Legal // Policy
Privacy Policy
Barela Defense Group LLC ("BDG," "we," "our," or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and protect information about visitors to our website and customers who purchase our products. By using our website or purchasing from us, you consent to the practices described in this Privacy Policy.
BDG is a Colorado limited liability company located at 10220 Dunsford Drive, Lone Tree, Colorado 80124. We are subject to the Colorado Privacy Act (CPA), C.R.S. § 6-1-1301 et seq., and other applicable federal and state privacy laws.
1. Information We Collect
Information You Provide Directly
When you use our website, place an order, or contact us, we may collect:
- Identity information: Full name, date of birth (for age verification), government-issued identification details
- Contact information: Email address, phone number, mailing address
- Transaction information: Purchase history, payment method type (we do not store full card numbers), billing and shipping address
- FFL information: The name and license number of your chosen FFL transfer dealer
- Communications: Messages you send us via our contact form or email
Information Collected Automatically
When you visit our website, we may automatically collect:
- IP address and general geographic location (city/state level)
- Browser type, device type, and operating system
- Pages visited, time spent on pages, and referring URL
- Clickstream data and interaction events
This data is collected using standard web technologies including server logs and may include cookies or similar tracking technologies. You may disable cookies in your browser settings, though this may affect website functionality.
Information from Third Parties
We may receive information about you from third parties in limited circumstances, such as payment processors confirming transaction authorization or, if required by law, from government agencies in connection with compliance obligations.
2. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling your order | Contract performance |
| Age verification and eligibility determination | Legal obligation / contract |
| ATF recordkeeping and compliance | Legal obligation (18 U.S.C. § 923) |
| Fraud prevention and security | Legitimate interest / legal obligation |
| Customer service and responding to inquiries | Legitimate interest / contract |
| Website analytics and improvement | Legitimate interest |
| Marketing communications (with your consent) | Consent |
| Compliance with law and cooperation with law enforcement | Legal obligation |
3. Firearms Recordkeeping — Federal Law
As a firearms business, BDG is subject to federal recordkeeping requirements under the Gun Control Act and ATF regulations (27 C.F.R. Part 478). We are required by law to maintain certain records related to firearm transactions, including:
- Acquisition and disposition records for all firearms
- Copies of ATF Form 4473 (completed at the receiving FFL)
- Records of attempted transfers and NICS transaction numbers
These records are maintained for the periods required by federal law (generally 20 years or until the business closes, whichever comes first). We cannot delete or modify these records upon customer request, as doing so may violate federal law. ATF has the right to inspect these records at any time.
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following limited circumstances:
- Service providers: Payment processors, shipping carriers, and technology providers who assist us in operating our business, subject to confidentiality obligations
- FFL transfer dealers: We share your name and order details with the receiving FFL dealer to facilitate your firearm transfer
- Legal compliance: When required by law, regulation, or valid legal process (including ATF inspections, court orders, or law enforcement requests)
- Business transfer: In connection with a merger, acquisition, or sale of our business assets, subject to the acquiring party honoring this Privacy Policy
- Safety: When we believe disclosure is necessary to prevent imminent harm or illegal activity
We do not share your personal information with third parties for their independent marketing purposes.
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:
- Transaction records: 7 years after the transaction for tax and financial records
- ATF-required firearms records: As mandated by federal law (minimum 20 years)
- Customer service records: 3 years after last interaction
- Website analytics data: 26 months in aggregate form
6. Your Privacy Rights
Depending on your state of residence, you may have certain rights regarding your personal information. Colorado residents have rights under the Colorado Privacy Act (CPA):
To exercise any of these rights, contact us using our contact form. We will respond within 45 days of receiving your request, as required by Colorado law. We may need to verify your identity before fulfilling your request. Please note that certain rights may be limited or unavailable with respect to data we are required to retain under federal law (including ATF recordkeeping requirements).
7. Data Security
We implement reasonable technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit (TLS), access controls, and secure handling practices.
However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your information. If we discover a security breach that affects your information, we will notify you as required by applicable law.
8. Payment Processing
We do not store complete credit card or payment account numbers on our systems. Payment processing is handled by our payment processor(s), who are responsible for securing your payment data in accordance with PCI-DSS standards. Your payment information is transmitted directly to our payment processor using industry-standard encryption.
9. Cookies & Tracking Technologies
Our website may use cookies and similar technologies for:
- Essential site functionality (session management, security)
- Analytics (understanding how visitors use our site)
- Performance optimization
We do not use tracking cookies for cross-site advertising purposes. You may configure your browser to refuse cookies or alert you when cookies are being sent. If you refuse cookies, some features of our website may not function properly.
10. Children's Privacy
Our website is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected personal information from a person under 18, we will delete that information promptly. If you believe we have inadvertently collected information from a minor, please contact us immediately.
11. Third-Party Links
Our website may contain links to third-party websites. BDG is not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. We will post the revised policy on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes acceptance of the updated policy.
13. Contact Us
For privacy-related questions, requests to exercise your rights, or concerns about our data practices, please contact us:
Barela Defense Group LLC
Attn: Privacy
10220 Dunsford Drive
Lone Tree, Colorado 80124
You may also use our contact form. Colorado residents who are unsatisfied with our response to a privacy request may file a complaint with the Colorado Attorney General's office at coag.gov.