Privacy Policy

FIND A SECTION

PRIVACY AT A GLANCE

SECTION 1

WHO IS RESPONSIBLE FOR YOUR DATA?

The organisation responsible for the personal information described in this notice is:

JD Airsoft Limited
Unit 5 Virage Park
Green Lane
Walsall Road
Cannock
Staffordshire
WS11 0NH
United Kingdom

Company Number: 06643770

Data Protection Contact:
GDPR@jdairsoft.net

For the purposes of UK data protection law, JD Airsoft Limited will normally be the data controller for personal information collected directly by us.

SECTION 2

DATA PROTECTION LAW

JD handles personal information in accordance with applicable UK privacy and data protection law.

This includes the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 and amendments introduced by the Data (Use and Access) Act 2025.

These laws govern matters including fairness, transparency, lawful processing, direct marketing, cookies and similar technologies, individual rights and data protection complaints.

WHAT JD MAY HOLD

INFORMATION WE COLLECT

SECTION 3

PERSONAL INFORMATION YOU GIVE US

Depending on how you interact with JD, we may collect information including:

Your name.
Email address.
Telephone number.
Billing address.
Delivery address.
Account and login information.
Order and purchase history.
Returns and warranty information.
Customer service communications.
Marketing preferences.
VIP or loyalty account information.
UKARA number or other RIF defence information.
Age and identity verification information where required.
Information needed for an airgun or RFD transaction.
RFD transfer details where applicable.
Information relating to payment or finance transactions.
Information you provide through forms, emails, telephone calls or other correspondence.

We only aim to collect information that is reasonably relevant to the purpose for which it is required.

SECTION 4

WEBSITE & DEVICE INFORMATION

When you visit our website, information may be collected automatically by our website systems and permitted analytics technologies.

This can include:

IP address and approximate location.
Browser type and version.
Device type.
Operating system.
Language settings.
Pages viewed.
Referring website or page.
Date and time of visits.
Website interactions.
Session and cookie identifiers where applicable.
Technical information required to keep the website secure and operational.

Some online identifiers can constitute personal data even where they do not directly identify you by name.

SECTION 5

HOW WE COLLECT INFORMATION

We may collect personal information when you:

Create a JD account.
Place an online or in-store order.
Contact us by telephone, email or a website form.
Request a return or warranty assessment.
Register for stock notifications.
Join an email list or marketing programme.
Provide RIF defence information.
Complete age or identity checks.
Purchase or arrange an airgun or RFD transfer.
Choose Worldpay, PayPal or Payl8r during checkout.
Join the JD VIP or loyalty programme.
Attend an event, exhibition or promotion.
Use or browse our website.

We may also receive relevant information from service providers involved in processing a transaction, including payment providers, finance providers, delivery companies, fraud-prevention providers or verification services.

WHY WE NEED IT

HOW & WHY WE USE YOUR DATA

SECTION 6

OUR LAWFUL BASES

UK data protection law requires JD to have a lawful reason for processing personal information.

Depending on the activity, we may rely on:

Contract
Where processing is necessary to take steps at your request or to fulfil a contract with you, such as processing an order, arranging delivery or handling a return.

Legal obligation
Where we need to use or retain information to comply with tax, accounting, age-restriction, firearms, RFD, regulatory or other legal obligations.

Legitimate interests
Where processing is reasonably necessary for a legitimate business purpose and your interests and rights do not override that purpose. Examples can include fraud prevention, website security, customer service, protecting our legal rights and improving our operations.

Consent
Where you have made a genuine choice to allow particular processing and consent is the appropriate legal basis. You may withdraw consent at any time.

SECTION 7

WHAT WE USE INFORMATION FOR

We may use personal information to:

Process and fulfil orders.
Take and administer payments.
Provide customer accounts.
Arrange delivery and collection.
Process returns, refunds and warranty claims.
Provide technical and customer support.
Verify age, identity and RIF defences.
Administer airgun and RFD transactions.
Detect and prevent fraud or misuse.
Maintain website and account security.
Meet legal, accounting and regulatory obligations.
Manage customer complaints.
Operate our loyalty and customer-service programmes.
Improve our website, products and services.
Send marketing where permitted.
Maintain records needed to establish, exercise or defend legal claims.

RESTRICTED SALES

AGE, RIF & RFD VERIFICATION

SECTION 8

AGE & IDENTITY CHECKS

Certain products sold by JD are age restricted.

We may therefore request or process information needed to establish that you meet the applicable minimum age and other legal requirements.

This may include your date of birth, name, address or information from suitable identification or verification services where required.

Where identification documents are requested, we will only retain copies where there is a legitimate and lawful reason to do so. Where a copy is not required for our records, we aim to avoid retaining it unnecessarily.

SECTION 9

UKARA & RIF DEFENCE INFORMATION

When you seek to purchase a Realistic Imitation Firearm, JD may process information needed to verify an applicable legal defence.

This may include:

UKARA number.
Name and address details associated with a defence.
Airsoft site or membership information.
Evidence supporting another applicable defence.
Correspondence relating to verification.
Records showing that JD carried out appropriate checks before completing the sale.

We use this information to help ensure restricted transactions are completed lawfully and to maintain appropriate records of our verification process.

SECTION 10

AIRGUNS & RFD INFORMATION

As a Registered Firearms Dealer, JD may need to collect and retain information relating to air weapon transactions, identity checks, collections and transfers through other Registered Firearms Dealers.

The information required depends on the transaction and applicable firearms legislation and regulatory requirements.

Where an airgun is transferred to another RFD for the required handover, relevant purchaser and transaction information may be shared with that dealer so that the transfer can be completed lawfully.

Records required by firearms law or other regulatory obligations will be retained for the applicable statutory or regulatory period.

CHECKOUT & DELIVERY

PAYMENTS, FINANCE & DELIVERY

SECTION 11

CARD PAYMENTS & WORLDPAY

JD uses Worldpay as its card-payment gateway for debit and credit card transactions.

When you choose to pay by card, the information required to authorise and process the transaction is handled through Worldpay and the relevant banking and card-payment networks.

Depending on the transaction, this may include cardholder and billing information, transaction details, payment-authentication information and information used for fraud prevention and payment security.

JD receives information required to administer the order and payment, such as whether payment was authorised, the transaction reference, amount paid and information required to process a refund or investigate a payment issue.

Worldpay may process personal information for payment processing, security, fraud prevention, regulatory compliance and related purposes.

Where Worldpay processes personal information as an independent data controller, its own privacy information applies to that processing.

VIEW WORLDPAY PRIVACY INFORMATION

SECTION 12

PAYPAL

JD also offers PayPal as a payment option at checkout.

If you choose PayPal, you may be transferred to or interact with PayPal's payment services to authorise the transaction.

PayPal may process information including your PayPal account details, payment information, transaction details, device and security information and other information required to provide its payment service.

JD receives the information reasonably necessary to administer your order, including payment status, transaction reference, amount paid and information required to process refunds or investigate payment issues.

PayPal processes personal information under its own privacy arrangements and may act as an independent data controller for services it provides directly to you.

VIEW PAYPAL PRIVACY INFORMATION

SECTION 13

PAYL8R FINANCE

JD offers Payl8r finance as an optional payment method for eligible purchases.

Payl8r is operated by Social Money Ltd and acts as the finance provider for applications made through its service.

If you choose Payl8r, you will provide information required for the finance application directly to Payl8r or through its application process.

Depending on the application, Payl8r may process information including:

Your name and contact details.
Date of birth and identity information.
Residential information.
Employment and income information.
Financial and affordability information.
Banking information where required.
Credit-reference and credit-history information.
Fraud-prevention information.
Identification documents where required.
Information relating to your finance agreement and repayments.

Payl8r may carry out credit, identity, affordability and fraud-prevention checks and may use automated systems as part of its application and credit-decision process.

JD does not make the Payl8r credit decision. Payl8r is responsible for deciding whether finance is available and for administering the finance agreement.

JD receives information reasonably necessary to administer the associated retail order, such as whether finance has been approved, the amount financed, transaction status and information needed to deal with cancellation, return or refund of the underlying goods.

VIEW PAYL8R PRIVACY INFORMATION

SECTION 14

DELIVERY PROVIDERS

We share the information reasonably necessary to deliver your order with the relevant courier or delivery provider.

This can include:

Your name.
Delivery address.
Telephone number.
Email address.
Delivery instructions.
Parcel and tracking information.

JD currently uses UPS for standard parcel delivery, although other delivery providers may be used where appropriate.

KEEPING IN TOUCH

MARKETING & COMMUNICATIONS

SECTION 15

EMAIL MARKETING

JD may send information about products, offers, services or events where UK data protection and electronic-marketing law allows us to do so.

This may be based on your consent or, for our own existing customers, the products-and-services soft opt-in where all legal requirements are satisfied.

Where the soft opt-in is used, your contact details must have been collected directly from you during a sale or negotiation for a sale, the marketing must relate to JD's similar products or services, and you must have been given an opportunity to opt out when your details were collected.

Marketing emails will provide a clear way to unsubscribe.

You can stop JD marketing emails at any time by using the unsubscribe link in the message or by contacting us.

SECTION 16

MARKETING SERVICE PROVIDERS

JD may use specialist service providers to help distribute email or other marketing communications.

Where a provider processes personal information on JD's behalf, it is only permitted to use that information in accordance with our instructions, applicable data protection requirements and the relevant service agreement.

JD does not provide customer contact information to unrelated third parties so that they can independently market their own products to you unless we have a lawful basis and have clearly told you about it.

ONLINE PRIVACY

COOKIES & ANALYTICS

SECTION 17

COOKIES & SIMILAR TECHNOLOGIES

The JD website uses cookies and similar technologies to operate website functions, support customer accounts and checkout, maintain security and understand how the website is used.

Cookies are small pieces of information stored on or accessed from your device when you use a website.

Some cookies and technologies are necessary to provide website functions or services you request. Others may be used for analytics or similar purposes.

UK law allows certain cookies and similar technologies to be used without consent where a specific legal exception applies. This can include strictly necessary technologies and, subject to statutory conditions, some technologies used solely to produce aggregate statistics for the purpose of improving a website.

Other technologies may require consent depending on their purpose and how they operate.

Our website displays a Cookie Policy Notification explaining that cookies are used on the JD website.

You can also control or delete cookies through your browser settings. Browser controls normally allow you to block some or all cookies, delete existing cookies and control third-party cookies.

Please be aware that blocking cookies required for essential website functions may affect account, basket, checkout or other functionality.

SECTION 18

GOOGLE ANALYTICS

JD uses Google Analytics to help us understand how visitors use our website.

Analytics information can include device and browser information, page views, approximate location, website interactions, referral information and online identifiers.

We use analytics information to understand website performance, identify popular content, improve customer experience and diagnose technical issues.

The legal requirements applying to analytics technologies depend on how those technologies are configured and used. Some statistical analytics may qualify for a statutory exception where the legal conditions are satisfied, while other forms of tracking or analytics may require consent.

Information processed through Google Analytics is also subject to Google's applicable privacy and data-processing arrangements.

WORKING WITH OTHERS

WHO WE SHARE DATA WITH

SECTION 19

SERVICE PROVIDERS & THIRD PARTIES

Where reasonably necessary, personal information may be shared with categories of organisations including:

Worldpay and organisations involved in processing card payments.
PayPal where PayPal is selected as the payment method.
Payl8r / Social Money Ltd where you choose to apply for finance.
Delivery and courier companies, including UPS where used.
IT, hosting and website service providers.
Email and communications service providers.
Analytics providers.
Fraud-prevention or security providers.
Age or identity verification services where used.
UKARA, airsoft sites or other organisations where necessary to verify a claimed RIF defence.
Other Registered Firearms Dealers where an RFD transfer is arranged.
Professional advisers such as accountants, insurers or solicitors.
Law enforcement, regulators, courts or public authorities where disclosure is required or permitted by law.

We aim to share only the information reasonably required for the relevant purpose.

SECTION 20

INTERNATIONAL DATA TRANSFERS

Some technology, payment, analytics, communications or other service providers may store information or make it accessible from countries outside the United Kingdom.

Where a restricted international transfer of personal information takes place, JD will take steps to ensure that an appropriate transfer mechanism or safeguard is used where required by UK data protection law.

Depending on the destination and provider, this may include UK adequacy regulations, an approved international data-transfer agreement, the UK Addendum to approved standard contractual clauses, or another legally permitted mechanism.

You may contact GDPR@jdairsoft.net if you would like further information about the safeguards relevant to a particular transfer.

PROTECTING YOUR INFORMATION

RETENTION & SECURITY

SECTION 21

HOW LONG WE KEEP INFORMATION

We do not intend to keep identifiable personal information for longer than reasonably necessary.

The retention period depends on why the information was collected, our legal obligations and whether it may be needed to establish, exercise or defend a legal claim.

Typical retention considerations include:

Orders, invoices and accounting records
Generally retained for the period required by tax, accounting and company law. This will commonly be at least six years for relevant business records.

Customer accounts
Retained while the account remains active and then reviewed in accordance with our retention requirements.

Customer service, returns and warranty records
Retained for a reasonable period after the matter is resolved, taking account of warranty periods and potential legal claims.

RIF and age-verification information
Retained only for as long as reasonably necessary for the transaction, compliance purposes and any relevant potential legal claim.

RFD records
Retained for the period required by applicable firearms and regulatory requirements.

Marketing information
Retained until you unsubscribe, object or the information is otherwise no longer required. We may retain a minimal suppression record after you opt out so that we know not to contact you again.

Analytics information
Retained according to the configured retention period of the relevant analytics service and our business requirements.

SECTION 22

KEEPING INFORMATION SECURE

JD uses appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, accidental loss or destruction.

Measures may include access controls, secure account credentials, encrypted website connections, appropriate staff access restrictions, secure service providers and procedures for handling suspected data-security incidents.

No website, database or transmission method can be guaranteed to be completely secure. We therefore review security risks and take proportionate steps appropriate to the nature of the information we process.

Where a personal-data breach occurs, JD will assess the incident and notify the Information Commissioner's Office and affected individuals where the applicable legal reporting thresholds require us to do so.

YOU ARE IN CONTROL

YOUR DATA PROTECTION RIGHTS

SECTION 23

YOUR RIGHTS

Depending on the circumstances and lawful basis being used, you may have rights including:

Right of access
You may ask for confirmation that we process your personal information and request a copy of it.

Right to rectification
You may ask us to correct inaccurate or incomplete information.

Right to erasure
You may ask us to delete personal information where the legal conditions for erasure apply. This right is not absolute and we may need to retain information to meet legal or regulatory obligations.

Right to restriction
You may ask us to restrict the way we process information in certain circumstances.

Right to data portability
Where applicable, you may ask for certain information you provided to us electronically to be supplied in a structured, commonly used and machine-readable format.

Right to withdraw consent
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not make earlier lawful processing unlawful.

IMPORTANT RIGHT

YOUR RIGHT TO OBJECT

You have the right to object to certain processing based on legitimate interests.

You have an absolute right to object to your personal information being used for direct marketing.

If you object to direct marketing, we will stop using your personal information for that purpose.

You can unsubscribe from marketing emails using the unsubscribe link or contact GDPR@jdairsoft.net.

SECTION 25

EXERCISING YOUR RIGHTS

To exercise a data protection right, contact:

GDPR@jdairsoft.net

You do not normally have to pay a fee to exercise your rights.

We may need to ask for information to confirm your identity before releasing personal information or carrying out a request.

We will respond within the applicable statutory timeframe. In most cases this is within one month, although the law allows additional time in certain circumstances. If additional time is required, we will tell you.

SECTION 26

AUTOMATED DECISION-MAKING & PROFILING

JD does not currently make decisions about customers based solely on automated processing that produce legal or similarly significant effects unless we tell you otherwise and the processing is permitted by law.

Some third-party providers involved in checkout or transaction security may use automated systems for purposes such as payment authentication, fraud detection or risk assessment.

If you apply for Payl8r finance, Payl8r may use automated decision-making as part of its credit, affordability, identity and fraud-prevention assessment.

JD does not control or make the Payl8r credit decision.

Where a third-party provider acts as an independent data controller, its own Privacy Notice explains how automated processing works and the rights available to you.

IF SOMETHING IS WRONG

DATA PROTECTION COMPLAINTS

SECTION 27

COMPLAINING TO JD

If you are unhappy with the way JD has handled your personal information, you can make a data protection complaint directly to us.

Please contact:

JD DATA PROTECTION CONTACT
GDPR@jdairsoft.net

Please provide enough information for us to understand the issue and identify the relevant account, transaction or correspondence.

JD will acknowledge a data protection complaint within 30 days.

We will investigate the complaint appropriately and without undue delay, keep you informed where appropriate and communicate the outcome of our investigation.

SECTION 28

INFORMATION COMMISSIONER'S OFFICE

You also have the right to raise concerns with the Information Commissioner's Office, the UK's independent data protection regulator.

We would appreciate the opportunity to investigate and resolve your concern directly first, but contacting JD does not remove your right to complain to the ICO.

INFORMATION COMMISSIONER'S OFFICE

SECTION 29

LINKS TO OTHER WEBSITES

Our website may contain links to websites operated by other organisations.

Once you leave the JD website, that organisation's privacy policy and terms normally govern its collection and use of your information.

JD is not responsible for the privacy practices of independent third-party websites and we encourage you to review their privacy information before providing personal data.

SECTION 30

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy when our services, technology, suppliers, legal obligations or data-processing activities change.

The latest version will be published on this page and the updated date will be shown clearly.

Where a change materially affects how we use personal information and the law requires additional notice or consent, we will take appropriate steps before applying that change.

Current version: September 2026