Privacy policy
Last updated
The short version
We are a firearms and personal-protection training company. This website exists to tell you about our courses, let you book and pay for them, and let you contact us.
To do that we need your name and email address, and — if you buy something — your payment details, which go straight to Stripe and never reach us. That is very nearly all we collect.
We do not sell your information. We do not share it for advertising. We do not run advertising or analytics trackers on this site. We do not ask for your date of birth, your gender, your occupation, or your “personal interests.”
What this site does today
This policy describes everything we do with your information, including booking and payment. Not all of it is switched on yet. Today the only thing this website collects is what you type into the contact form — there is no checkout, no account sign-in and no mailing-list form on the site at the moment. The sections below describe those things because they say how we will handle them when they arrive, and a policy published before the feature is better than one written after it.
Who we are
Victory Personal Protection Solutions, LLC (“we,” “us,” “our”) operates the website at www.victoryprotect.com and provides firearms and personal-protection training in Dawson County, Georgia.
Contact for privacy questions: info@victoryprotect.com
We are a small, home-based business, so we do not publish a street address. Email reaches us faster than post does, and we answer every privacy request that arrives there.
What we collect
1. Information you give us
| When | What we collect |
|---|---|
| You send us a message from the contact form | Your name, your email address, your phone number if you choose to give one, the course you asked about if you picked one, and whatever you write to us |
| You book or buy a protection-planning package or an Academy place | Your name, email address, phone number (optional), and what you bought |
| You sign in to your account | Your email address, and nothing else — sign-in is by a link emailed to you, and no password is ever set |
| You join our email list | Your email address, and the fact that you asked to join |
Giving us a phone number is optional. We ask for it so we can reach you quickly if a class time, location, or weather call changes.
The contact form stores nothing. What you type is sent to us as an email and that email is the only copy. There is no database behind the form and no record of your message anywhere on this website. From then on it is an email in our mailbox, and the retention table below says how long it stays there.
2. Spam protection on the contact form
The contact form is protected by Cloudflare Turnstile, which checks that a form was filled in by a person rather than by a script. It is the only third-party script on this site.
Turnstile does its check without asking you to solve a puzzle and without following you around other websites. To make the check, Cloudflare receives your IP address and technical information about your browser. When you press send, we pass the token Turnstile issued back to Cloudflare, along with your IP address, so it can confirm the token is genuine. Cloudflare handles that under its own privacy policy. Turnstile sets no advertising or analytics cookie.
If you would rather not use the form, email info@victoryprotect.com instead. It reaches exactly the same place, and the only third party involved is your own email provider.
3. Payment information
We never see or store your full card number. When you pay, your card details go directly to Stripe, our payment processor. Stripe sends us back only what we need to recognize the order: your name, your email address, the amount, the last four digits and brand of the card, and whether the payment succeeded.
Stripe handles your card details under its own privacy policy and its PCI-DSS obligations. We could not retrieve your full card number if we tried.
4. Information collected automatically
Our host records standard web-server information for every request: IP address, the page requested, the date and time, the browser and operating system reported by your device, and the referring page. This is ordinary server logging used to keep the site running and to investigate abuse or outages.
We use a small number of strictly necessary cookies — to keep you signed in, and to complete a checkout. We do not use advertising cookies, analytics cookies, tracking pixels, or third-party ad networks, and there are no social-media tracking scripts on this site. If that ever changes, this paragraph changes with it and the date at the top of the page changes too.
5. What we deliberately do not collect
We do not ask for and do not want: your Social Security number, your driver’s licence or permit number, your date of birth, your gender, your income, your firearms inventory, or any information about firearms you own. If you volunteer any of this in a message to us, we will not add it to any record beyond that message.
Why we use it
- To sell and deliver training you asked for — confirmations, reminders, receipts, materials, and changes to a scheduled class.
- To take payment and prevent fraudulent transactions.
- To answer your questions.
- To keep the business records we are required to keep, including for tax purposes.
- To send occasional news and course announcements only if you asked us to — and every one of those emails has an unsubscribe link that works.
We do not use your information to build a profile of you, and we do not make any automated decision about you that has a legal or similarly significant effect.
Who we share it with
We share personal information only with the service providers that make the site work, and only what each of them needs. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
| Provider | What they do for us | What they receive |
|---|---|---|
| Cloudflare, Inc. — cloudflare.com/privacypolicy | Checks the contact form was filled in by a person | Your IP address and technical information about your browser |
| Resend — resend.com/legal/privacy-policy | Delivers our email — contact-form messages, confirmations, receipts, and sign-in links | Your email address, your name, and the contents of the message |
| Stripe, Inc. — stripe.com/privacy | Payment processing | Card details, name, email, billing postcode, amount |
| Vercel Inc. — vercel.com/legal/privacy-policy | Hosts and delivers this website | IP address and standard request logs |
All four are located in the United States and process this information on our behalf under their agreements with us.
A note about USCCA registration. Our USCCA-certified courses are registered and paid for on the USCCA’s own website, not ours. When you follow one of those links you leave this site, and everything you enter there — including your payment — is collected by the USCCA under its own privacy policy, not this one. We do not send them your information; you give it to them directly.
What we receive back is the class roster, so we know who is coming. We treat whatever is on it the same way as everything else in this policy: we keep only what we need to run the class and issue your certification, and we share none of it.
We will also disclose information if the law requires it — a subpoena, a court order, or a lawful request from a government authority — or where we need to establish or defend a legal claim, or to address a credible threat to someone’s safety. If we are ever compelled to hand over your information, we will tell you unless we are legally barred from doing so.
If the business is ever sold or merged, customer records may transfer with it. You would be told before that happened.
How long we keep it
| Record | Kept for |
|---|---|
| Orders, receipts, and payment records | 7 years, for tax and accounting purposes |
| Course rosters and completion records | As long as we are required to hold them to confirm that you completed a course, including by the body that certified it |
| Account records | Until you ask us to close the account |
| Email list membership | Until you unsubscribe |
| Messages you send us | 2 years, unless they relate to an order or an incident |
| Web-server logs and email delivery logs | Only as long as Vercel and Resend hold them under their own retention settings. We do not copy them anywhere else or keep our own duplicate |
Your choices
- See what we hold. Email us and we will tell you what we have and send you a copy.
- Correct it. Tell us what is wrong and we will fix it.
- Delete it. We will delete what we are not required to keep. We cannot delete completed order and tax records before their retention period ends, and Stripe keeps its own transaction records independently of us.
- Stop the emails. Use the unsubscribe link in any marketing email, or just ask us. We will still send you transactional email about a course you have booked — confirmations, changes, and receipts — because that is part of delivering what you paid for.
Email info@victoryprotect.com for any of these. We will respond within 30 days. We do not charge for this, and we will not treat you differently for asking.
Georgia does not currently have a comprehensive consumer privacy law. If you live in a state that does — California, Colorado, Connecticut, Virginia, Texas, and others — you may have statutory rights beyond the ones above. Ask us and we will honor them.
This site is intended for people in the United States. We train in Georgia and we do not aim the site at people in the European Union or the United Kingdom, so it is not designed to meet the GDPR’s requirements. If you are outside the United States and want to train with us, get in touch and we will talk it through with you first.
Security
Your connection to this site is encrypted (HTTPS). Card details are handled by Stripe and never touch our systems. Access to customer records is limited to the people who need it to run the business, protected by strong passwords and multi-factor authentication where the tools support it.
No system is perfectly secure. If a breach ever affects your personal information, we will notify you and the Georgia Attorney General’s office as required by Georgia law (O.C.G.A. § 10-1-910 et seq.).
Children
This website is not intended for children, and we do not knowingly collect personal information online from anyone under 13. If a minor is attending training, a parent or legal guardian makes the booking, comes to the class, and signs the waiver. Talk to us before you book for anyone under 18 — see the terms of use for what we need.
Links to other sites
This site links to the USCCA, to River Bend Gun Club, and to our social media accounts. We are not responsible for what those sites do with your information. Their policies govern, not this one.
Changes to this policy
If we change how we handle your information in a way that matters, we will post the new policy here with a new date, and — for significant changes — email anyone with an account or an active booking. The date at the top of this page always tells you which version you are reading.
Questions
Email info@victoryprotect.com.