1. Who we are
Steelfoot Firearms & Ammunition (company number 09828370, VAT number GB507696560) is the controller of the personal information described here. Our registered office is Lindenmuth House, 37 Greenham Business Park, Thatcham, Berkshire RG19 6HW. Contact us about your data at gunroom@steelfoot.co.uk, 0753 202 8472 or WhatsApp on the same number.
2. What we collect
- Order and contact details: name, email, phone, delivery and billing address, order history, and messages you send us.
- Certificate and identity details: your firearm or shotgun certificate details (number, issuing police force, conditions, expiry), photo ID checks and transfer records, when you buy or store licensed items.
- Payment details: handled by Wix's checkout and payment providers. We see the payment status, not your full card number.
- Your receiving dealer: the RFD you choose to collect from.
- Technical data: your IP address and basic browser information, which reach our hosting and font providers when you load the site, and the small amount of browser storage described in our cookie policy.
We do not use advertising or analytics tracking on this website.
3. How we use it, and why we are allowed to
- To take, deliver and support your order, including RFD transfers, collections, returns and refunds. Lawful basis: performing our contract with you.
- To meet our legal duties as a Registered Firearms Dealer, including checking your certificate, keeping our register of transactions, and notifying the police of transfers. Also tax and accounting records. Lawful basis: legal obligation.
- To answer your questions and keep in touch about your order or storage. Lawful basis: contract, or our legitimate interest in looking after customers.
- To prevent fraud and protect our business. Lawful basis: legitimate interests.
- Marketing: we will only send you marketing emails if you have asked us to, and you can stop them at any time.
Details of criminal offences or convictions are only processed where firearms law requires it, for example when the police tell us a certificate has been revoked.
5. Outside the UK
Some of our providers, including Wix, Google (fonts) and Meta (WhatsApp), may process data outside the UK. Where they do, they rely on UK adequacy regulations or approved contract terms to protect it.
6. How long we keep it
- Firearms register entries and transfer records: at least five years, as firearms law requires.
- Order, invoice and accounting records: six years after the end of the financial year they relate to.
- Messages and enquiries that do not lead to an order: up to two years.
- Storage records: for as long as we store items for you, then as above.
7. Your rights
Under UK data protection law you can ask us for a copy of your information, ask us to correct it, delete it or restrict how we use it, object to how we use it, and ask for data you gave us in a portable format. Some rights are limited where we must keep records by law, such as our firearms register. To use any of these rights, contact us; we will reply within one month.
If you are unhappy with how we handle your data, please tell us. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
8. Security
We keep paper records, including certificates and registers, securely, and limit access to staff who need it. Please do not send photos of your certificate through the contact form or WhatsApp; we will tell you how to send it securely when it is needed.
9. Changes
We may update this policy. The date at the top shows when it last changed.