Data Processing and Storage Policy
As a responsible business that processes and stores customer data, we have written this policy to coincide with the new GDPR rules brought in on May 25th 2018. In this policy we will outline our methods for gathering and storing your personal data as well as explain the limited sharing of your data with our third-party partners.
Responsible Data Processing
- GDPR: General Data Protection Regulation. A new regulation brought in by the European Union to protect the data of EU citizens and to regulate the gathering and storing of personal data
- Data: Any information that we store about you
- Explicit Consent: A clear way to opt in to anything related to your data
- IP Address: A unique string of numbers separated by full stops that identifies each computer using
- Cookies: A packet of data sent by an Internet server to a browser, which is returned by the browser each time it subsequently accesses the same server, used to identify the user or track their access to the server
- Third-Party Partner: A company or service that we share your data with or have access to your data
- Exhaustive List: A complete list
- Data Processor: A person who processes your data
- Data Controller: A person who oversees the collection and storage of your data
Who collects your data?
At the The Hunting Edge Country Sports we process your data responsibly. We believe it is important for you to understand who, what, where, when and why we process your data so we have broken this information down into those very questions.
Only fully trained members of staff at the The Hunting Edge Country Sports will process your data. A Data Processor is someone who will take your information and process it into our systems. A Data Controller is someone who acts as an administrator, is responsible for the overall data collection process and assures that your data is protected at all times.
What is your data?
We collect a range of information from our customers. Some is general such as your basic contact information and some is more specific, such as Shotgun or Rifle License Numbers. What we collect usually depends on what you are trying to do with us. Below is a list of the most common data we collect but you can request an exhaustive list of what we collect by emailing firstname.lastname@example.org
- Email Address
- Telephone Number
- Shipping Address
- Billing Address
- Order Details
- IP Address
- Device and Browser Information
Where do we collect your data?
We collect your data in a few locations. We collect your data in person in our store, over the phone through our telephone mail order service and online through the Hunting Edge Country Sports website.
When do we collect your data?
We collect different pieces of data at different times. For example one of our third-party services collects anonymised information about your movements on our website as soon as you arrive. But most of the data we collect from you is as part of the purchase process, either online, in store or on the phone. We may also be in touch at a later data to get more information from you regarding your order.
Why do we collect your data?
As with any online and distance retailer, the primary cause for collecting your data is to process your order, payment and delivery. We also collect data on your purchases in store. The main reason for this is that we are a firearms retailer and need to keep strict records of what is bought and when.We also collect data for marketing purposes. You can opt out of this at any time by logging in to your account and clicking on ‘Newsletter Subscriptions’.
Responsible Data Storage
Responsible data storage is extremely important when caring for your data. Because of this we only store your data in the most secure way. We store your data in a variety of places but we have assured that each of these locations use the most up to date security measures. Our internal and external servers are updated regularly with security patches and follow the best practices of server security.
Some of your data may be stored with our third-party partners, but like our own storage solutions, we have assured that these partners follow the most stringent security practices to protect your data.
We use a selection of third-party partners for some of our internal and customer-facing processes, because of this they may store some of your data. We have assured that these partners’ services are securely storing your data and are also GDPR compliant. Here is a list of our main third-party partners, why we use them and the data they store, but you can request an exhaustive list by emailing email@example.com
|Company||Informations shared / available||Purpose|
|IP Addresses, ISP Information, Device Information, Website Activity, Browser Information||Tracking Customer Sales, User Journeys and Activity on our website. For maintenance and improvement of our service|
|Mail Chimp||Names, Addresses, Telephone Numbers, Email addresses, IP||Marketing|
|PayPal||Card Details, Names, Addresses,||Payment Provider|
|PayL8r||Names, Addresses, Telephone Numbers, Email addresses, Bank Details, Order Details||Underwriting Finance|
|WorldPay||Card Details, Names, Addresses,||Payment Provider|
|DHL||Names, Addresses, Telephone Numbers, Email addresses,||Delivery of Goods|
|Royal Mail||Names, Addresses, Telephone Numbers, Email addresses,||Delivery of Goods|
|Parcelforce||Names, Addresses, Telephone Numbers, Email addresses,||Delivery of Goods|
|DPD||Names, Addresses, Telephone Numbers, Email addresses,||Delivery of Goods|
|Parcel to Go||Names, Addresses, Telephone Numbers, Email addresses,||Delivery of Goods|
|HE and SiteGround Servers||Names, Addresses, Telephone Numbers, Email addresses, order details, licence details||Management of Orders, customer services and marketing|
|Recart||Email Addresses||Abandonded Cart Re-marketing|
According to the Information Commissioners Office, the GDPR rules are there to protect you and your data. They list 7 key rights for individuals; we have listed them below with a little more explanation for each and what it means for you at the The Hunting Edge Country Sports
The right to be informed
This means that you have the right to fully understand our data collection, processing and storage processes. These are outlined in section 2 and 3 of this document.
The right of access
This means that you have the right to access all the data we have stored about you. You can access this information by emailing us at we will respond with a complete report of your data within 30 days.
The right to rectification
This means that you have the right to correct any incorrect data that we have stored about you. You can request these be made by emailing firstname.lastname@example.org, and we will respond within 30 days.
The right to erasure
This means that you have the right to request that we remove the data* that we have about you from our systems and those belonging to our third-party partners. You can request this by emailing email@example.com, and we will respond within 30 days.
*Please note that certain information must be stored for police records, this includes the contact, order and license information of any shotgun, firearm, air rifle or knife sale.
The right to restrict processing
This right allows you to restrict the use of your data, for example if we are unable to delete your data as in section 5.v, you can still restrict how we use it, such as preventing us from using it for marketing activity. You can request that we restrict the use of your data by emailing firstname.lastname@example.org , we will respond within 30 days.
The right to data portability
This means that you have the right to request a report of your data from us to pass on to another company/ third-party. There is no standard format for these reports so you may need to edit it to conform to this new party. Once you request a data porting report we will delete your information (if possible) after 90 days. You can request a Data Porting report by emailing email@example.com
The right to object
This means that you have a right to object to the use of your data in any way, for example, statistic gathering, email marketing, customer profiling and so on. You can object at any time, even if you have already given explicit consent. To object to any use of your data you can email firstname.lastname@example.org