Privacy Policy
Effective Date: June 1, 2025
Last Updated: June 1, 2025
Ballistic Defence LLC ("Ballistic Defence," "we," "us," or "our") operates the website ballisticdefence.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our Site or make a purchase from us.
By using our Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please do not use our Site.
1. Information we collect
We collect personal information in the following categories:
A. Information you provide directly
- Identifiers: First and last name, email address, phone number, billing address, shipping address
- Account credentials: Username and password if you create an account
- Payment information: Payment method type, billing address, and last four digits of card (we do not store full card numbers — payment data is processed by PCI DSS-compliant third parties)
- Communications: Any messages, inquiries, or feedback you send us via email or contact forms
- Purchase eligibility attestation: Your confirmation at checkout that you are 18 or older and legally permitted to purchase body armor in your jurisdiction
B. Information collected automatically
- Device and browser data: IP address, browser type and version, operating system, device type
- Usage data: Pages visited, time spent on pages, links clicked, referring URLs, search terms used on the Site
- Cookie and tracking data: Cookie identifiers, session tokens, pixel data (see Section 5 — Cookie Policy for details)
C. Information from third parties
- Payment processors: Transaction status and fraud signals
- Shipping carriers: Delivery confirmation and tracking updates
- Analytics providers: Aggregated website traffic and behavior data
2. How we use your information
We use the personal information we collect for the following purposes:
Order fulfillment and customer service
- Processing and fulfilling your orders
- Sending order confirmations, shipping notifications, and tracking information
- Responding to your questions, returns, warranty claims, and complaints
- Verifying purchase eligibility as required by applicable law
Business operations
- Processing payments and preventing fraud
- Maintaining and improving our website and product offerings
- Analyzing website traffic and user behavior to improve user experience
- Complying with legal obligations including tax, accounting, and law enforcement requests
Marketing and communications
- Sending promotional emails, newsletters, and product announcements (only if you have opted in or made a prior purchase)
- Delivering targeted advertisements on third-party platforms (only with your cookie consent)
- Conducting customer satisfaction surveys
You may opt out of marketing communications at any time by clicking "unsubscribe" in any email we send, or by contacting us at info@ballisticdefence.com. Opting out of marketing does not affect transactional communications related to your orders.
3. How we share your information
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share your information only in the following circumstances:
Service providers
We share personal information with trusted service providers who perform functions on our behalf. These providers are contractually obligated to use your data only as necessary to provide their services to us:
| Provider | Purpose | Data shared |
|---|---|---|
| Shopify Inc. | E-commerce platform, order management, storefront | Name, address, order details, payment type |
| Payment processors (e.g., Stripe, PayPal, Shop Pay) | Payment authorization and fraud prevention | Billing address, payment method type |
| Shipping carriers (USPS, UPS, FedEx) | Order fulfillment and delivery | Name, shipping address, phone number |
| Email marketing tools (e.g., Klaviyo, Shopify Email) | Transactional and promotional communications | Name, email address, order history |
| Google Analytics | Website traffic analysis and performance | IP address (anonymized), browser data, page views |
| Advertising platforms (e.g., Meta, Google Ads) | Targeted advertising (only with cookie consent) | Cookie identifiers, browsing behavior |
Legal requirements
We may disclose your personal information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our legal rights, prevent fraud, or respond to a national security or law enforcement request.
Business transfers
In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our website before your information becomes subject to a different privacy policy.
4. Data retention
We retain personal information for the following periods:
| Data type | Retention period | Reason |
|---|---|---|
| Order and transaction records | Minimum 7 years | Tax, accounting, and legal compliance |
| Account and profile data | Duration of account + 2 years after closure | Customer service and dispute resolution |
| Purchase eligibility attestations | Minimum 7 years | Legal compliance and liability protection |
| Marketing and email preferences | Until unsubscribe or deletion request | CAN-SPAM / CCPA compliance |
| Customer service communications | 3 years | Quality assurance and dispute records |
| Website analytics data | Up to 26 months | Standard Google Analytics retention |
After the applicable retention period, data is securely deleted or anonymized. We may retain data beyond these periods if required by law or for pending legal proceedings.
5. Cookie policy
We use cookies and similar tracking technologies (pixels, web beacons, local storage) to operate and improve our Site. A cookie is a small text file stored on your device by your browser.
Categories of cookies we use
| Category | Purpose | Can be disabled? |
|---|---|---|
| Strictly necessary | Shopping cart, checkout session, security tokens, login state | No — required for site to function |
| Functional | Remembering language preferences, saved addresses | Yes — via cookie settings |
| Analytics | Google Analytics — understanding traffic patterns and page performance | Yes — via cookie settings |
| Marketing / advertising | Meta Pixel, Google Ads — delivering relevant ads and tracking campaign performance | Yes — via cookie settings |
Managing your cookie preferences
When you first visit our Site, you will be presented with a cookie consent banner where you can choose to accept or decline non-essential cookies. You may update your preferences at any time by clicking the "Cookie Settings" link in our website footer.
You may also control cookies through your browser settings. Note that disabling cookies may impact certain site functionality such as the shopping cart and checkout process.
To opt out of Google Analytics tracking specifically, you may use the Google Analytics Opt-out Browser Add-on.
6. Data security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction:
- All data transmitted through our Site is encrypted using SSL/TLS technology
- Payment data is processed exclusively by PCI DSS-compliant payment processors — we do not store full card numbers
- Access to personal data within our organization is limited to personnel who require it to perform their job functions
- Our e-commerce platform (Shopify) maintains SOC 2 Type II certification
No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
7. Florida residents — Florida Information Protection Act
Ballistic Defence LLC is incorporated and operates in the State of Florida and is subject to the Florida Information Protection Act (FIPA), Fla. Stat. § 501.171.
In the event of a data breach that is reasonably believed to have affected your personal information, we will notify you without unreasonable delay and no later than 30 days after determining a breach has occurred, unless a law enforcement agency determines that notification would impede a criminal investigation. Notification will be sent to the email address associated with your account.
If a breach affects more than 500 Florida residents, we will also notify the Florida Department of Legal Affairs as required by law.
8. California residents — CCPA / CPRA
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you specific rights regarding your personal information.
Your rights
- Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months, the sources from which it was collected, the purposes for which it was used, and the categories of third parties with whom it was shared.
- Right to delete: You may request deletion of your personal information. We will comply unless retention is required by law (e.g., order records for tax purposes) or necessary to complete your transaction.
- Right to correct: You may request correction of inaccurate personal information we hold about you.
- Right to opt out of sale or sharing: We do not sell or share your personal information for cross-context behavioral advertising. You may contact us to confirm this at any time.
- Right to limit use of sensitive personal information: We do not use sensitive personal information beyond what is necessary to provide our services.
- Right to non-discrimination: We will not deny you services, charge you different prices, or provide a different quality of service because you exercised any CCPA/CPRA rights.
How to submit a request
To exercise any of the above rights, submit a verifiable consumer request to:
- Email: info@ballisticdefence.com
- Subject line: "CCPA Privacy Request"
We will respond within 45 days of receiving a verifiable request. If we require additional time (up to 90 days total), we will notify you of the extension within the initial 45-day period. We may need to verify your identity before processing your request.
You may designate an authorized agent to submit a request on your behalf. We will require written proof of the agent's authorization and may verify your identity directly.
9. Children's privacy
Our Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have inadvertently collected personal information from a person under 18, we will delete it promptly. If you believe we have collected information from a minor, please contact us at info@ballisticdefence.com.
10. Links to third-party websites
Our Site may contain links to third-party websites (e.g., social media platforms, carrier tracking pages). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.
11. Changes to this privacy policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email at the address associated with your account and/or by posting a prominent notice on our website at least 14 days before the change takes effect. The updated policy will display a revised "Last Updated" date at the top of this page.
Your continued use of our Site after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.
12. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Ballistic Defence LLC
Altamonte Springs, Florida
Email: info@ballisticdefence.com
Subject line for privacy matters: "Privacy Request"
We will respond to all privacy-related inquiries within 2 business days and to formal rights requests within the legally required timeframes noted above.