
Name
Address
Payment details
Card information
Bank account information
Payment processing ensures only necessary data is sent (e.g., payment method and order value).
By placing an order, you consent to sharing information with:
PayPal (Europe) Ltd – paypal.com/en/webapps/mpp/ua/privacy-full
Stripe – stripe.com/gb/privacy
Klarna
Klarna, require sharing certain personal and order information to determine eligibility. Personal data is handled according to Klarna’s privacy policy.
Phone Payments
When paying by phone, we collect your name, address, and payment details. No full card information is stored; data is entered directly into our third-party payment gateway. By using phone payment, you consent to information being shared with:
SagePay
Email Communications
Emails you send may be stored for 6–12 months. We will never request personal details, passwords, or payment information via email, except for ID or address verification for replica firearm purchases.
News Letter Email Collection
You may opt-in to receive newsletters, offers, and promotions. Your email address will never be sold or shared with other marketing lists. You may unsubscribe at any time using the link provided in each email.
Newsletter emails are shared with:
Mail Chimp
- Brevo
Social Media
If you interact with us on social media, your public username and profile picture may be displayed on our site along with your posts.
Requesting Information
You may request a copy of personally identifiable information we hold about you via our Contact Us page. We may charge a fee if requests are excessive. We have one month to provide the information.
Cookies
For information about cookies used on our website, please view our cookie policy.
Should you require any further information please feel free to contact us