Privacy Policy

Effective Date: June 2, 2026   |   Last Reviewed: June 2, 2026

This Privacy Policy explains how Tatted Tacticals (“we,” “us,” or “our”) collects, uses, shares, and protects the personal information of visitors and customers at tattedtacticals.com. Because we operate in the firearms and ammunition industry, this Policy contains provisions that go beyond a standard e-commerce privacy notice. Federal law — including the Gun Control Act of 1968 (18 U.S.C. § 921 et seq.) and Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) regulations — imposes specific record-keeping and disclosure obligations on firearms and ammunition retailers. Where those obligations affect how we collect, retain, or share your data, we explain them in plain terms below.

Table of Contents

1. Who We Are
2. Scope of This Policy
3. Information We Collect
4. Age Verification and Compliance Data
5. How We Use Your Information
6. Legal Compliance and Regulatory Obligations
7. Who We Share Your Data With
8. Cookies and Tracking Technologies
9. Data Retention
10. Data Security
11. Your Privacy Rights
12. California Residents — CCPA / CPRA
13. Children’s Privacy
14. Marketing Communications
15. Changes to This Policy
16. Contact Us

1. Who We Are

Tatted Tacticals is a veteran-owned online retailer of firearms, ammunition, triggers, optics, and tactical accessories operating at tattedtacticals.com. We ship to lawful adult purchasers across all 50 states, subject to applicable federal, state, and local laws. Our primary business contact is sales@tattedtacticals.com.

Our catalogue includes rifle, handgun, and shotgun ammunition, Super Safety Triggers, binary triggers, optics, brass, and reloading components. Every sale is conducted with full awareness of the regulatory environment governing the civilian firearms market in the United States. Our commitment to compliance is reflected in the way we collect and manage your data.

2. Scope of This Policy

This Privacy Policy applies to all personal data collected through:

• The tattedtacticals.com website and WooCommerce store
• Our customer account and order management system
• Email, phone, or written communications with our team
• Age verification and compliance screening processes at checkout
• Our Contact Us form and customer support channels

This Policy does not apply to third-party websites, payment processors, or external platforms linked from our site. Those entities operate under their own privacy policies, which we encourage you to review independently.

3. Information We Collect

3.1 Information You Provide Directly

When you create an account, place an order, contact our team, or subscribe to communications, we may collect the following categories of personal information:

• Identity data — full name, username, and account credentials (passwords are stored in hashed, non-reversible form)
• Contact data — email address, billing address, shipping address, and optional phone number
• Payment data — credit or debit card number, expiration date, and CVV code, transmitted directly to our PCI DSS-compliant payment processor. We do not store full card numbers on our servers. Only the last four digits and card type are retained in your order record.
• Order and transaction data — products purchased, quantities, order totals, timestamps, order status, and fulfillment history
• Age verification data — date of birth or age certification required to confirm you meet the federal and state minimum age requirements for the purchase of ammunition and firearms accessories. See Section 4 for full detail.
• FFL dealer data — name, address, and Federal Firearms License number of your designated transfer dealer, collected only when an order includes a serialized firearm requiring FFL transfer under 18 U.S.C. § 922
• Communications — the full content of messages you submit through our Contact Us page, customer support tickets, and email correspondence with our team

3.2 Information Collected Automatically

When you visit tattedtacticals.com, we and our service providers automatically collect certain technical and behavioral data:

• IP address and approximate geolocation — used for preliminary state-level compliance screening to determine whether your order destination is subject to shipping restrictions under our State Shipping Restrictions policy
• Device and browser data — browser type, device type, operating system, and screen resolution
• Usage data — pages visited, product pages viewed, search queries entered on our site, links clicked, time on page, and referral source
• Shopping data — items added to cart, abandoned cart contents, wishlist activity, and purchase conversion behavior
• Cookie identifiers — session and persistent cookie values that support site functionality, security, login state, and analytics (see Section 8)

3.3 Information Received from Third Parties

We may receive supplemental data from the following third-party sources:

• Payment processors — transaction authorization status, fraud risk signals, and chargeback notifications
• Shipping carriers (UPS, FedEx, USPS) — delivery confirmations, returned package notices, and address validation results
• Analytics providers — aggregated and anonymized site-traffic data used to improve performance

4. Age Verification and Compliance Data

The purchase of ammunition in the United States is subject to federal minimum age requirements under 18 U.S.C. § 922(b)(1): purchasers must be at least 18 years of age for rifle and shotgun ammunition, and at least 21 years of age for handgun ammunition. Multiple states impose higher age thresholds and additional purchasing requirements on top of the federal baseline.

To fulfill these legal obligations, we collect and process the following compliance-related data at every transaction:

• State of residence — derived from your billing and shipping address and used to apply the applicable state-level purchasing restrictions before your order is confirmed. A full breakdown of state-by-state rules is available on our State Shipping Restrictions page and our Ammunition Shipping Compliance resource.
• Age certification — by completing a purchase on tattedtacticals.com, you affirmatively certify under penalty of applicable law that you are at least 18 years of age (or 21 years of age for handgun ammunition), and that you meet all minimum age requirements imposed by the laws of your state. We reserve the right to request documentary verification for orders flagged by our compliance system.
• Product eligibility screening — each order is automatically evaluated against destination-state restrictions before fulfillment. Orders destined for restricted jurisdictions will be cancelled and fully refunded. We do not ship ammunition, triggers, or other restricted items to states where their sale or shipment is prohibited.

Compliance data collected during your order is retained as part of your permanent order record. Certain transaction records are subject to extended retention obligations under federal and state law. See Section 9 for retention periods.

5. How We Use Your Information

We use the personal data we collect for the following purposes:

Order Fulfillment — to process, pack, and ship your order; send order confirmations and tracking notifications; and resolve fulfillment issues including returns, exchanges, and damage claims in accordance with our return policy.

Age and State Compliance Verification — to confirm that you meet all applicable minimum age requirements and that your order does not violate the ammunition or firearms accessory laws of your state. This is a non-discretionary legal obligation under federal and state law, not an optional business process.

Payment Processing — to authorize and capture payment, prevent fraudulent transactions, and process refunds. Payment data is transmitted to and processed by our PCI DSS-compliant payment processor. We retain only the last four digits of your card number and the expiration date for your records.

Account Management — to create and maintain your customer account, allow you to view order history, manage saved addresses, and update communication preferences.

Legal and Regulatory Compliance — to satisfy our obligations under federal and state law, including the Gun Control Act, ATF regulations, and the various state statutes governing the sale and shipment of ammunition and firearms accessories. See Section 6 for a detailed explanation.

Customer Service — to respond to inquiries and questions submitted through our Contact Us page or via email, resolve disputes, and provide technical assistance.

Site Security and Fraud Prevention — to detect, investigate, and prevent fraudulent orders, account takeovers, payment fraud, and unauthorized access to our systems and databases.

Analytics and Site Improvement — to understand how visitors use tattedtacticals.com, identify performance issues, improve the browsing and checkout experience, and optimize product presentation.

Safety Education — we use usage data to surface relevant firearm safety resources such as our Firearms Safety Guide and the Four Rules of Gun Safety to customers browsing our site.

Marketing Communications — to send promotional emails and product announcements to customers who have opted in. You may unsubscribe at any time. We do not sell your email address to third parties. See Section 14 for full detail.

6. Legal Compliance and Regulatory Obligations

As an ammunition and firearms accessories retailer, we are subject to regulatory requirements that impose specific data obligations distinct from standard e-commerce law:

ATF Record-Keeping (27 C.F.R. Part 478) — Licensed firearms dealers are required to maintain acquisition and disposition records under federal regulation. To the extent our business activities create obligations under ATF rules, records including purchaser identity, product description, and transaction dates will be retained for the legally required period — generally a minimum of 20 years for bound book entries — and may be produced to the ATF upon lawful request. These records cannot be deleted upon customer request.

Law Enforcement Requests — We may be required to disclose customer information to federal, state, or local law enforcement in response to valid legal process, including subpoenas, court orders, search warrants, or lawful administrative requests from the ATF, FBI, or other agencies. Where permitted by law, we will notify you of such a request.

State Compliance Screening — State laws governing ammunition purchases, magazine capacity, and trigger mechanisms vary significantly across jurisdictions. California, New York, New Jersey, Illinois, Massachusetts, and other states impose restrictions on certain calibers or product types. We apply your address data to screen for compliance before processing your order. Customers are encouraged to review our State Shipping Restrictions page and our Ammunition Shipping Compliance resource before placing an order.

Trigger and Accessory Compliance — Federal and state regulations governing certain trigger mechanisms — including binary triggers and advanced trigger systems — are subject to change. Customers purchasing from our Super Safety Triggers or Binary Triggers categories should independently verify current legality in their state before ordering. We will not ship devices that are prohibited in your state of residence, and we use your address data for this verification.

7. Who We Share Your Data With

We do not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share data only in the following limited circumstances:

Payment Processors — Your payment information is transmitted to our payment processor for authorization and fraud screening. The processor’s own privacy policy governs their handling of that data.

Shipping Carriers — Your name, shipping address, and relevant order contents (including hazardous material classifications for certain ammunition shipments under DOT regulations) are shared with UPS, FedEx, or USPS to fulfill and track your order.

Compliance and Age Verification Services — We may share billing and shipping address data with third-party state-compliance screening tools to verify purchase eligibility. These services are contractually restricted to using your data only for the designated compliance purpose.

FFL Dealers — If your order includes a serialized firearm requiring a transfer under federal law, your name, address, and order details will be shared with the FFL dealer you designate, who will conduct the required background check (NICS) and facilitate the transfer. The FFL dealer’s own legal obligations govern their handling of that data.

Legal Authorities — As described in Section 6, we may disclose data to law enforcement or regulatory agencies in response to valid legal process or our regulatory obligations under ATF rules and applicable federal statutes.

Service Providers — We use a limited number of trusted technology service providers — including email delivery platforms, analytics tools, and customer support software — who process data on our behalf under written data processing agreements. These providers are not permitted to use your data for their own purposes.

8. Cookies and Tracking Technologies

Tattedtacticals.com uses cookies and similar client-side tracking technologies for the following purposes:

• Session management — to maintain your shopping cart, checkout state, and login session across pages during your visit
• Authentication — to remember your login when you select “Remember Me” at the account login screen
• Analytics — Google Analytics and similar tools receive anonymized usage data (page views, session duration, traffic source) to help us understand and improve site performance. This data is aggregated and does not identify you personally.
• Payment security — our payment processors set their own cookies to support fraud detection and secure transaction processing during checkout
• Retargeted advertising — we may use pixel-based tracking (e.g., Meta Pixel, Google Ads) to serve relevant advertisements on third-party platforms to visitors who have previously browsed our site. You can opt out of interest-based advertising through your browser privacy settings or at optout.aboutads.info

Managing Cookies — You can refuse or delete cookies through your browser settings. Disabling certain cookies may affect site functionality, including shopping cart persistence, account login, and checkout flow. Instructions for managing cookies are available in your browser’s help documentation.

9. Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this Policy, subject to legal retention obligations:

• Order records — retained for a minimum of 7 years for tax, accounting, and general legal compliance purposes
• ATF-regulated records — retained for the period prescribed by 27 C.F.R. Part 478, which may be 20 years or more for records subject to ATF bound-book requirements. These records cannot be deleted upon consumer request.
• Age and compliance verification data — retained with the associated order record for the full order retention period
• Customer account data — retained for the life of your account and for 2 years following account closure, after which it is deleted or anonymized unless a longer period is required by law
• Marketing data — retained until you unsubscribe or submit a deletion request, whichever occurs first
• Customer service communications — retained for 3 years following resolution of the relevant inquiry or dispute

You may request deletion of personal data that is not subject to mandatory legal retention by contacting us through our Contact Us page. We will respond to deletion requests within 30 days and will specify any records we are obligated to retain.

10. Data Security

We implement industry-standard technical and organizational safeguards to protect your personal data against unauthorized access, disclosure, alteration, and destruction:

• SSL/TLS encryption across all pages, including checkout, account management, and the contact form
• PCI DSS-compliant payment processing — full card data is never stored on our servers. Card processing occurs entirely within our payment processor’s secure environment.
• Access controls — customer data is accessible only to authorized personnel with a legitimate, documented business need
• Platform security — our e-commerce platform undergoes regular security patches, plugin audits, and vulnerability assessments
• Database security — order and customer databases are isolated from public access and protected by server-level firewall rules

No method of electronic transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at sales@tattedtacticals.com or via our Contact Us page. We will investigate all reported security incidents and notify affected customers as required by applicable breach notification laws.

11. Your Privacy Rights

Depending on your state of residence, you may have the following rights with respect to your personal data held by Tatted Tacticals:

• Right to Access — request a copy of the personal data we hold about you, including the categories of data, its sources, and how it has been used
• Right to Correction — request correction of inaccurate or incomplete personal data in your account or order records
• Right to Deletion — request deletion of your personal data, subject to our legal retention obligations under ATF regulations and other applicable laws (see Section 9)
• Right to Data Portability — receive a copy of your personal data in a structured, machine-readable format
• Right to Opt Out of Marketing — unsubscribe from promotional emails at any time using the link in any message we send, or by contacting us directly
• Right to Lodge a Complaint — if you believe your privacy rights have been violated, you may file a complaint with your state’s Attorney General or the relevant data protection authority

To exercise any of these rights, submit a request through our Contact Us page or email sales@tattedtacticals.com. We will verify your identity before processing the request and will respond within 30 days. Records subject to mandatory legal retention cannot be deleted upon request.

12. California Residents — CCPA / CPRA

If you are a resident of California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you additional rights that supplement those described in Section 11:

• Right to Know — the specific categories and pieces of personal information we have collected about you and how they have been used or disclosed
• Right to Delete — personal information we have collected, subject to exceptions including legal compliance records
• Right to Correct — inaccurate personal information in our records
• Right to Opt Out — of the sale or sharing of your personal information. We do not sell personal information to third parties.
• Right to Non-Discrimination — we will not discriminate against you for exercising any CCPA right

Categories of personal information collected include: identifiers (name, email address, IP address, billing/shipping address); commercial information (purchase history, products viewed); financial information (last four digits of payment card); Internet and network activity (browsing behavior, search queries); and geolocation data (approximate location derived from IP address).

California Ammunition Purchasers: Under California Penal Code § 30352, residents purchasing handgun ammunition must provide a valid California driver’s license or state-issued ID. Our compliance screening automatically applies California-specific restrictions to orders destined for California addresses, which may include the collection of additional identity documentation. Review our State Shipping Restrictions page for complete California-specific purchasing requirements.

To submit a CCPA/CPRA request, contact us at sales@tattedtacticals.com or use our Contact Us page. Requests will be verified and processed within 45 days, with a possible 45-day extension where required.

13. Children’s Privacy

Tatted Tacticals does not knowingly collect, solicit, or retain personal information from individuals under the age of 18. Our website, products, and services are intended exclusively for adults who meet all applicable federal and state minimum age requirements for the purchase of ammunition and firearms accessories. We do not market to, and have no interest in collecting data from, minors.

By using this website and placing an order, you represent and warrant that you are at least 18 years of age (and at least 21 for handgun ammunition purchases) and that you are legally permitted to purchase firearms accessories and ammunition under all applicable laws in your jurisdiction. Our Firearm Safety Guide and Four Rules of Gun Safety resources are available for parents and educators who want to teach responsible firearms handling to eligible adults.

If you believe a minor has submitted personal information to tattedtacticals.com, contact us immediately at sales@tattedtacticals.com. We will investigate and delete any such data without delay. We comply fully with the Children’s Online Privacy Protection Act (COPPA) and do not knowingly solicit or collect data from children under 13.

14. Marketing Communications

We send promotional emails only to customers and visitors who have affirmatively opted in to receive them. Our marketing emails cover topics including new product launches, restocks of popular calibers and ammunition, sales and promotional pricing, trigger and accessory updates, and ballistic guide content.

Opt Out: You can opt out of marketing emails at any time by clicking the “Unsubscribe” link in any email we send, by updating your preferences in your customer account, or by contacting us at sales@tattedtacticals.com. Opt-out requests are processed within 10 business days.

Transactional Emails: Order confirmations, shipping notifications, account security alerts, and compliance-related notices are sent regardless of marketing preferences, as they relate directly to services you have requested and may carry legal significance.

We do not share, sell, or rent your email address to third-party marketers under any circumstances.

15. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our business practices, the legal and regulatory environment, or the capabilities of our platform. The firearms and ammunition industry is subject to evolving federal and state regulation; updates to this Policy may be required on short notice to reflect new compliance obligations.

When we make material changes, we will update the Effective Date at the top of this page and, for significant changes, post a notice on our homepage or notify registered customers by email. Your continued use of tattedtacticals.com after the effective date of any revision constitutes acceptance of the updated Policy. We recommend bookmarking this page and reviewing it periodically, particularly if you are a regular customer purchasing ammunition, triggers, or other regulated products.

16. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your data is handled, please reach out through any of the following channels:

• Email: sales@tattedtacticals.com
• Contact Form: tattedtacticals.com/contact-us/
• Response Time: We aim to respond to all privacy-related inquiries within 30 days of receipt.

For questions specific to state shipping restrictions or ammunition purchasing rules, visit our Ammunition Shipping Compliance page and our State Shipping Restrictions guide.

For firearm safety education and handling guidance, visit our Firearms Safety Guide, the Four Rules of Gun Safety, and our Safety Resources library.

This Privacy Policy was written specifically for Tatted Tacticals and the firearms and ammunition retail industry. It reflects the unique regulatory obligations imposed on retailers by the Gun Control Act of 1968, ATF regulations at 27 C.F.R. Part 478, and applicable state laws. It should not be used as a template for businesses operating in unrelated industries.