Privacy Policy | Stallion Guns

Legal & Compliance

Privacy Policy

How we collect, use, and protect your information — in full compliance

Complies with: DPDP Act 2023 DPDP Rules 2025 IT Act 2000 IT (SPDI) Rules 2011 Arms Act 1959 Consumer Protection Act 2019
Effective date: June 2025  — Last updated: March 2026  — Domain: stallionguns.com

This Privacy Policy governs the collection, use, storage, and protection of personal data collected through the website stallionguns.com, owned and operated by Stallion Guns, an airgun manufacturer and dealer based in India. This policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000 and its associated rules, the Arms Act, 1959, and other applicable Indian laws.

Important legal notice: This website is an informational platform only. It does not process online payments, create user accounts, or facilitate online sale or transfer of firearms or ammunition. All commercial and regulatory transactions are conducted offline in strict compliance with the Arms Act, 1959, and the Arms Rules, 2016.

01

Information Collection DPDP §4

Stallion Guns, acting as a Data Fiduciary under the DPDP Act, 2023, collects only such personal data as is necessary for the purposes described in this policy (data minimisation principle). No personal information is collected without your voluntary and informed consent.

Categories of personal data that may be collected include:

  • Name — to identify the person making an enquiry
  • Email address — for written communication and response to enquiries
  • Phone number — for direct contact and follow-up if required
  • Enquiry content — any information voluntarily submitted through contact or enquiry forms, including product-related questions

This website does not collect Sensitive Personal Data or Information (SPDI) as defined under the IT (SPDI) Rules, 2011, which includes passwords, financial information, health data, biometric data, or sexual orientation. Should any such information be incidentally provided, it will not be stored or processed.

The collection of personal data is entirely voluntary. You may browse this website without providing any personal information. Information is only collected when you actively submit it via a form or contact channel.

02

Use of Information DPDP §6

Under the DPDP Act, 2023, personal data may only be processed for the specific, clear, and lawful purposes for which consent was obtained. Your personal information will only be used for the following purposes:

  • Responding to product or business enquiries submitted through this website
  • Communicating with you regarding your requests, questions, or feedback
  • Improving the content, structure, and functionality of this website based on usage patterns
  • Fulfilling any legal, regulatory, or statutory obligation applicable to Stallion Guns, including obligations under the Arms Act, 1959

Your personal data will not be used for targeted advertising, automated profiling, or any purpose beyond those explicitly stated above. If we wish to use your data for any new purpose, we will seek your fresh consent before doing so.

04

Cookies Policy IT Act §43A

This website may use cookies and similar browser-based technologies to maintain functionality and improve your browsing experience. In accordance with applicable Indian law, cookies that collect personal data require your prior consent.

We may use the following types of cookies:

  • Strictly Necessary Cookies: Essential for the basic operation of the website (e.g., session management). These do not require your consent.
  • Functional Cookies: Used to remember your preferences during a browsing session. These are activated only with your consent.
  • Analytics Cookies: Used in aggregated, anonymised form to understand how visitors interact with the website. No personally identifiable information is stored via these cookies without your consent.

You may control, disable, or delete cookies through your web browser settings at any time. Disabling certain cookies may affect the functionality of some website features. Continued use of this website, after you have been informed of our cookie use, constitutes acceptance of strictly necessary cookies only.

05

Third-Party Services DPDP §8

As required under Section 8 of the DPDP Act, 2023, Stallion Guns takes responsibility for ensuring that any third-party service providers (acting as Data Processors) comply with applicable data protection obligations. The following third-party services are used on this website:

  • WhatsApp (Meta Platforms): This website may include WhatsApp chat links or buttons to facilitate direct user communication. Any interaction initiated through WhatsApp is subject to WhatsApp’s own Privacy Policy and Terms of Service. Stallion Guns is not responsible for data processed by WhatsApp once you leave this website.
  • Bootstrap Framework & Web Fonts: The website uses the Bootstrap front-end framework and Google Fonts or similar web font providers to deliver its visual design. These resources are loaded from content delivery networks (CDNs) and may result in your browser making requests to third-party servers as part of standard page loading. These providers may independently log your IP address.
  • External Hosting Infrastructure: This website is hosted on third-party server infrastructure. The hosting provider automatically logs certain technical information (such as IP addresses) as part of standard server operations. Such data is handled under the hosting provider’s own data protection policies.

We enter into written agreements with Data Processors where required, ensuring they process data only on our documented instructions and in compliance with the DPDP Act, 2023.

06

Log Files IT Act §2(1)(o)

Like most websites, the server hosting stallionguns.com may automatically collect technical information in server log files when you visit. This information is used for website administration, security monitoring, technical diagnostics, and understanding general usage patterns.

Server log files may contain the following information:

  • Internet Protocol (IP) address of the visiting device
  • Browser type, version, and language settings
  • Device type, operating system, and screen resolution
  • Pages visited on this website and navigation paths taken
  • Date, time, and duration of each visit
  • HTTP status codes, referrer URLs, and data transferred

Log file data is not linked to any personally identifiable information and is retained for a minimum of one year as recommended under the DPDP Rules, 2025, for cybersecurity audit purposes. After this period, log data is securely deleted or anonymised.

07

Data Retention DPDP §8(7)

In accordance with Section 8(7) of the DPDP Act, 2023, Stallion Guns will not retain personal data for longer than is necessary for the purpose for which it was collected, or as required by applicable law.

  • Enquiry data (name, email, phone, message content): Retained for a maximum of 12 months from the date of the last communication, after which it is securely deleted, unless an ongoing business or legal relationship requires its continued retention.
  • Server log files: Retained for a minimum of 12 months for cybersecurity and audit purposes, in line with DPDP Rules, 2025.
  • Records required under the Arms Act, 1959: Certain transaction and communication records relating to arms manufacturing and sales may be required to be retained for the periods specified under the Arms Act and Arms Rules, 2016, regardless of the above timelines.

Upon expiry of the retention period, or upon a valid erasure request, personal data is permanently deleted or anonymised using methods that prevent reconstruction.

08

Data Protection & Security DPDP §8(5) / IT §43A

Stallion Guns implements reasonable and appropriate technical and organisational security safeguards to protect personal data against unauthorised access, disclosure, alteration, or destruction, as required under Section 8(5) of the DPDP Act, 2023, and Section 43A of the Information Technology Act, 2000.

Our security measures include, but are not limited to:

  • Technical measures: SSL/TLS encryption for data in transit, access controls, secure server configurations, and regular vulnerability assessments
  • Organisational measures: Restricting access to personal data on a need-to-know basis, and training relevant personnel on data protection obligations
  • Vendor management: Ensuring third-party Data Processors maintain equivalent security standards as required under DPDP Rules, 2025

No sale or rent of data: Stallion Guns does not sell, rent, trade, or otherwise transfer your personal data to any third party for commercial or marketing purposes. Data is disclosed only where required by applicable law or by order of a competent court, government body, or regulatory authority.

Security limitation notice: No method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security and disclaim liability for unauthorised access beyond our reasonable control.

09

Your Rights as Data Principal DPDP §11–14

The DPDP Act, 2023 grants you, as a Data Principal (the individual whose data is being processed), the following rights, which you may exercise at any time by contacting our Grievance Officer:

Right to Access (§11)

Request a summary of the personal data we hold about you, the purposes for which it is processed, and the names of Data Processors to whom it has been disclosed.

Right to Correction & Erasure (§12)

Request correction of inaccurate or incomplete personal data, or erasure of data that is no longer necessary for the purpose for which it was collected.

Right to Withdraw Consent (§6)

Withdraw previously given consent at any time. Withdrawal will not affect processing carried out before the withdrawal, and may affect your ability to receive certain services.

Right to Grievance Redressal (§13)

Raise a grievance with our designated Grievance Officer regarding handling of your personal data. If unresolved, you may approach the Data Protection Board of India.

Right to Nominate (§14)

Nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity, in accordance with the DPDP Act.

Right to Complain to DPBI

If your grievance is not resolved to your satisfaction, you may file a complaint with the Data Protection Board of India (DPBI) once it becomes operational.

We will endeavour to respond to all rights requests within a reasonable timeframe. Certain rights may be limited where data is required to be retained by law (e.g., under the Arms Act, 1959) or where such exercise would adversely affect the rights of others.

10

Children’s Data DPDP §9

In compliance with Section 9 of the DPDP Act, 2023, Stallion Guns does not knowingly collect, process, or store personal data of children (individuals under the age of 18 years) without the verifiable consent of a parent or lawful guardian.

This website does not engage in tracking, behavioural monitoring, or targeted advertising directed at children. If we become aware that personal data of a minor has been submitted without appropriate parental consent, we will promptly delete such data from our records.

Notice to parents and guardians: If you believe your child has provided personal information through this website without your consent, please contact our Grievance Officer immediately so that we can take corrective action.

11

Cross-Border Data Transfer DPDP §16

In accordance with Section 16 of the DPDP Act, 2023, personal data may be transferred outside the territory of India only to countries that are not restricted by a Government of India notification under the Act.

Certain third-party service providers used on this website (such as web hosting providers, CDNs, or font providers) may process technical data on servers located outside India. Where such transfers occur, we ensure that:

  • The transfer is to a country not notified as a restricted destination under the DPDP Act
  • Contractual obligations binding the Data Processor to data protection standards equivalent to those applicable in India are in place
  • Only the minimum necessary technical data (e.g., IP address for CDN routing) is transferred

Stallion Guns does not transfer personally identifiable enquiry data (names, email addresses, phone numbers) to servers outside India.

12

Arms Act Regulatory Compliance Arms Act 1959

Stallion Guns is a licensed airgun manufacturer and dealer operating under the Arms Act, 1959 and the Arms Rules, 2016. Our business operations are subject to oversight by the relevant licensing authority, the Ministry of Home Affairs, and applicable State Government authorities.

Mandatory disclosure to authorities: Under the Arms Act, 1959 and Arms Rules, 2016, Stallion Guns may be legally required to disclose user information, enquiry records, transaction data, and other relevant records to licensing authorities, law enforcement agencies, the Ministry of Home Affairs, or a court of competent jurisdiction, upon lawful demand. Such disclosures will be made without prior notice to the affected individual where required by law.

In addition to the DPDP Act requirements, the following regulatory obligations affect how data is handled in our business context:

  • Licence-related records: Records of sales, repairs, and transfers of airguns and related products may be required to be maintained and submitted to licensing authorities under the Arms Rules, 2016, including periodic reporting obligations.
  • Enquiry verification: In the course of responding to product enquiries, Stallion Guns may be required to verify the identity and eligibility of the person making the enquiry, in accordance with applicable arms regulations.
  • Law enforcement cooperation: Stallion Guns will fully cooperate with law enforcement agencies, the Ministry of Home Affairs, and any competent authority exercising powers under the Arms Act, 1959 or any other applicable law.

Nothing in this Privacy Policy limits or restricts the disclosure of information required under any law, regulation, court order, or government direction.

13

Data Breach Notification DPDP §8(6) / DPDP Rules §7

In the event of a personal data breach, Stallion Guns will take immediate steps to contain and remediate the breach, and will fulfil its notification obligations as prescribed under the DPDP Act, 2023, and DPDP Rules, 2025.

  • Notification to Data Protection Board of India (DPBI): We will notify the DPBI of any breach compromising the confidentiality, integrity, or availability of personal data, promptly and without undue delay, including details of the nature, extent, timing, location, consequences, and remediation measures.
  • Notification to affected Data Principals: Where a breach is likely to result in harm to the affected individuals, we will notify them directly in plain language, describing the breach, the data affected, and the steps being taken.
  • Internal record-keeping: All breach incidents will be documented internally in our breach register, including details of the incident, our response, and any preventive measures implemented.

All breaches, regardless of severity or damage caused, will be reported to the DPBI as required under the DPDP Act, 2023.

16

Policy Updates

This Privacy Policy will be reviewed and updated periodically to reflect changes in applicable law (including ongoing implementation of the DPDP Act and Rules), our business practices, or the services provided through this website.

Material changes to this policy will be notified to users through a prominent notice on this page, and where practicable, via the email address provided by the user. The “Last updated” date at the top of this page will be revised with each update. Your continued use of this website following the publication of changes constitutes your acknowledgement of the updated policy.

You are encouraged to review this page periodically. The current version of this policy supersedes all earlier versions.

17

Grievance Officer DPDP §13 / IT Rules §5(9)

As required under Section 13 of the DPDP Act, 2023, and Rule 5(9) of the IT (SPDI) Rules, 2011, Stallion Guns has designated a Grievance Officer to address any complaints or concerns regarding the handling of your personal data.

Grievance Office Details

Company: Stallion Guns

Address: Plot No.4 , Green Field Industrial Area , Malot Kandrori Teh.Indora Distt Kangra HP-176402

Email: [email protected]

Response time: We will acknowledge your grievance within 72 hours and resolve it within 30 days of receipt.

18

Contact Us

For any general questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us through any of the following channels:

We will endeavour to respond to all queries promptly and in accordance with our obligations under applicable Indian law.

Website: stallionguns.com
General enquiries: [email protected]
Privacy/data requests: [email protected]

Disclaimer: This Privacy Policy is provided for informational purposes and represents Stallion Guns’ commitment to data privacy under applicable Indian law. It does not constitute legal advice. For specific legal advice, please consult a qualified legal professional. This policy is governed by and construed in accordance with the laws of India. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts of Kangra, Himachal Pradesh, India.