DATA PROCESSING & STORAGE POLICY
EJ’s Pursuits Ltd
Unit 81 The Oaks, Invicta Way
Manston Business Park, Manston, Kent, CT12 5FS
Email: info@ejspursuits.co.uk
Tel: 01843 621357
ICO Registration Number: ZA749354
Last updated: [Add date]
1. Purpose of This Policy
As a responsible retailer handling personal data, EJ’s Pursuits Ltd (“we”, “us”, “our”) is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy explains:
how we collect personal data
why we collect it
how we store and protect it
with whom we may share it
your legal rights as a data subject
This policy applies to all data collected in-store, online and by telephone.
2. Definitions
Term Definition
Data Any personal information we collect or store about you.
UK GDPR The UK’s version of the General Data Protection Regulation.
Data Controller The person or entity responsible for determining why and how personal data is processed (EJ’s Pursuits Ltd).
Data Processor Any person or company processing data on our behalf.
Explicit Consent A clear, affirmative action indicating permission (e.g. ticking a box).
IP Address A unique identifier assigned to your device when accessing online services.
Cookies Small files stored on your device to support functionality and track website activity.
Third-Party Partner Companies we work with who may process some of your data.
Exhaustive List A complete itemised list (available upon request).
3. Responsible Data Processing
We believe customers deserve transparency about who, what, where, when, and why we process your data.
i. Who Collects Your Data?
Only authorised and trained EJ’s Pursuits Ltd personnel process customer data.
We appoint:
Data Processors, who manage incoming data
Data Controllers, who oversee data handling, ensure compliance, and safeguard all data
We do not sell or rent personal data to third parties.
ii. What Data Do We Collect?
We collect different types of data depending on your interaction with us.
Common information includes:
Name
Email address
Telephone number
Billing address
Delivery address
Order details
Payment-related information (processed securely by third parties)
Cookies and website behaviour
IP address
Device and browser information
For age-restricted and regulated products, we may also legally be required to collect:
Photo ID details
Firearm Certificate (FAC) or Shotgun Certificate (SGC) information
Airsoft defence evidence (e.g., UKARA details)
Knife/weapon sale age-verification evidence
You may request an exhaustive list of your stored data by emailing info@ejspursuits.co.uk
.
iii. Where Do We Collect Your Data?
We collect your data:
In-store (at the point of sale or enquiry)
Online through our website and checkout process
By telephone for mail order or support
Through third-party analytics when you visit our website
iv. When Do We Collect Your Data?
We collect data when:
You browse our website
You place an order or create an account
You contact us via email, phone or online forms
You subscribe to marketing communications
You enter competitions, events, or promotions
You purchase regulated products requiring legal verification
v. Why Do We Collect Your Data?
We collect data for the following purposes:
Order fulfilment
Including payment processing, delivery, fraud prevention, and customer support.
Legal compliance
We must maintain strict records for the sale of:
firearms
ammunition
air weapons
knives
age-restricted products
airsoft RIFs and associated defences
These records may be subject to inspection by law enforcement.
Customer service
To provide updates, respond to enquiries, and manage returns or warranties.
Marketing (optional)
With your consent, we may contact you about offers or new products.
You may opt out at any time via your account or by emailing us.
Website performance and security
To analyse traffic, improve functionality, and maintain security.
4. Responsible Data Storage
We store your data securely using:
encrypted systems
password protection
access controls
secure servers (internal and cloud-based)
up-to-date security patches
industry-standard cybersecurity measures
Where data is stored by third-party partners, we ensure:
UK GDPR compliance
secure storage standards
limited access
lawful contracts governing data handling
Data is retained only for as long as necessary to meet:
legal obligations
business requirements
warranty and returns processes
5. Third-Party Partners
We work with trusted third-party companies who may process some of your personal data on our behalf.
Below is a summary of our primary partners and the type of information they process.
You may request a full exhaustive list by emailing info@ejspursuits.co.uk
.
Company / Service Data Shared Purpose
Google IP address, device/browser info, website activity Analytics, security, service improvement
Mailchimp / Email Marketing Platforms Name, email, contact details Marketing communications
Payment Providers (e.g., Opayo, PayPal, Buyline) Names, addresses, payment details Secure payment processing / finance underwriting
Courier Services (DHL, Royal Mail, DPD, Parcelforce, etc.) Name, address, contact number, email Delivery of goods
Ecommerce/Website Developers (Pixie Media, etc.) Customer account & order information Troubleshooting and site functionality
Address Verification (Loqate) Postcode or partial address Ensuring accurate delivery details
Email Delivery Services (Mailgun, etc.) Email address, message metadata Transactional email delivery
We do not share data with third parties for their own marketing.
We only share the minimum data required for each service.
6. Your Rights Under UK GDPR
You have seven core rights regarding your personal data.
We will respond to all data requests within 30 days.
i. The Right to Be Informed
You have the right to know how your data is collected, used, stored, shared, and for what purpose.
This policy fulfils that requirement.
ii. The Right of Access
You may request a full report of all personal data we hold about you by emailing:
iii. The Right to Rectification
You may correct inaccurate or incomplete data by contacting us.
Requests are processed within 30 days.
iv. The Right to Erasure (“Right to Be Forgotten”)
You may request that we delete your data unless:
We are legally required to retain it
It concerns the sale of firearms, ammunition, air weapons, knives, or other restricted items
It is necessary for tax, fraud prevention, or regulatory compliance
Legal requirements override erasure rights.
v. The Right to Restrict Processing
If you cannot request deletion due to legal retention requirements, you may request that we stop using your data for:
marketing
profiling
analytics
non-essential processing
We will apply restrictions within 30 days.
vi. The Right to Data Portability
You may request a copy of your data to transfer to another provider.
We will supply your information in a machine-readable format where feasible.
Where lawful, we will delete your stored copy after 90 days, except for data required by law.
vii. The Right to Object
You may object at any time to:
direct marketing
certain types of profiling
unnecessary processing
We will cease processing unless legally required to continue.
7. How to Contact Us About Your Data
For any data protection query, request, or complaint:
📞 01843 621357
📮 EJ’s Pursuits Ltd
Unit 81 The Oaks, Invicta Way
Manston Business Park, Manston
Kent, CT12 5FS
If you believe we have not handled your data correctly, you may complain to the Information Commissioner’s Office (ICO):