Privacy Policy

Last updated: October 19, 2026

This Privacy Policy describes how AEA Airguns Shop (aeaairguns.shop), operated by Wolfiek Group (Wolfiek Global Partners SL, Pallars 101, 1-1A, 08018 Barcelona, Spain; "we", "us", or "our"), collects, uses, protects, and discloses your personal information when you visit our website, communicate with us, or make a purchase.

For details regarding our use of cookies and tracking technologies, please consult our Cookies Policy.

1. Personal Information We Collect

We collect personal information directly from you, automatically through your device, and via third-party service providers acting on our behalf:

  • Order & Transaction Information: Full name, billing address, shipping address, payment confirmation details, email address, and phone number necessary to process transactions, prevent fraud, and ship merchandise.
  • Account Information: Account credentials, purchase history, saved addresses, and product preferences.
  • Device & Interaction Information: IP address, device type, browser specifications, time zone, interaction events, and session telemetry collected automatically as you browse.
  • Customer Support & AI Communications: Inquiries submitted through our contact form, support tickets, and conversational queries exchanged with our on-site shopping assistant.

2. How We Use Your Information and Legal Bases (GDPR / UK GDPR)

We process personal data under the following legal bases pursuant to Article 6 of the General Data Protection Regulation (GDPR) and the UK GDPR:

  • Performance of a Contract: To process payments, fulfill orders, deliver airguns and accessories, issue order confirmations, and handle returns.
  • Legitimate Interests: To maintain website security, prevent fraudulent transactions, analyze store performance, and improve product offerings.
  • Consent: Where you provide affirmative consent to receive direct marketing newsletters or initialize non-essential tracking technologies.
  • Compliance with Legal Obligations: To adhere to European, UK, and national tax, accounting, customs, and statutory record-keeping regulations.

3. Third-Party Service Providers and AI Disclosures

We share personal data strictly with authorized third-party processors who perform operational services on our behalf:

  • E-Commerce Platform: Hosted on Shopify Inc., which processes transaction databases and secure checkout infrastructure.
  • AI Shopping Guidance (Dialog SAS): We offer an on-site conversational assistant powered by Dialog SAS (France), hosted on European Union infrastructure, to assist with customer navigation and product recommendations. Dialog SAS processes session queries solely to provide interactive answers during your visit.
  • Logistics and Payment Partners: Carrier networks (e.g., DHL, UPS, FedEx) and certified payment processors (e.g., Stripe, PayPal) necessary to complete order fulfillment.

4. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA) or the United Kingdom, we ensure appropriate safeguards are maintained. Such transfers rely on adequacy decisions, the EU-U.S. Data Privacy Framework (and UK Extension), European Commission Standard Contractual Clauses (SCCs), or the UK International Data Transfer Agreement (IDTA).

5. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and tax accounting requirements (typically 5 to 6 years for transactional records under Spanish law), resolve disputes, and enforce our agreements.

6. Your Statutory Privacy Rights

Depending on your location, you have statutory rights concerning your personal information:

European Union and United Kingdom Residents (GDPR / UK GDPR)

You have the right to access, rectify, or request erasure of your personal data; request restriction of processing; object to processing; and obtain data portability. You also have the right to lodge a complaint with your local supervisory authority (e.g., the Agencia Española de Protección de Datos - AEPD in Spain, or the Information Commissioner's Office - ICO in the UK).

United States Residents (State Privacy Laws)

Residents of California (under CCPA/CPRA), Colorado, Connecticut, Virginia, and other applicable states have specific rights:

  • Right to Know & Access: Request disclosure of categories and specific pieces of personal information collected.
  • Right to Delete & Correct: Request correction of inaccurate information or deletion of collected data, subject to legal exceptions.
  • Opt-Out of Sale / Sharing: We do not sell personal data for monetary compensation. To opt out of cross-context behavioral tracking and targeted advertising, visit our Your Privacy Choices page.
  • Global Privacy Control (GPC): We honor GPC signals. When detected, your browser session is automatically opted out of targeted advertising.
  • Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

7. Security Safeguards

We employ administrative, technical, and physical measures designed to protect personal data from accidental loss, unauthorized access, alteration, and disclosure. Payment data is processed in compliance with PCI-DSS standards.

8. Contact Us

To exercise any of your rights or submit questions regarding this Privacy Policy, please reach out through our contact form or write to: Wolfiek Group, Wolfiek Global Partners SL, Pallars 101, 1-1A, 08018 Barcelona, Spain.

Back to top