PRIVACY POLICY | HARRYSTRAPS ARMORY

Effective Date: MAY 30, 2026
Last Updated: August 30, 2026

1. Introduction

Welcome to Harrystraps Armory and thank you for visiting https://harrystraps.com/.

We respect your privacy and understand the importance of protecting the personal information that customers provide when browsing our website, creating an account, contacting us, purchasing products, requesting customer support, or participating in other activities through our online store.

This Privacy Policy explains how Harrystraps Armory may collect, use, disclose, retain, and protect personal information obtained through our website and related customer interactions.

Our website may offer firearms, GLOCK pistols, firearm accessories, optics, uppers, lowers, and other products. Because some products may be subject to federal, state, and local laws, certain transactions may involve additional verification, documentation, transfer procedures, and legally required recordkeeping.

We have prepared this Privacy Policy to explain these practices as clearly as possible.

2. Quick Privacy Overview

The following table provides a simplified overview of our privacy practices.

3. Information We May Collect

The information we collect depends on how you interact with Harrystraps.com.

We may collect information directly from you, automatically through your use of the website, or from third parties involved in providing services to us.

3.1 Information You Provide

When you interact with Harrystraps Armory, you may voluntarily provide information such as:

• Full name

• Email address

• Telephone number

• Billing address

• Shipping address

• Account information

• Order information

• Product inquiries

• Customer-service communications

• Payment-related information

• Information necessary to process an order

• Information provided through contact forms

• Information provided through customer-support communications

You should only provide information that is accurate and necessary for the relevant transaction or request.

4. Information Collected During Orders

When you place an order, we may collect information necessary to process and manage that order.

Depending on the products and services involved, this may include:

• Customer name

• Contact information

• Billing information

• Shipping information

• Product purchased

• Quantity

• Order number

• Order date

• Payment status

• Shipping status

• Customer communications

• Refund or cancellation information

• Information required to resolve an order-related issue

This information helps us fulfill orders, communicate with customers, provide support, maintain business records, prevent fraud, and meet applicable legal obligations.

5. Firearm-Related Information and Transactions

Because Harrystraps Armory may offer firearms and firearm-related products, certain transactions may be subject to additional legal requirements.

A firearm transaction involving an FFL may require information and documentation necessary to establish whether the prospective transferee may lawfully receive the firearm.

ATF explains that Form 4473 is used by FFLs to obtain information necessary to determine whether an unlicensed transferee may lawfully receive a firearm and to initiate the required background check. (ATF)

Important distinction

Not every piece of information associated with a firearm transaction is necessarily collected by Harrystraps Armory.

For example, an FFL receiving a firearm may independently collect and retain information as part of its legal responsibilities.

ATF states that completed Forms 4473 are retained by the FFL and may be inspected by ATF for limited regulatory or law-enforcement functions. (ATF)

Therefore, customers should understand that information provided directly to a receiving FFL may be governed by that FFL's own privacy practices and legal obligations.

6. What Information May Be Required for an FFL Transfer?

The exact information required can vary according to the transaction and applicable law.

Potential information may include:

This table is general information only. Harrystraps Armory should not state that it collects every category above unless its actual transaction process does so.

7. How We Use Personal Information

We may use personal information for legitimate business, operational, security, and legal purposes.

These purposes may include:

Order Processing

We may use information to:

• Process purchases

• Confirm orders

• Verify order details

• Communicate order status

• Coordinate shipping

• Process refunds where applicable

• Resolve order problems

Customer Support

We may use information to:

• Answer questions

• Respond to customer requests

• Investigate complaints

• Resolve technical problems

• Provide information about products

• Assist with order-related issues

Website Operations

We may use information to:

• Maintain the website

• Improve website functionality

• Troubleshoot technical problems

• Monitor website performance

• Protect website security

• Detect suspicious activity

Fraud Prevention

Information may be used to identify and prevent:

• Fraudulent transactions

• Unauthorized account activity

• Payment abuse

• Identity misuse

• Suspicious ordering behavior

• Other unlawful activity

Legal Compliance

We may process information when necessary to comply with applicable laws, regulations, legal orders, regulatory requirements, or lawful requests.

8. Payment Information

When you make a purchase through Harrystraps.com, payment information may be processed by one or more third-party payment providers.

Depending on the payment method available, payment information may include:

• Payment method

• Transaction amount

• Billing information

• Payment status

• Transaction reference

• Fraud-prevention information

Where payment processing is performed by a third party, the payment provider may process your payment information according to its own privacy policy and terms.

Important Security Reminder

Customers should never send complete credit-card numbers, CVV/security codes, passwords, or other sensitive payment credentials through ordinary email, social media, or unsecured messaging.

Use the designated checkout or payment process provided by Harrystraps Armory.

9. Automatically Collected Information

When you visit Harrystraps.com, certain technical information may automatically be collected.

Depending on the technology used on our website, this may include:

• IP address

• Browser type

• Device type

• Operating system

• Screen characteristics

• Referring website

• Pages visited

• Time spent on pages

• Date and time of access

• General website activity

• Error information

• Security information

• Approximate location derived from IP address

We may use this information to understand how visitors use our website, identify technical problems, improve performance, and protect the website.

The FTC emphasizes that businesses should clearly explain their actual data-collection and privacy practices rather than making inaccurate or overly broad privacy promises. (Federal Trade Commission)

10. Cookies and Similar Technologies

Harrystraps.com may use cookies and similar technologies.

Cookies are small files or pieces of information that can be stored on your browser or device when you visit a website.

Cookies may help us:

• Remember shopping-cart information

• Maintain website sessions

• Remember preferences

• Improve website functionality

• Analyze website traffic

• Detect security issues

• Improve website performance

• Understand visitor behavior

Cookie Categories

The exact cookies used by Harrystraps.com should be reviewed periodically because plugins, payment systems, analytics services, and website platforms can introduce or remove cookies.

11. Third-Party Service Providers

Harrystraps Armory may use third-party companies to help operate its business and website.

Depending on the actual services installed on Harrystraps.com, these may include:

• Website hosting providers

• Payment processors

• Shipping providers

• Email providers

• Analytics providers

• Security providers

• Fraud-prevention services

• Customer-support systems

• Website development providers

• Cloud-storage providers

These providers may have access to certain information when necessary to perform services on our behalf.

We recommend that Harrystraps maintain an internal list of every third-party provider that has access to customer information and update this Privacy Policy when material changes occur.

12. When We May Share Information

We do not share personal information indiscriminately.

Information may be shared when reasonably necessary for legitimate business purposes or when required or permitted by applicable law.

Examples include:

Service Providers

We may share information with companies that help us:

• Process payments

• Host the website

• Ship orders

• Provide customer support

• Maintain website security

• Analyze website performance

• Send customer communications

FFLs

Where necessary for a lawful firearm transaction, information relevant to the transfer may be provided to an appropriate FFL.

Government Authorities

Information may be disclosed when required by applicable law or valid legal process.

Legal and Regulatory Compliance

Information may be disclosed when reasonably necessary to:

• Comply with legal obligations

• Respond to lawful requests

• Protect legal rights

• Investigate suspected fraud

• Prevent unlawful activity

• Protect customers or others

13. Firearm Records and Retention

Certain firearm records are subject to federal requirements that differ from ordinary retail records.

For applicable transactions, FFLs have recordkeeping responsibilities concerning firearm transfers.

ATF regulations require licensed dealers to retain applicable Forms 4473 as part of their required records, and ATF explains that these records may be subject to limited inspection and law-enforcement functions. (ATF)

Accordingly, a request to delete personal information may not always result in complete deletion when information must legally be retained.

This distinction is important:

Privacy rights generally do not override a business's obligation to retain information when retention is required by applicable law.

14. Data Retention

Harrystraps Armory may retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

• The nature of the information

• The reason it was collected

• Whether an account remains active

• Whether an order remains unresolved

• Customer-support requirements

• Tax and accounting requirements

• Fraud-prevention requirements

• Legal requirements

• Regulatory requirements

• Firearm-related recordkeeping obligations

When information is no longer required, appropriate deletion, anonymization, or other disposal procedures may be used, subject to applicable legal requirements.

15. Information Security

We recognize the importance of protecting customer information.

Harrystraps Armory may use reasonable administrative, technical, and organizational safeguards designed to protect information from:

• Unauthorized access

• Unauthorized disclosure

• Loss

• Misuse

• Alteration

• Destruction

Security practices may include:

However, no Internet transmission or electronic storage system can be guaranteed to be completely secure.

Therefore, while we take reasonable precautions, we cannot guarantee absolute security.

16. Customer Account Security

If Harrystraps.com provides customer accounts, customers are responsible for maintaining the confidentiality of their login credentials.

Customers should:

• Use strong passwords

• Avoid sharing passwords

• Avoid using the same password on multiple websites

• Log out from shared devices

• Keep contact information current

• Report suspicious account activity promptly

If you believe your account has been compromised, contact Harrystraps Armory as soon as possible.

17. Marketing Communications

Harrystraps Armory may send promotional communications where permitted and where you have provided appropriate consent or where another lawful basis applies.

Marketing communications may include:

• New-product announcements

• Promotions

• Website updates

• Product availability

• Special offers

• Educational content

You can unsubscribe from promotional emails by following the unsubscribe instructions contained in the communication.

Opting out of marketing communications does not necessarily stop essential service communications.

For example, we may still need to send:

• Order confirmations

• Shipping updates

• Customer-service responses

• Account notices

• Transactional communications

18. Your Privacy Choices

Depending on your location and applicable law, you may have rights concerning personal information.

Potential rights may include:

• Requesting access

• Requesting correction

• Requesting deletion

• Opting out of certain marketing

• Requesting information about collection and disclosure

• Exercising applicable state privacy rights

Not every right applies to every individual or every business.

Requests may also be subject to exceptions.

For example, California's privacy framework provides qualifying consumers with several rights concerning personal information, while also recognizing exceptions and specific requirements. (California Privacy Protection Agency)

19. California Privacy Rights

If Harrystraps Armory is subject to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act, qualifying California residents may have rights relating to their personal information.

Depending on applicability, these may include:

The CPPA's current regulations effective January 1, 2026 contain detailed requirements concerning privacy policies, notices at collection, opt-out mechanisms, and related consumer rights. (California Privacy Protection Agency)

Do not publish a statement that Harrystraps “sells” or “shares” personal information unless that accurately describes your actual practices.

20. How to Submit a Privacy Request

Customers may contact Harrystraps Armory regarding applicable privacy requests.

Privacy Contact

Harrystraps Armory
Website: https://harrystraps.com/
Email: sales@harrystraps.com

When submitting a privacy request, please include:

• Your name

• Email address associated with your account, where applicable

• Nature of the request

• Relevant order number, if applicable

• Any additional information needed to identify the relevant records

We may need to verify your identity before completing certain requests.

This verification process is designed to prevent unauthorized individuals from obtaining, changing, or deleting someone else's personal information.

21. Identity Verification for Privacy Requests

Because privacy requests themselves can expose sensitive information, Harrystraps Armory may take reasonable steps to verify that the person making a request is authorized to do so.

The verification process may depend on:

• The type of request

• The sensitivity of the information

• The information available in our records

• Applicable law

We will not intentionally request unnecessary information solely for the purpose of processing a privacy request.

22. Do Not Sell or Share My Personal Information

If applicable law gives you a right to opt out of the sale or sharing of personal information, Harrystraps Armory will provide an appropriate mechanism for exercising that right if our practices fall within the applicable definitions.

For California consumers, applicable regulations may require specific disclosures and mechanisms relating to sale/sharing opt-outs. (California Privacy Protection Agency)

Important

Do not add a “Do Not Sell or Share My Personal Information” link simply because it appears in a generic privacy template.

First determine whether Harrystraps actually engages in activity that legally qualifies as a sale or sharing of personal information.

23. Sensitive Personal Information

Some information may be considered sensitive under applicable privacy laws.

Depending on what is actually collected, this may include certain government-identification information, precise location information, account credentials, or other legally defined categories.

Harrystraps Armory should only collect sensitive information when it has a legitimate business, legal, security, or transaction-related reason to do so.

Sensitive information should be subject to appropriate access controls and security safeguards.

24. Children's Privacy

Harrystraps.com is not intended to be used by children to purchase regulated products.

We do not knowingly seek personal information from children for unauthorized purchases.

If we become aware that personal information has been submitted inappropriately by a child, we may take reasonable steps to investigate and address the situation.

Parents or guardians who believe that a child has provided information to us may contact us using the contact information listed in this Privacy Policy.

25. Third-Party Websites

Harrystraps.com may contain links to external websites.

These may include:

• Manufacturers

• Payment providers

• Shipping providers

• Social-media platforms

• FFL-related websites

• Other business partners

• External information resources

When you leave Harrystraps.com, this Privacy Policy may no longer apply.

Third-party websites operate under their own privacy policies and terms.

We encourage customers to review the privacy practices of third-party websites before submitting personal information.

26. Social Media

Harrystraps Armory may maintain or use social-media accounts or integrations.

Interactions with third-party social-media platforms may be governed by the privacy policies and terms of those platforms.

If you communicate with Harrystraps through a social-media platform, information you provide may also be processed by that platform.

We recommend avoiding the transmission of sensitive personal, payment, identification, or firearm-transfer information through public social-media comments.

27. Email Communications

When you contact Harrystraps Armory by email, we may retain the contents of your communication and related contact information.

This information may be used to:

• Respond to your question

• Resolve an order issue

• Provide customer support

• Maintain customer-service records

• Investigate disputes

• Comply with legal obligations

Customers should avoid sending unnecessary sensitive information by ordinary email.

28. WhatsApp and Messaging Services

If Harrystraps Armory provides customer support through WhatsApp or another messaging platform, communications through that platform may be processed by the applicable messaging provider.

Customers should avoid sending sensitive information through ordinary messaging unless specifically instructed to do so through an appropriate secure process.

Third-party messaging services maintain their own privacy policies and terms.

29. Shipping Information

To fulfill an order, relevant customer information may need to be provided to shipping or logistics providers.

Depending on the transaction, information may include:

• Name

• Shipping address

• Contact telephone number

• Order information

• Tracking information

For regulated products, additional transfer procedures may apply.

Shipping information is used to facilitate delivery and related customer-service activities.

30. Fraud Prevention and Security Monitoring

We may use information to identify suspicious or potentially fraudulent activity.

This may include reviewing:

• Unusual login behavior

• Repeated failed transactions

• Suspicious payment activity

• Inconsistent order information

• Abnormal website activity

• Attempts to circumvent security controls

Fraud-prevention providers may also process technical and transaction information on our behalf.

These activities are intended to protect customers, the business, payment systems, and the integrity of the Website.

31. Business Transfers

If Harrystraps Armory undergoes a business transaction such as:

• Merger

• Acquisition

• Sale of assets

• Reorganization

• Financing

• Business transfer

personal information may be transferred as part of the transaction, subject to applicable legal requirements.

Any successor organization may be required to honor applicable privacy obligations.

32. Legal Disclosures

We may disclose personal information when reasonably necessary to:

• Comply with law

• Respond to valid legal process

• Respond to government requests

• Protect legal rights

• Prevent fraud

• Investigate suspected unlawful activity

• Protect the safety of customers or others

• Enforce agreements and policies

Where legally permitted, we may take reasonable steps to limit disclosures to information relevant to the applicable purpose.

33. Data Breach and Security Incidents

Although we use reasonable safeguards, no electronic system is completely immune from security incidents.

If Harrystraps Armory experiences a security incident involving personal information, we will evaluate the incident and take appropriate action consistent with applicable law.

Depending on the nature of the incident and applicable legal requirements, this may include:

• Investigating the incident

• Containing unauthorized access

• Restoring affected systems

• Working with security professionals

• Notifying affected individuals where required

• Notifying regulators or authorities where required

34. International Visitors

Harrystraps Armory primarily operates as an online business serving customers subject to applicable U.S. laws and requirements.

If individuals outside the United States access the website, their information may be processed in the United States or other locations where our service providers operate.

Privacy protections may differ between jurisdictions.

If you access Harrystraps.com from outside the United States, you should consider whether the website and products are legally available to you before submitting personal information or placing an order.

35. Accuracy of Personal Information

Customers should provide accurate information when creating accounts, placing orders, contacting customer support, or completing transaction-related procedures.

Accurate information is particularly important when information is used for:

• Shipping

• Payment processing

• Customer verification

• FFL coordination

• Order fulfillment

• Customer support

• Legal documentation

Providing inaccurate information may delay or prevent an order from being processed.

36. Data Minimization

Harrystraps Armory should seek to collect information that is reasonably necessary for the specific business purpose for which it is being collected.

For example, information needed to process an order should not automatically be treated as authorization to collect unrelated personal information.

Where possible, we seek to limit information collection to appropriate business, operational, security, and legal purposes.

37. Privacy and Firearm Compliance

Privacy and firearm compliance can sometimes involve competing considerations.

Customers may expect personal information to remain private, while firearm laws may require certain records to be created and retained.

Accordingly:

Harrystraps Armory will not promise that legally required firearm-transfer records can be deleted simply because a customer requests deletion.

Applicable legal and regulatory obligations may require records to remain available for a specified period.

ATF confirms that completed Forms 4473 are retained by the FFL and may be inspected for limited regulatory or law-enforcement functions. (ATF)

38. Privacy Policy Does Not Replace Legal Advice

This Privacy Policy describes Harrystraps Armory's intended privacy practices.

It does not constitute legal advice.

Privacy laws can vary depending on:

• Customer location

• Business location

• Type of information collected

• Size and revenue of the business

• Nature of the transaction

• Third-party services used

• Applicable federal laws

• Applicable state laws

• Applicable local requirements

Customers should seek qualified legal advice when they have questions about their individual rights or legal obligations.

39. Changes to This Privacy Policy

Harrystraps Armory may update this Privacy Policy from time to time.

Updates may be necessary when:

• Website functionality changes

• New services are introduced

• Third-party providers change

• Data practices change

• Privacy laws change

• Firearm-related requirements change

• Security practices change

When we make material changes, we will update the Last Updated date at the top of this page.

We encourage customers to periodically review this page.

40. Contact Harrystraps Armory

If you have questions about this Privacy Policy or how Harrystraps Armory handles personal information, contact us.

Privacy Contact Information

When contacting us about privacy, please clearly explain the nature of your request so we can direct it to the appropriate person.

41. Privacy Commitment

Harrystraps Armory recognizes that customers expect responsible handling of personal information.

We aim to:

• Be transparent about our information practices;

• Collect information for legitimate purposes;

• Protect information using reasonable safeguards;

• Limit unnecessary access;

• Work with reputable service providers;

• Respect applicable privacy rights;

• Follow applicable legal requirements;

• Maintain appropriate business records;

• Continuously review our privacy and security practices.

Privacy is an ongoing responsibility rather than a one-time website document.

42. Privacy Practices at a Glance

43. Important Privacy and Compliance Notice

Because Harrystraps Armory may operate in the firearms industry, accuracy is particularly important.

This Privacy Policy should not claim that Harrystraps:

• Collects Social Security numbers;

• Collects driver's-license images;

• Stores Form 4473;

• Conducts NICS checks itself;

• Sells customer data;

• Shares data for advertising;

• Uses Google Analytics;

• Uses Meta Pixel;

• Uses advertising cookies;

• Stores credit-card numbers;

• Stores firearm serial numbers;

unless those things actually occur.

For example, ATF's current information explains that Form 4473 is used by FFLs to obtain information required for determining whether an unlicensed transferee may lawfully receive a firearm. (ATF)

That does not automatically mean Harrystraps.com itself should claim to store every piece of information on Form 4473.

This distinction makes the policy more accurate and protects you from making privacy promises that your actual website practices do not support.