Privacy framework
Privacy policy
A plain-language preview of the privacy experience. The final notice must match A-1’s actual forms, analytics, merchant provider, email tools, retention practices, and legal obligations.
Information provided to the shop
A future request form may collect contact information, product interest, and receiving-FFL details so staff can respond to a transfer request. It must not collect payment data or unnecessary sensitive information until an approved processor and workflow are in place.
How information is used
Information should be used only to respond to a customer inquiry or transfer request, operate the site, protect the business, and meet applicable legal obligations. A-1 must document its final purposes and retention periods before launch.
Sharing and service providers
Any sharing with hosting, analytics, email, merchant, or fulfillment providers must be disclosed accurately after those providers are selected and their contracts are reviewed.
Your choices
The production policy should state how customers can contact A-1 about their information, along with any applicable access, correction, deletion, opt-out, and complaint rights.