Effective 25 August 2026. Last updated 25 August 2026.
1. Who controls your information.
Bear Arms Defense Corporation is the controller of personal information described in this notice. Contact: contact@beararmsdefense.net; 8383 Wilshire Boulevard, Suite 660, Beverly Hills, California 90211, United States. Our London operating address is Queen's Gate, London, United Kingdom.
This notice covers the public website, corporate-document requests and members room. Transaction-specific records may also be governed by a separate agreement, legal notice or statutory recordkeeping requirement.
2. Notice at collection.
| Category collected | Examples | Purpose | Retention criteria | Disclosed to |
|---|---|---|---|---|
| Identifiers & professional information | Name, work email, organisation, job-related purpose, jurisdiction and end-user context. | Identity and organisation review; enquiries; member administration; compliance records. | While the request or account is active, then as needed for legal, security, audit, dispute and deletion obligations. | Hosting, identity, security and communications providers; advisers and authorities where required. |
| Account & authentication information | User identifier, provider, verified-email status, account status, sign-in and consent timestamps. Your password is handled by the identity provider and is not visible to us. | Authenticate users, prevent fraud, enforce access decisions and maintain an audit trail. | For the account lifecycle and a limited period afterward based on security, legal and audit needs. | Supabase, Google or Apple when selected, Cloudflare, Netlify and security providers. |
| Internet, device & activity information | IP address, browser, device, pages requested, timestamps, security events and, with permission, analytics identifiers and approximate location. | Site delivery, security, troubleshooting, access logging and optional measurement. | Security logs under provider schedules and our operational needs; analytics under the durations in the Cookie Notice. | Netlify, Cloudflare, Supabase and Google Analytics only after consent. |
| Correspondence & access records | Messages, document requests, records of approval, assignment, viewing and deletion requests. | Respond, release authorised material, demonstrate custody, meet legal obligations and resolve disputes. | Based on the request, relationship, applicable limitation periods, export-control or other recordkeeping duties, and deletion rights. | Staff and authorised contractors, advisers, counterparties where necessary, and competent authorities where legally required. |
Sale or sharing: We do not sell personal information or use it for cross-context behavioural advertising. We do not knowingly sell or share personal information of anyone under sixteen. We honour applicable Global Privacy Control signals.
3. Purposes & lawful bases.
Where UK or EEA data-protection law applies, we process account, request, security and correspondence information because it is necessary to take requested steps or perform a contract; to comply with legal and regulatory obligations; and for legitimate interests in due diligence, security, restricted-document control, recordkeeping and business communications. We use consent for optional analytics, and you may withdraw it at any time without affecting earlier lawful processing.
Providing identity, business email and organisation information is necessary for member or document access. If you do not provide it, we cannot complete professional verification or release restricted material. We do not make solely automated decisions producing legal or similarly significant effects; organisation approval is subject to human review.
5. Retention & deletion.
We do not keep personal information for longer than reasonably necessary. The period depends on account or request activity; the sensitivity and amount of data; security and fraud risk; contractual, corporate, export-control, sanctions, tax, audit and other recordkeeping duties; limitation periods; and whether information is needed to establish, exercise or defend legal claims.
You may request account or request-record deletion. We will delete or de-identify information unless an exception or legal obligation requires retention, and will explain a denial where required.
6. Your privacy rights.
Depending on where you live and which law applies, you may have rights to know or access, correct, delete, restrict or object to processing, withdraw consent, obtain portable data, opt out of sale, sharing, targeted advertising or certain profiling, limit certain sensitive-data use, appeal a refusal, use an authorised agent, and receive equal service without unlawful discrimination.
Submit a request by emailing contact@beararmsdefense.net. State the right you wish to exercise and the email or account involved. We will use proportionate verification and may ask an authorised agent for proof of authority. If we cannot comply, we will give the reason and any available appeal route.
UK residents may complain to the Information Commissioner's Office; EEA residents may complain to their local supervisory authority. California residents may use Global Privacy Control. Because we do not sell or share personal information for targeted advertising, no separate sale/sharing transaction is performed when that signal is received; optional analytics is nevertheless disabled on this site when GPC is present.
7. Security, children & changes.
We use access controls, encrypted transport, provider security controls, server-side authorisation, human approval and audit records designed to protect personal information. No system is completely secure. Please report suspected account or data compromise immediately.
The site and members room are not directed to children and professional member accounts require an adult authorised to act for an organisation. We do not knowingly collect personal information from children through member registration.
We may update this notice when processing, providers or law changes. The effective date identifies the current version; material changes will be presented prominently and, where required, renewed consent will be requested.