Privacy Policy
Your Data. Protected With Precision.
We know who our customers are and why privacy matters to them. This page explains what we collect, what we do with it, and the one category we are not permitted to delete.
Last updated: August 21, 2026
How We Handle Your Information
This policy covers information collected through the Echo Zulu Defense, LLC website, our purchasing process, and our customer service and warranty channels. It works together with our Terms of Service.
One thing up front: as a federally licensed firearms manufacturer, some of the records we create are required by federal law and cannot be deleted at your request. Section 3 explains exactly which ones and why.
1. Information We Collect
Information You Give Us
- Identification: Name, email address, phone number, and billing and shipping addresses.
- Order information: Products purchased, order history, and your selected dealer.
- Warranty and RMA submissions: Contact and return address details, product serial numbers, purchase date, dealer, and your description of the issue including host firearm, ammunition, and round count.
- Correspondence: Emails, phone calls, and messages exchanged with our sales, support, or warranty staff.
Information Required For Regulated Transactions
- Information necessary to process a transfer of an NFA-regulated item, including information appearing on ATF forms and dealer licensing information.
- Serial numbers of the specific items allocated or transferred to you.
Serial numbers matter here. A serial number linked to your name associates you with a specific registered item. We treat that association as sensitive and restrict access to it accordingly.
Information Collected Automatically
- Device and connection: IP address, browser type, operating system, and device identifiers.
- Usage: Pages viewed, referring pages, timestamps, and interactions with site tools such as configurators and fit checkers.
2. How We Use Your Information
- Process orders, allocate serialized products, and manage your account.
- Prepare and file the documentation required for regulated transfers.
- Verify dealer licensing and coordinate shipment.
- Take payment and prevent fraudulent transactions.
- Communicate order status, transfer status, and shipping updates.
- Handle warranty claims, repairs, returns, and support requests.
- Diagnose product issues and improve our designs. Warranty data such as round count and failure mode genuinely informs how we build the next revision.
- Operate, secure, and improve the website.
- Send marketing communications where you have opted in.
- Comply with federal, state, and local legal obligations.
3. Regulatory Records
Echo Zulu Defense is a federally licensed firearms manufacturer and a Special Occupational Taxpayer. Federal law requires us to create and maintain specific records relating to the manufacture, acquisition, and disposition of the items we produce, and to make those records available to ATF for inspection.
These regulatory records are not subject to deletion at your request. If you ask us to delete your personal information, we will delete what we lawfully can and retain what we are required to retain. We will tell you which is which rather than quietly ignoring part of your request.
What This Covers
- Records of manufacture, acquisition, and disposition of serialized items.
- Transfer documentation and the information appearing on federal forms.
- Records we are required to retain for the periods specified by federal law and regulation.
What This Does Not Cover
- Marketing lists and email subscriptions.
- Website analytics and browsing data.
- Support correspondence not tied to a regulated transaction.
- Account preferences and saved information.
Those categories are yours to control, and we will act on requests about them.
Government Access
Records we are required to keep as a licensee are subject to inspection by ATF under the conditions federal law provides. We do not volunteer customer information beyond what the law requires, and we do not provide customer data to any government agency absent a lawful request, legal obligation, or valid process.
4. What We Never Do
We understand what a firearms customer list is worth and what it would mean for it to circulate. So, plainly:
- We do not sell, rent, trade, or license our customer list to anyone, for any price.
- We do not sell your personal information, and we do not share it for cross-context behavioral advertising in the sense those terms are used under state privacy law.
- We do not disclose what you bought, or what serial number is associated with you, to other customers, marketers, data brokers, or list aggregators.
- We do not identify package contents on the outside of a shipment.
5. When We Share Information
We share information only where it is necessary to complete what you asked us to do, or where the law requires it.
- Your dealer: Information necessary to complete your transfer. This is unavoidable; the dealer is a required participant in the transaction.
- Payment processors: To authorize and settle your payment.
- Shipping carriers: Name and destination address needed for delivery.
- Service providers: Website hosting, email delivery, and similar vendors, limited to what they need to perform their function and bound to protect it.
- Legal requirements: Where required by law, regulation, subpoena, or other valid legal process, or to protect our rights, property, or the safety of others.
- Business transfer: In connection with a merger, acquisition, or sale of assets, subject to this policy continuing to apply to the transferred information.
6. Cookies And Tracking
Cookies are small files stored on your device that let us recognize your browser between visits.
- Essential: Cart contents, session state, and security. These are required for the site to function.
- Preferences: Settings you have chosen, so you do not have to set them again.
- Analytics: Aggregate measurement of how the site performs and where it fails.
You can block or delete cookies in your browser settings. Essential cookies cannot be disabled without breaking checkout and other core functions.
Where your browser or extension transmits a Global Privacy Control signal, we treat it as a valid opt-out request for the categories it applies to.
7. Marketing And Messaging
- We send marketing email only to people who have opted in. Every marketing email includes an unsubscribe link, and unsubscribing takes effect promptly.
- Where you have separately consented to text messages, you may stop them at any time by replying STOP. Message and data rates may apply.
- Transactional messages are different. Order confirmations, transfer status, shipping notices, and warranty correspondence are part of fulfilling your order. You cannot opt out of those while an order is active, because you need them.
8. Data Security
- Encryption in transit: Traffic to and from this site is encrypted using current TLS.
- Payment data: Card details are submitted directly to our payment processor. We do not receive or store full card numbers.
- Access control: Access to customer and regulatory records is limited to personnel whose role requires it.
- Operational security: We apply access controls, authentication requirements, and monitoring appropriate to the sensitivity of what we hold.
No system is perfectly secure, and we will not claim otherwise. What we can commit to is treating this data as sensitive rather than routine.
9. How Long We Keep Information
- Regulatory records: For the periods required by federal law. See Section 3.
- Order and warranty records: For as long as needed to support the product, honor the warranty, and meet tax and accounting obligations.
- Marketing data: Until you opt out, after which we retain only what is necessary to keep you off our lists.
- Analytics data: For a limited period, generally in aggregate or de-identified form.
- Support correspondence: For as long as needed to resolve the matter and handle any related dispute.
10. Your Choices And Rights
- Access: Request a copy of the personal information we hold about you.
- Correction: Ask us to correct information that is inaccurate or incomplete.
- Deletion: Request deletion of your personal information, subject to the regulatory records described in Section 3 and to information we must retain for tax, accounting, or dispute purposes.
- Opt out: Unsubscribe from marketing email or text messages at any time.
- Complaint: Raise a concern with us directly. We would rather hear it than not.
Email contact@echozuludefense.com to make a request. We will verify your identity before acting on a request concerning personal information, because acting on an unverified request is itself a privacy failure.
We do not charge for these requests and we will not degrade your service or pricing for making one.
11. State Privacy Rights
Several states grant residents specific rights over their personal information, including rights of access, correction, deletion, portability, and opt-out of sale, sharing, or targeted advertising. Whether a particular state law applies to a business depends on its size and data practices.
Rather than parse that on your behalf, we extend the rights described in Section 10 to every customer regardless of where you live. If you are a resident of a state granting rights beyond those, contact us and we will honor them to the extent the law requires.
You may designate an authorized agent to submit a request for you. We will ask for proof of that authorization.
12. Age Requirements
This site and our products are intended for adults. Our Terms of Service require purchasers to be at least 21 years of age, or the age of majority in their state if higher.
This site is not directed to children, and we do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact us and we will delete what we lawfully can.
13. Security Incidents
If we become aware of a security incident affecting your personal information, we will investigate, take steps to contain and remediate it, and notify affected individuals and regulators as required by applicable law.
Given what our records associate you with, we will err toward telling you rather than toward saying nothing.
14. Third-Party Sites
This site links to third-party websites and services, including dealers, payment processors, and transfer facilitators. Those sites operate under their own privacy policies, which we do not control. Review them before providing information.
15. Visitors Outside The United States
We operate in the United States, sell only within the United States, and store information here. If you access this site from outside the United States, you are transferring information to the United States, where privacy law differs from that of your location.
16. Changes To This Policy
We may update this policy. Changes take effect when posted, and the “Last updated” date above will be revised. Where a change materially affects how we handle information already collected, we will take reasonable steps to notify you.
Nothing on this page is legal advice.
17. How To Contact Us
Echo Zulu Defense, LLC
3585 Hansen Ave
Sturgis, SD 57785, USA
Privacy requests and general contact: contact@echozuludefense.com
Warranty and RMA: rma@echozuludefense.com
For privacy requests, use the general contact address and include enough detail for us to verify your identity.
