Privacy Policy u2014 Polymer 80 Glock

Last updated: April 10, 2024

This Privacy Policy governs the manner in which Polymer 80 Glock (“we,” “our,” or “us”) collects, uses, maintains, and discloses information collected from users (“you” or “your”) of the polymer80glock.com website and associated services. We are a specialized retailer catering to builders of PF940v2, PF940C, PF45, PFS9, PFC9, and other related platforms. We are committed to protecting your privacy and handling your data with transparency and security. We do not sell your personal data to third parties for marketing or any other purposes.

1. Information We Collect

We collect information necessary to process your orders, provide customer support, and comply with legal obligations. The categories of information we collect include:

• Identifiers and Contact Information: Name, shipping/billing address, email address, and telephone number.
• Commercial Information: Records of products purchased, order history, payment method (but not full payment card details, which are handled by our processor), and customer service communications.
• Technical Data: Internet Protocol (IP) address, browser type, operating system, referring URLs, pages visited on our site, and dates/times of access. This is collected via first-party tools only.
• Financial Information: We do not directly store or process full credit/debit card numbers. Payment transactions are handled by our secure, PCI-compliant third-party payment processor, which provides us only with confirmation and the last four digits of your card for verification purposes.

2. How We Use Your Information

Your information is used strictly for operational and legal purposes related to our business as a specialist retailer. Uses include:

1. Order Fulfillment: To process, ship, and deliver your orders, and to send you order and shipping confirmations.
2. Customer Support: To respond to your inquiries, troubleshoot technical build issues, process returns or warranties, and provide general assistance.
3. Legal and Compliance: To comply with applicable laws, regulations, and tax reporting requirements, including record-keeping mandates for firearm-related components.
4. Website Operation: To maintain, secure, and improve the functionality of our website, prevent fraud, and analyze site performance using first-party analytics.
5. Communication: To send you transactional communications related to your orders. We do not engage in promotional email marketing without your explicit, separate consent.

3. Third-Party Sharing of Information

We share your personal information only as necessary to complete core business functions and to comply with the law. We do not share your data with marketers, data brokers, or advertising networks. Our limited sharing partners are:

Third-Party Category	Purpose of Sharing	Data Shared
Payment Processors (e.g., Stripe, PayPal)	To securely process your payment for orders.	Identifiers, contact information, and payment instructions. We do not receive or store your full payment card details.
Shipping Carriers (e.g., USPS, UPS, FedEx)	To deliver your order to your provided address.	Name, shipping address, and contact number (for carrier notifications).
Tax Authorities & Regulatory Bodies	To comply with sales tax calculation, reporting, and other legal obligations.	Transaction details, amounts, and necessary identifiers as required by law.

All third-party service providers are contractually obligated to use your information only to perform the services we have engaged them for and to protect it in accordance with applicable data protection laws.

4. Cookies and Tracking Technologies

We use only first-party cookies and similar technologies. We do not employ third-party advertising or cross-site tracking cookies. Our use is limited to:

• Essential Cookies: Required for site functionality, such as maintaining your session and shopping cart.
• Analytics Cookies: First-party tools (such as a self-hosted or privacy-focused analytics platform) to understand site traffic, page popularity, and performance issues. This data is aggregated and anonymized where possible.
• Preference Cookies: To remember your site preferences, such as login state.

You can control cookie settings through your browser preferences. Disabling essential cookies may impair site functionality.

5. Data Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Our specific retention schedule is:

• Tax and Legal Compliance Records: 7 years, as required by federal and state tax laws and other regulations pertaining to our industry.
• Customer Support and Order History: 3 years from the date of last interaction, to facilitate warranty support, returns, and future customer service inquiries.
• Website Analytics Data: Aggregated and anonymized data may be retained indefinitely for trend analysis.

After the retention period expires, we will securely delete or anonymize your personal data.

6. Data Security Measures

We implement a range of technical and organizational measures designed to protect your data from unauthorized access, alteration, or destruction. These measures include:

• Encryption in Transit: Use of HTTPS/TLS protocols across our entire website.
• Encryption at Rest: Sensitive data stored in our databases is encrypted.
• Access Controls: Strict limitation of employee access to personal data on a need-to-know basis, governed by strong authentication protocols.
• Regular Security Assessments: We periodically review our information collection, storage, and processing practices to update our physical, technical, and organizational safeguards.
• PCI DSS Compliance: We partner with payment processors that are certified to the highest PCI DSS (Payment Card Industry Data Security Standard) levels.

7. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information. We will comply with all applicable laws in responding to your requests.

• Access: You may request a copy of the personal information we hold about you.
• Deletion: You may request that we delete your personal information, subject to our need to retain it for legal compliance, tax, or fraud prevention purposes.
• Correction: You may request that we correct inaccurate or incomplete personal data we hold about you.
• Opt-Out of Sale/Sharing: We do not sell your personal data. As we do not engage in cross-context behavioral advertising, there is no “sharing” for targeted advertising purposes.

To exercise any of these rights, please contact us using the information in the “Contact for Privacy Requests” section below. We may need to verify your identity before processing your request.

8. Children’s Privacy

Our website, products, and services are intended for individuals who are 18 years of age or older. We do not knowingly collect, solicit, or maintain personal information from anyone under the age of 18. If you are a parent or guardian and believe your child has provided us with information, please contact us, and we will promptly delete such information.

9. California Privacy Rights (CCPA/CPRA)

Under the California Consumer Privacy Act as amended by the CPRA, California residents have specific rights. We act as a “business” under these laws.

Click to view details on California Consumer Rights

Right to Know: You have the right to request, up to twice in a 12-month period, the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.

Right to Delete: You have the right to request deletion of your personal information, subject to legal exceptions.

Right to Correct: You have the right to request correction of inaccurate personal information.

Right to Opt-Out: We do not sell your personal information. We do not “share” your personal information for cross-context behavioral advertising.

Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, a California resident may contact us via the methods below. We will respond within 45 days, as required by law.

10. International Users (GDPR Considerations)

While our business and website are primarily directed to customers in the United States, we acknowledge the principles of the EU General Data Protection Regulation (GDPR) where applicable. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the right to:

• Access, rectify, or erase your personal data.
• Restrict or object to the processing of your personal data.
• Data portability.
• Lodge a complaint with a supervisory authority.

Our legal basis for processing your data under the GDPR typically includes the necessity of processing for the performance of a contract (e.g., fulfilling your order), compliance with a legal obligation, and our legitimate interests in operating and securing our website and services.

11. Contact for Privacy Requests

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or need to contact our data protection point of contact, please use the following method:

• Email: privacy [at] polymer80glock.com

Please allow a reasonable time for us to respond to your inquiry. We are committed to working with you to resolve any concerns about your privacy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. We encourage you to review this page periodically for the latest information on our privacy practices.