Privacy Policy

Last updated: January 2024

1. Who We Are

Black Barrel Armouries Ltd (“BBA”, “we”, “us”) is the data controller for personal data collected through bbauk.co. We are based at Suite A, No.82 James Carter Road, Mildenhall, Bury St. Edmunds, IP28 7DE. Contact: info@bbauk.co.

2. Data We Collect

We collect the following categories of personal data:

  • Contact information: name, email address, postal address
  • Enquiry content submitted through contact forms
  • Order information for product purchases
  • Firearms certificate data for storage customers: certificate number, issuing constabulary, expiry date only
  • Website usage data via cookies (see Cookie Policy)

We do not retain physical copies of firearms licences or shotgun certificates.

3. Legal Basis for Processing

We process your data on the following legal bases under UK GDPR:

  • Contractual necessity — to process orders and provide storage services
  • Legal obligation — RFD register entries are required by UK firearms legislation
  • Legitimate interests — responding to enquiries, improving the website
  • Consent — non-essential cookies (where you have accepted)

4. Data Retention

Contact and order data is retained for six years in line with HMRC requirements. RFD register entries are retained for a minimum of five years as required by the Firearms Act 1968 and subsequent amendments. Firearms certificate data for storage customers is deleted upon termination of the storage agreement, subject to statutory minimum retention periods.

5. Your Rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Request erasure (where legally permissible)
  • Restrict processing
  • Data portability
  • Object to processing based on legitimate interests

To exercise your rights, contact info@bbauk.co. You may also complain to the Information Commissioner’s Office at ico.org.uk.

6. Third Parties

We use Stripe for payment processing — their privacy policy applies to card transactions. We do not sell personal data to third parties. Data may be disclosed to the police or Home Office as required by UK firearms legislation.

7. Security

Personal data is encrypted at rest. Access is restricted to authorised personnel. We maintain appropriate technical and organisational measures to protect against unauthorised access, loss, or disclosure.