Cannon Strike Industries
SIGN IN

PRIVACY POLICY

Last updated: April 2, 2026

1. INFORMATION WE COLLECT

Cannon Strike Industries ("we," "us," "our") collects the following information when you use our website and services:

  • Account Information: Name, email address, phone number, and encrypted password when you create an account.
  • Identity Verification: Government-issued photo ID details, Firearm Safety Certificate (FSC) number, and proof of residency documents as required by federal and California state law for firearms transfers.
  • Transaction Information: Order history, billing and shipping addresses, payment method details (processed securely through Stripe — we do not store full card numbers).
  • DROS Information: Dealer Record of Sale (DROS) transaction numbers and related California DOJ background check status as required by California Penal Code §28050-28070.
  • FFL Transfer Records: Federal Firearms License transfer documentation as required by ATF Form 4473 and 27 CFR §478.124.
  • Usage Data: IP address, browser type, pages visited, and access times for security and analytics purposes.

2. HOW WE USE YOUR INFORMATION

  • Process and fulfill orders, including firearms transfers and gunsmithing services.
  • Comply with federal (ATF) and state (California DOJ) firearms regulations, including DROS submissions and background checks.
  • Verify your identity and legal eligibility to purchase firearms, ammunition, and regulated accessories.
  • Communicate order status, transfer updates, and waiting period notifications.
  • Process payments securely through our payment processor (Stripe).
  • Calculate and remit applicable sales taxes and excise taxes (California Firearms Excise Tax).
  • Prevent fraud and maintain the security of our systems.
  • Comply with legal obligations, court orders, and law enforcement requests.

3. LEGAL BASIS FOR PROCESSING

We process your personal information based on:

  • Contractual necessity: To fulfill your orders and provide our services.
  • Legal obligation: To comply with federal firearms laws (Gun Control Act, Brady Act), California Penal Code, ATF regulations, and state tax requirements.
  • Legitimate interest: To prevent fraud, maintain security, and improve our services.
  • Consent: For marketing communications (you may opt out at any time).

4. INFORMATION SHARING

We share your information only as required:

  • California DOJ: DROS submissions and background check requests as mandated by law.
  • ATF (Bureau of Alcohol, Tobacco, Firearms and Explosives): As required by federal law for firearms transaction records.
  • FFL Dealers: Transfer information when shipping firearms to third-party dealers.
  • Payment Processors: Stripe processes payments on our behalf under their own privacy policy.
  • Tax Authorities: Transaction data shared with TaxJar for sales tax calculation and filing.
  • Shipping Carriers: Name and address for order delivery (UPS, FedEx, USPS).
  • Law Enforcement: When required by valid legal process (warrant, subpoena, court order).

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. DATA RETENTION

  • ATF Form 4473 Records: Retained for a minimum of 20 years as required by 27 CFR §478.129(b).
  • DROS Records: Retained as required by California Penal Code.
  • Transaction Records: Retained for 7 years for tax and accounting purposes.
  • Account Information: Retained while your account is active and for a reasonable period thereafter.
  • Bound Book (A&D Records): Retained permanently as required by ATF regulations.

6. DATA SECURITY

We implement industry-standard security measures including:

  • TLS/SSL encryption for all data in transit.
  • Argon2id password hashing (no plaintext password storage).
  • PCI-DSS compliance through Stripe (we never handle or store card numbers).
  • Encrypted database storage and regular backups.
  • Access controls limiting employee access to customer data.

7. YOUR RIGHTS (CALIFORNIA RESIDENTS — CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have the right to:

  • Know what personal information we collect and how it is used.
  • Request deletion of personal information (subject to legal retention requirements — firearms records cannot be deleted under federal/state law).
  • Opt out of the sale of personal information (we do not sell your data).
  • Non-discrimination for exercising your privacy rights.

To exercise these rights, contact us at privacy@cannonstrikeindustries.com.

8. COOKIES

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

9. CHILDREN'S PRIVACY

Our website and services are not intended for individuals under 21 years of age. We do not knowingly collect information from minors. California law requires buyers to be at least 21 years of age for all firearm and ammunition purchases (SB 1100).

10. CONTACT

For privacy-related questions or requests:

Cannon Strike Industries

Email: privacy@cannonstrikeindustries.com