Privacy Policy
Last updated: 10 June 2026
OP Tactical UK is committed to protecting your privacy. This policy sets out, in plain English, what personal data we collect, how we use it, who we share it with, and the rights you have over it.
What we collect
Your contact, order, account and enquiry details, plus basic technical data about your visit.
How we use it
To fulfil your orders and bookings, run the club, keep the site secure, and market to you.
Who we share with
Trusted providers such as our payment, email, analytics and hosting partners. We never sell your data.
Your rights
Access, correct, delete or object to the use of your data.
1. Who we are
This Privacy Policy explains how OP Tactical UK (“we”, “us”, “our”) collects, uses, shares and protects your personal information when you use op-tac.co.uk (the “Site”), make a purchase or booking, sign up for membership, contact us, or subscribe to our communications.
OP Tactical UK is operated by Robert Blakemore, trading as OP Tactical UK (a sole trader), who is the data controller of your personal data.
- Address: Pentagon House, Bucknall New Road, Hanley, Stoke-on-Trent, ST1 2BA
- Email: enquiry@op-tac.co.uk
- Phone: 07510 127056
We process personal data in accordance with the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
2. The personal data we collect
Depending on how you use the Site, we may collect:
- Identity & contact data — your name, billing address, delivery address, email address and telephone number.
- Account data — your username and a securely hashed password, plus your order and booking history if you create an account.
- Order & booking data — details of the events, memberships, site hire and products you buy or enquire about, including order numbers, amounts paid and any options you select at checkout. We do not store your full card details — payments are handled by our payment providers (see section 6).
- Membership & age-verification data — if you apply for club membership or UKARA registration, we collect your date of birth, a passport-style photograph and two forms of identification, to verify your identity and eligibility under the Violent Crime Reduction Act 2006.
- Communications & enquiry data — the content of messages you send us via our contact form, newsletter sign-up, email, phone or social media.
- Marketing preferences — your preferences for receiving marketing from us and your subscription status.
- Technical & usage data — your IP address, browser and device information, and how you interact with the Site, collected automatically using cookies and similar technologies (see section 5).
We do not intentionally collect special-category (sensitive) data. Please do not send us such information unless we specifically request it.
3. How we collect your data
- Directly from you — when you place an order, book an event, register for membership, create an account, complete a form, subscribe to our newsletter, or contact us.
- Automatically — through cookies, server logs and similar technologies as you use the Site.
- From third parties — for example our payment providers (transaction confirmations), Google (where you find or review us), and our partner retailer Staffordshire Militaria, where you may complete a membership/UKARA application in person.
4. How we use your data and our lawful bases
We use your personal data for the following purposes, each with a lawful basis under the UK GDPR:
| Purpose | Lawful basis |
|---|---|
| Process and fulfil your orders, bookings, memberships and site hire, take payment and send confirmations | Performance of a contract |
| Manage your account and provide customer support | Contract / Legitimate interests |
| Verify age and eligibility for UKARA registration and certain purchases | Legal obligation / Legitimate interests |
| Respond to your enquiries and communicate about your orders and bookings | Contract / Legitimate interests |
| Send you marketing emails and newsletters about events, offers and news | Consent |
| Detect, prevent and investigate fraud, misuse and security threats (incl. your IP address, reCAPTCHA and two-factor authentication) | Legitimate interests / Legal obligation |
| Measure and improve the Site and understand how it is used | Consent (analytics) / Legitimate interests |
| Show and measure our advertising, including remarketing | Consent (advertising cookies) |
| Comply with our legal, tax and accounting obligations | Legal obligation |
Where we rely on legitimate interests, these include running and growing our business, keeping our Site and customers secure, and improving our products and services. We always balance these against your rights.
5. Cookies and tracking technologies
We use cookies and similar technologies to make the Site work, remember your preferences, understand how it is used, and support our marketing. These fall into the following categories:
- Strictly necessary — required for core functions such as your shopping cart, checkout, secure login and caching (WooCommerce, our hosting, Cloudflare and LiteSpeed Cache). These do not require consent.
- Analytics — Google Analytics 4 (via Google Site Kit) helps us understand how visitors use the Site.
- Advertising — Google Ads tags, and the Meta Pixel (Facebook and Instagram), let us measure conversions and show you relevant ads, including remarketing. The Meta Pixel only loads where you have consented to advertising cookies.
- Security — Google reCAPTCHA protects our forms from spam and abuse; this collects device and usage data and is subject to Google’s Privacy Policy and Terms.
Non-essential cookies (analytics and advertising) are set only where you have given consent, and you can change or withdraw your choices at any time. You can also control cookies through your browser settings.
6. Who we share your data with
We share personal data only where necessary, with the following categories of recipient, who act as our processors or as independent controllers. We do not sell your personal data.
- Payment providers — card and wallet payments are handled securely by WooPayments (Automattic, powered by Stripe), Stripe (including Apple Pay and Google Pay), and PayPal. We do not receive or store your full card number.
- Email & marketing — Brevo (Sendinblue GmbH), used to manage our newsletter and marketing emails.
- Analytics, advertising & site services (Google) — Google Analytics 4, Google Ads, Google Site Kit, reCAPTCHA, Google Maps and Google Fonts, and the display of Google reviews.
- Advertising & social media (Meta) — Meta Platforms Ireland Ltd (Facebook and Instagram). We use the Meta Pixel to measure our advertising and reach relevant audiences, and we run our pages and advertising on these platforms.
- Membership / age verification — the UK Airsoft Retailers Association (UKARA), and our partner retailer Staffordshire Militaria where you register in person.
- Hosting & security — our website hosting provider, Cloudflare (content delivery and security) and miniOrange (two-factor authentication).
- Professional advisers & authorities — accountants, and law-enforcement or regulators where we are legally required to disclose information, or to protect our legal rights.
7. International data transfers
Some of our providers (for example Google, Stripe/Automattic, Brevo and Meta) may process data outside the UK. Where personal data is transferred outside the UK, we ensure an appropriate safeguard is in place — such as a UK adequacy decision, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses — so your data continues to receive an equivalent level of protection.
8. How long we keep your data
We keep personal data only for as long as necessary:
- Order, booking and transaction records — retained for 6 years to meet HMRC and accounting requirements.
- Account data — kept while your account is active, and deleted on request or after a period of inactivity.
- Membership / UKARA identity documents — held on paper only, kept for the duration of your membership and for 12 months afterwards, then securely destroyed.
- Marketing data — kept until you unsubscribe or withdraw consent.
- Enquiry / contact data — typically kept for up to 2 years after our last contact.
When data is no longer needed, we securely delete or anonymise it.
9. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data in certain circumstances;
- Restrict our processing in certain circumstances;
- Object to processing based on legitimate interests, and to direct marketing at any time;
- Data portability — receive certain data in a portable format;
- Withdraw consent at any time where we rely on it.
To exercise any of these rights, contact us at enquiry@op-tac.co.uk. We will respond within 1 week.
10. Marketing communications
If you have consented, we may send you emails about our events, offers and news via Brevo. You can opt out at any time by clicking “unsubscribe” in any marketing email or by contacting us. We will still send essential service messages, such as order and booking confirmations, where needed to fulfil our contract with you.
11. Data security
We use appropriate technical and organisational measures to protect your personal data, including secure (HTTPS) connections, encrypted payment processing by our providers, access controls and two-factor authentication for accounts. No method of transmission over the internet is completely secure, but we work to protect your data and have procedures to deal with any suspected breach.
12. Children and young people
Airsoft and club membership may involve participants under 18. Where a participant is under 18, a parent or guardian must provide consent and the relevant details on their behalf, and certain activities have minimum-age requirements. We do not knowingly collect personal data directly from children online without appropriate parental involvement. If you believe a child has provided us with personal data, please contact us and we will delete it.
13. Third-party links
The Site may contain links to third-party websites, such as UKARA, Staffordshire Militaria and our social media pages. We are not responsible for the privacy practices or content of those sites, and we encourage you to read their privacy policies.
14. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational or regulatory reasons. The “Last updated” date at the top of this page shows when it was last revised. Please check back periodically.
Questions about your privacy?
If you have any questions about this policy or how we handle your personal data, or you’d like to make a request, get in touch and we’ll be happy to help.