Privacy policy

PRIVACY POLICY

Last updated: July 31, 2026

This Privacy Policy explains how “SHOOTING 360” LTD (“SHOOTING 360”, “TPC Loadout”, “we”, “us” or “our”) collects, uses, stores, shares and otherwise processes personal information when you:

  • visit or use https://tpcloadout.com and any related country, language or regional versions of the website;

  • create or use a customer account;

  • purchase or return a product;

  • contact our customer service team;

  • subscribe to our email, SMS or other marketing communications;

  • interact with our advertisements, social media pages or other online services.

This Privacy Policy applies to customers and website visitors located in Europe, including the European Union and European Economic Area, the United Kingdom and Switzerland, and in the United States.

1. DATA CONTROLLER AND BUSINESS INFORMATION

The controller responsible for your personal data is:

“SHOOTING 360” LTD
Company registration/UIC number: BG115819024
Country of registration: Republic of Bulgaria
Website: https://tpcloadout.com

For questions concerning this Privacy Policy or the processing of your personal information, please contact us using the details above.

If we appoint a Data Protection Officer or a representative in another jurisdiction, their contact details will be published in this section.

2. PERSONAL INFORMATION WE COLLECT

The personal information we collect depends on how you interact with us.

2.1 Information you provide directly

We may collect:

  • first and last name;

  • billing and delivery address;

  • country, state, province, region, city and postal code;

  • email address;

  • telephone number;

  • account username and password;

  • products ordered, quantities, sizes, variants and order history;

  • payment and transaction information;

  • tax or invoicing information;

  • company name and VAT number where an invoice is requested;

  • return, refund, exchange and warranty information;

  • marketing preferences;

  • customer service correspondence;

  • product reviews, survey responses and feedback;

  • any other information you choose to provide.

2.2 Payment information

Payments may be processed by independent payment service providers. Depending on the selected payment method, the payment provider may collect payment card details, bank account information, billing data, authentication information and transaction details.

We generally do not receive or store complete payment card numbers. We may receive limited payment information, such as:

  • payment status;

  • payment method;

  • transaction identification number;

  • card type;

  • the last digits of a payment card;

  • billing name and address;

  • fraud or payment verification results.

Payment providers process personal information under their own privacy policies and legal obligations.

2.3 Information collected automatically

When you use the website, we and our service providers may automatically collect:

  • IP address;

  • browser type and version;

  • device type and operating system;

  • device identifiers;

  • language and regional settings;

  • approximate location derived from the IP address;

  • referring website or advertisement;

  • pages and products viewed;

  • searches, clicks and interactions;

  • shopping-cart activity;

  • checkout activity;

  • date, time and duration of visits;

  • cookie and similar technology identifiers;

  • information about website errors, performance and security events.

2.4 Information received from third parties

We may receive information from:

  • payment service providers;

  • delivery and courier companies;

  • e-commerce and hosting providers;

  • fraud prevention and identity verification providers;

  • analytics and advertising platforms;

  • social networks;

  • customer service platforms;

  • affiliate and referral partners;

  • public databases where permitted by law.

For example, when you interact with an advertisement on a social media platform, we may receive information concerning the advertisement, campaign and actions taken on our website.

3. HOW WE USE PERSONAL INFORMATION

We may use personal information for the following purposes.

3.1 Orders and contractual services

We process information to:

  • receive and confirm orders;

  • process payments;

  • prepare, package and deliver products;

  • provide order status and delivery notifications;

  • create and manage customer accounts;

  • process returns, refunds, exchanges, complaints and warranty claims;

  • issue invoices and accounting documents;

  • communicate about an order or contractual request;

  • provide customer service.

3.2 Website operation and improvement

We process information to:

  • operate and maintain the website;

  • remember shopping-cart contents and user preferences;

  • improve website functionality and user experience;

  • analyse website traffic and usage;

  • test new functions and layouts;

  • identify technical errors;

  • protect the website against abuse and attacks.

3.3 Security and fraud prevention

We may process information to:

  • authenticate users;

  • prevent fraudulent payments and orders;

  • detect suspicious activity;

  • prevent misuse, hacking, scraping and automated attacks;

  • protect customers, our business and third parties;

  • enforce our Terms and Conditions;

  • establish, exercise or defend legal claims.

3.4 Marketing and advertising

Subject to applicable law and, where required, your consent, we may use information to:

  • send newsletters, promotional offers and product announcements;

  • remind you about products left in your shopping cart;

  • personalise website content and recommendations;

  • measure advertising performance;

  • create advertising audiences;

  • show relevant advertisements on third-party websites and platforms;

  • exclude existing customers from certain advertising campaigns;

  • analyse whether an advertisement resulted in a visit or purchase.

You may unsubscribe from email marketing at any time by using the unsubscribe link in the relevant message or by contacting us.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

3.5 Legal and regulatory obligations

We may process and retain information to:

  • comply with tax, accounting, customs, consumer-protection and product-safety laws;

  • respond to lawful requests from courts, regulators and public authorities;

  • maintain records required by law;

  • investigate disputes, chargebacks and suspected violations;

  • comply with sanctions, export-control and other applicable regulatory requirements.

4. LEGAL BASES FOR PROCESSING IN EUROPE

Where the GDPR, UK GDPR or similar European data-protection legislation applies, we rely on one or more of the following legal bases:

4.1 Performance of a contract

Processing is necessary to:

  • accept and fulfil an order;

  • process payment and delivery;

  • manage an account;

  • handle returns, exchanges, refunds and warranty requests;

  • respond to requests made before entering into a contract.

4.2 Compliance with a legal obligation

Processing is necessary to comply with:

  • accounting and tax obligations;

  • consumer-protection requirements;

  • product-safety obligations;

  • court orders and lawful authority requests;

  • other legal or regulatory duties.

4.3 Legitimate interests

We may process information where necessary for our legitimate interests or those of a third party, provided that these interests are not overridden by your fundamental rights and freedoms.

Our legitimate interests may include:

  • operating and improving the website;

  • providing customer service;

  • protecting our business and customers;

  • preventing fraud and cyberattacks;

  • maintaining evidence of transactions and communications;

  • measuring business and website performance;

  • conducting limited direct marketing where permitted;

  • establishing, exercising or defending legal claims.

4.4 Consent

We rely on consent where required, including for:

  • non-essential cookies;

  • certain analytics technologies;

  • personalised or targeted advertising;

  • electronic marketing where prior consent is legally required;

  • any other processing specifically presented as consent-based.

You may withdraw your consent at any time.

4.5 Legal claims and substantial public interest

In exceptional circumstances, processing may be necessary to establish, exercise or defend legal claims or for another basis permitted by applicable law.

5. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies, pixels, tags, software development kits, local storage and similar technologies.

These technologies may be operated by us or by third parties.

5.1 Strictly necessary technologies

These technologies are required for the website to function and may be used to:

  • maintain the shopping cart;

  • enable checkout and payment;

  • keep users logged in;

  • remember privacy choices;

  • detect fraud and security threats;

  • balance traffic and maintain website stability.

Because they are necessary to provide the requested service, these technologies generally cannot be disabled through our consent tool.

5.2 Preference technologies

These technologies remember settings such as:

  • language;

  • country or region;

  • currency;

  • login preferences;

  • display and accessibility choices.

5.3 Analytics technologies

Analytics technologies help us understand:

  • how visitors find and use the website;

  • which pages and products are popular;

  • whether website functions operate correctly;

  • how marketing campaigns perform.

Where required by law, analytics technologies will be activated only after you provide consent.

5.4 Advertising technologies

Advertising partners may use cookies, pixels and similar technologies to:

  • measure advertisements and conversions;

  • limit how frequently advertisements are displayed;

  • create or use advertising audiences;

  • personalise advertisements;

  • associate activity on our website with activity on other services or devices.

Depending on the jurisdiction and the technology used, this activity may be considered targeted advertising, cross-context behavioural advertising, sharing or sale of personal information.

5.5 Managing cookies

When you first visit the website, you may be presented with a consent banner or privacy settings tool.

You may use this tool to:

  • accept all optional cookies;

  • reject optional cookies;

  • select individual cookie categories;

  • change or withdraw previous choices.

You may also control cookies through your browser. Blocking certain cookies may affect website functions.

More detailed information, including the names, providers, purposes and durations of cookies, should be provided in our separate Cookie Policy or cookie settings interface.

6. MARKETING COMMUNICATIONS

We may send marketing communications where:

  • you have provided consent;

  • the communication is otherwise permitted under applicable law;

  • the communication concerns similar products and a lawful existing-customer exception applies.

Every marketing email will contain an unsubscribe method.

You may also opt out by contacting us at [INSERT EMAIL ADDRESS].

We may retain limited information about an unsubscribe request to ensure that we respect the request and do not send further marketing messages to the relevant address.

Service messages concerning orders, payments, security, returns or account administration are not marketing messages and may continue after a marketing opt-out.

7. HOW WE SHARE PERSONAL INFORMATION

We may disclose personal information to the following categories of recipients.

7.1 E-commerce, website and hosting providers

These providers host and operate the store, customer accounts, checkout, databases and website infrastructure.

Our store may use Shopify or another e-commerce platform. Before publishing this Policy, this wording should be updated to identify the platform actually used.

7.2 Payment providers

We share information required to:

  • initiate and authenticate payments;

  • prevent fraud;

  • process refunds;

  • manage disputes and chargebacks.

7.3 Warehouses, couriers and delivery partners

We may provide names, contact details, addresses, order identifiers and delivery instructions to fulfil orders.

7.4 Technology and professional service providers

These may include:

  • cloud hosting and storage providers;

  • IT and cybersecurity providers;

  • customer service platforms;

  • email and SMS communication providers;

  • analytics providers;

  • accounting and invoicing providers;

  • legal advisers, accountants, auditors and insurers;

  • fraud prevention providers;

  • translation and localisation providers.

7.5 Advertising and social media partners

Subject to applicable law and cookie choices, we may share online identifiers, purchase events, hashed contact information or website activity with advertising platforms.

These providers may use information to provide measurement, attribution, audience creation and personalised advertising services.

7.6 Authorities and legal recipients

We may disclose information where reasonably necessary to:

  • comply with law or legal process;

  • respond to lawful authority requests;

  • protect rights, property or safety;

  • investigate fraud or security incidents;

  • enforce contracts and policies;

  • establish, exercise or defend legal claims.

7.7 Business transactions

If all or part of our business is sold, reorganised, financed, merged or transferred, personal information may be disclosed to advisers, prospective purchasers, investors, lenders and successor entities, subject to appropriate confidentiality and legal safeguards.

8. SALE, SHARING AND TARGETED ADVERTISING IN THE UNITED STATES

We do not sell personal information in exchange for money.

However, certain disclosures to advertising, analytics and social media partners may be considered a “sale”, “sharing”, “targeted advertising” or “cross-context behavioural advertising” under the laws of certain U.S. states.

Depending on your state of residence and the applicability of the relevant law, you may have the right to opt out of:

  • the sale of personal information;

  • sharing personal information for cross-context behavioural advertising;

  • processing personal information for targeted advertising;

  • certain profiling activities.

You may exercise an applicable opt-out right through:

  • the “Your Privacy Choices”, “Do Not Sell or Share My Personal Information” or similarly named link on our website;

  • our cookie consent tool;

  • a recognised browser-based opt-out preference signal, where legally required;

  • an email sent to s.marinov@destbul.com.

Where required, we will process recognised Global Privacy Control signals as requests to opt out for the browser or device sending the signal.

We will not discriminate against you for exercising an applicable privacy right.

9. CATEGORIES OF PERSONAL INFORMATION FOR U.S. RESIDENTS

Depending on your interaction with us, we may have collected the following categories of personal information during the preceding 12 months:

  1. Identifiers, such as name, address, email address, telephone number, IP address, account identifier and device identifier.

  2. Customer-record information, such as contact information, billing information and transaction records.

  3. Commercial information, such as products purchased, considered, returned or added to a shopping cart.

  4. Internet or electronic network activity, such as browsing activity, interactions with the website, advertisements and emails.

  5. Approximate geolocation information, such as a general location inferred from an IP address.

  6. Audio, electronic or visual information, where you communicate with customer support or submit images and other content.

  7. Professional or employment information, where you purchase on behalf of a business or provide company invoicing information.

  8. Inferences, such as product interests and likely preferences derived from shopping or website activity.

  9. Sensitive personal information, only where necessary and permitted by law, such as account login credentials or payment authentication information. We do not use sensitive personal information to infer characteristics about individuals.

We collect these categories from customers, website visitors, service providers, advertising partners and other sources described in this Policy.

We use and disclose these categories for the business and commercial purposes described in this Policy.

10. RETENTION OF PERSONAL INFORMATION

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to satisfy legal, accounting, tax, security and dispute-resolution requirements.

The applicable period depends on the type of information and the context.

We generally apply the following criteria:

  • Order, invoice and accounting records: for the period required by Bulgarian and other applicable tax and accounting legislation.

  • Customer account information: while the account remains active and for a reasonable period afterwards.

  • Customer service communications: for as long as necessary to resolve the request and manage related disputes.

  • Returns, claims and warranty records: for the duration of the applicable claim or warranty period and any subsequent limitation period.

  • Marketing information: until consent is withdrawn or an objection is received, subject to maintaining a suppression record.

  • Cookie and analytics information: according to the duration shown in the cookie settings or Cookie Policy.

  • Security logs: for a reasonable period necessary to investigate threats and protect the website.

  • Potential legal claims: until the relevant statutory limitation period has expired.

When information is no longer required, we will delete, anonymise or securely isolate it, unless continued retention is required by law.

11. INTERNATIONAL DATA TRANSFERS

We are established in Bulgaria, but some of our service providers may operate in the United States or other countries outside the European Economic Area, the United Kingdom or Switzerland.

As a result, personal information may be processed in countries whose data-protection laws may differ from those in your country.

Where required, we use appropriate safeguards for international transfers, which may include:

  • an adequacy decision issued by the relevant authority;

  • the European Commission’s Standard Contractual Clauses;

  • the UK International Data Transfer Agreement or UK Addendum;

  • contractual, organisational and technical supplementary safeguards;

  • another lawful transfer mechanism.

You may contact us for more information about the safeguards applicable to a particular transfer. We may redact commercially sensitive or confidential information from copies of contractual safeguards.

12. DATA SECURITY

We use reasonable administrative, technical and organisational measures intended to protect personal information against:

  • accidental or unlawful destruction;

  • loss;

  • alteration;

  • unauthorised disclosure;

  • unauthorised access;

  • misuse.

Measures may include encrypted communications, access controls, authentication mechanisms, system monitoring, backups, staff confidentiality obligations and use of reputable service providers.

No internet transmission or storage system is completely secure. We therefore cannot guarantee absolute security.

You are responsible for keeping your password confidential and for notifying us if you believe your account has been compromised.

13. YOUR RIGHTS IN EUROPE

If European data-protection law applies, you may have the following rights, subject to legal conditions and exceptions:

13.1 Right of access

You may request confirmation that we process your personal data and receive a copy of it, together with relevant processing information.

13.2 Right to rectification

You may request correction of inaccurate or incomplete personal data.

13.3 Right to erasure

You may request deletion of personal data where there is no continuing lawful basis or legal requirement to retain it.

13.4 Right to restriction

You may request restriction of processing in certain circumstances.

13.5 Right to data portability

Where processing is based on consent or contract and carried out by automated means, you may request certain data in a structured, commonly used and machine-readable format.

13.6 Right to object

You may object to processing based on legitimate interests.

You have the right to object at any time to processing of personal data for direct-marketing purposes.

13.7 Right to withdraw consent

Where processing is based on consent, you may withdraw consent at any time without affecting processing carried out before withdrawal.

13.8 Automated decision-making rights

You may have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

We do not ordinarily make decisions producing legal or similarly significant effects solely through automated processing.

13.9 Right to complain

You may lodge a complaint with the supervisory authority in the country where you live, work or believe an infringement occurred.

As our company is established in Bulgaria, you may also contact:

Commission for Personal Data Protection of the Republic of Bulgaria
Website: https://www.cpdp.bg

UK residents may contact the UK Information Commissioner’s Office, and Swiss residents may contact the Swiss Federal Data Protection and Information Commissioner.

14. PRIVACY RIGHTS OF U.S. RESIDENTS

Depending on your state of residence and whether the relevant law applies to us, you may have the right to:

  • confirm whether we process your personal information;

  • access or obtain a copy of personal information;

  • request correction of inaccurate personal information;

  • request deletion of personal information;

  • obtain portable personal information;

  • opt out of sale, sharing or targeted advertising;

  • opt out of certain profiling;

  • limit certain uses of sensitive personal information;

  • receive information about categories of information collected, sources, purposes and recipients;

  • appeal a refusal to act on a request;

  • receive equal service and pricing when exercising privacy rights.

These rights are not absolute. Applicable laws may permit or require us to deny a request, retain information or continue certain processing.

15. SUBMITTING A PRIVACY REQUEST

Please state:

  • your name;

  • your email address;

  • your country and state of residence;

  • the right you wish to exercise;

  • sufficient information to identify your account or transactions.

We may request additional information to verify your identity and protect your information from unauthorised disclosure.

Where permitted by law, an authorised agent may submit a request on your behalf. We may require proof of the agent’s authority and may ask you to confirm your identity directly.

We will respond within the period required by applicable law. Where legally permitted, the response period may be extended, and we will inform you of the extension.

We generally do not charge a fee. A reasonable fee may be charged, or a request may be refused, where permitted by law and where the request is manifestly unfounded, excessive or repetitive.

16. CHILDREN’S PRIVACY

The website and products are not directed to children under the age of 16, and we do not knowingly collect personal information directly from children under 16.

In the United States, the website is not directed to children under 13.

If you believe that a child has provided personal information without appropriate parental or guardian authorisation, contact us at [INSERT PRIVACY EMAIL]. We will investigate and delete the information where required.

We do not knowingly sell or share the personal information of consumers under 16.

17. THIRD-PARTY WEBSITES AND SERVICES

The website may contain links to external websites, payment providers, social networks and other third-party services.

We are not responsible for the privacy practices, security or content of independent third parties.

You should review the privacy policy of each third-party service before providing personal information.

18. SOCIAL MEDIA

When you interact with our pages, advertisements or content on social networks, both we and the relevant social network may process information about the interaction.

Depending on the platform and activity, we and the social network may act as independent controllers or, for limited processing, joint controllers.

The social network’s own privacy policy governs its processing of information within its service.

19. DO NOT TRACK AND PRIVACY SIGNALS

Some browsers provide “Do Not Track” signals. Because there is no universally accepted standard for all such signals, the website may not respond to every Do Not Track signal.

Where legally required, we recognise valid opt-out preference signals, such as Global Privacy Control, as requests to opt out of sale, sharing or targeted advertising for the relevant browser or device.

20. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect:

  • changes to our services;

  • new providers or technologies;

  • changes to our processing activities;

  • legal or regulatory developments;

  • security and operational requirements.

The updated version will be published on this page with a revised “Last updated” date.

Where required by law, we will provide additional notice or obtain consent before a material change takes effect.

21. CONTACT US

For questions, complaints or requests relating to privacy or personal information, contact:

“SHOOTING 360” LTD
Email: s.marinov@destbul.com
Website: https://tpcloadout.com