Privacy Policy

This Privacy Policy explains how Carl Russell & Co Gunmakers Ltd (“Carl Russell & Co”, “we”, “us”, “our”) collects, uses and protects your personal data when you visit our website or interact with us.

Who we are

Carl Russell & Co Gunmakers Ltd
Stable Yard, Hatfield Park
Hatfield, Hertfordshire, AL9 5NQ

Email: info@carlrussellandco.com
Phone: +44 (0)1707 709372

We are the data controller responsible for your personal data.

What personal data we collect

We collect and process the following types of personal data:

1. Website usage data

When you visit our website, we automatically collect:

IP address
Date and time of access
Pages viewed and files accessed
Referrer URL
Browser and device information

Purpose: website operation, security, and performance
Legal basis: legitimate interest

2. Enquiries and contact forms

When you contact us or submit a product enquiry, we collect:

Name
Email address
Any information you include in your message

Purpose: responding to enquiries and sales follow-up
Legal basis: legitimate interest and pre-contractual steps

3. Purchases and customer accounts

When you make a purchase, we collect:

Name
Email address
Billing and delivery address
Order details

Purpose: processing and fulfilling your order
Legal basis: contract

If you create an account, we store your login details and order history for future use.

4. Firearms and regulated product enquiries and purchases

Where you enquire about or purchase firearms or regulated products, we may process additional information necessary to comply with UK legal and licensing requirements.

This may include:

Information relating to your eligibility to purchase
Details required to arrange collection or transfer to a registered firearms dealer
Communication records relating to the transaction

Important:
All firearms transactions must be completed in person in accordance with UK law. Online activity is limited to enquiry, reservation, or arrangement.

Purpose: compliance with legal obligations and completion of sale
Legal basis: legal obligation and contract

5. Payments

Payments are processed securely via PayPal and Worldpay. We do not store or have access to your full payment details.
We do not store or have access to your full payment details.

Legal basis: contract

6. Marketing

We may use your name and email address to send marketing communications:

where you have given your consent; or
where permitted under applicable law (e.g. soft opt-in for existing customers)

You can unsubscribe at any time.

Legal basis: consent or legitimate interest (soft opt-in)

Cookies and analytics

We use cookies and similar technologies to understand how our website is used and to improve performance.

Non-essential cookies (including analytics) are only used with your consent
Analytics tools may include Google Analytics and Jetpack

For full details, please see our Cookie Policy.

Third-party services

We use trusted third-party providers to operate our website and services, including:

Hosting: Kualo
Website platform: WordPress and WooCommerce
Payments: PayPal, Worldpay
Email marketing: Mailchimp
Analytics: Google Analytics
Delivery / logistics providers

These providers may process personal data on our behalf.

International transfers

Some of our service providers may process data outside the UK.

Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

How long we keep your data

We retain personal data only as long as necessary:

Orders and transaction records: up to 6 years (legal requirement)
Customer accounts: until deleted
Enquiries: up to 12–24 months
Marketing data: until you unsubscribe or withdraw consent

We may retain data longer where required for legal or regulatory reasons.

How we protect your data

We use appropriate technical and organisational measures to protect your personal data.

However, no system is completely secure, and you are responsible for keeping your account details safe.

Sharing your data

We only share your data where necessary, including:

Legal or regulatory authorities where required

Delivery providers (such as courier and postal services)

Payment processors

Service providers supporting our website and operations

Your rights

You have the right to:

Access your personal data
Request correction or deletion
Restrict or object to processing
Request data portability

You can exercise your rights by contacting us.

Complaints

If you have concerns, please contact us first.

You also have the right to complain to the Information Commissioner’s Office (ICO):
www.ico.org.uk

External links

Our website may contain links to other websites.

We are not responsible for their privacy practices.

Contact

If you have any questions about this policy, please contact us: