Privacy Policy

Last updated: 11 October 2026

1. Who we are

Hidden Supplies Ltd, trading as Hidden Airsoft Ltd (“Hidden Airsoft”, “we”, “us” or “our”), respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit our website, make a purchase, create an account, contact us or otherwise interact with our business.

Our details

Business name: Hidden Supplies Ltd, trading as Hidden Airsoft Ltd
Address: Newland Croft, Watton Road, Larling, Norfolk, NR16 2RA, United Kingdom
Email: sales@hiddenairsoft.co.uk
Website: https://www.hiddenairsoft.co.uk

For the purposes of applicable UK data protection legislation, we act as the data controller for the personal information we determine the purposes and means of processing.

Please read this policy carefully. It explains your privacy rights and how you can contact us if you have any questions or concerns.

2. What personal information do we collect?

The information we collect depends on how you interact with Hidden Airsoft and which website features you use.

Information you provide to us

We may collect the following information when you place an order, create an account, contact us or otherwise interact with our website:

  • Identity information: Your name and, where relevant, other information needed to verify your identity or eligibility for a particular service.

  • Contact information: Your email address, telephone number and billing or delivery address.

  • Order information: Products purchased, order numbers, order history, delivery preferences, returns, refunds and customer service correspondence.

  • Account information: Your username, account preferences and authentication information, such as securely stored password credentials, where accounts are available.

  • Payment information: Payment status, transaction references and related information needed to process orders, refunds and resolve payment queries.

  • Communications: Information you provide when emailing us, submitting an enquiry, providing feedback or contacting customer support.

  • Marketing preferences: Your choices about receiving promotional communications.

Please do not send us payment card details or other sensitive information by ordinary email unless we have specifically provided a suitable secure method for doing so.

Information collected automatically

When you visit our website, certain technical information may be collected automatically, depending on the website services and technologies in use.

This may include:

  • Internet Protocol (IP) address.

  • Browser type, operating system and device information.

  • Pages visited, links clicked and interactions with website features.

  • Dates and times of visits.

  • Referring website addresses and basic diagnostic information.

  • Cookie identifiers and similar technical identifiers, where applicable.

We use this information where necessary to operate the website, maintain security, diagnose technical issues and, where permitted, understand website performance.

Information received from third parties

We may receive relevant information from third-party service providers involved in operating our business, such as payment providers, delivery companies, fraud-prevention services and website platforms.

For example, a payment provider may confirm whether a transaction has been authorised, completed or refunded.

We will use information received from third parties in accordance with applicable law and the purposes explained in this policy.

3. How do we use your personal information?

We use personal information for legitimate business purposes and only where we have an appropriate lawful basis.

Depending on the circumstances, our purposes may include the following.

PurposeExamples of information usedProcessing ordersIdentity, contact, delivery and order informationTaking payments and issuing refundsTransaction references, payment status and relevant billing informationManaging customer accountsAccount details and authentication informationDelivering customer supportContact details and correspondenceMaintaining website securityTechnical logs, device information and relevant security signalsImproving our websiteWebsite usage and performance information, where permittedSending marketing communicationsContact details and marketing preferences, where permittedPreventing fraud and misuseRelevant transaction, technical and security informationMeeting legal obligationsInformation required for accounting, tax, regulatory or legal purposesHandling returns and disputesOrder details, communications and relevant transaction records

We will not use your personal information for a materially different purpose without providing any additional information or obtaining consent where required by law.

4. What is our lawful basis for processing your information?

Under the UK GDPR, we must have a lawful basis for processing personal information.

Depending on the activity, we may rely on the following bases:

Contract: Where processing is necessary to enter into or perform a contract with you, such as processing an order, arranging delivery or managing a refund.

Legal obligation: Where processing is necessary to comply with legal requirements, including applicable accounting, tax and record-keeping obligations.

Legitimate interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. These interests may include website security, fraud prevention, responding to enquiries and improving our services.

Consent: Where you have given valid consent, such as for optional cookies or certain marketing activities where consent is required.

Vital interests or other lawful grounds: Where applicable law permits processing under another relevant lawful basis.

Where we rely on legitimate interests, the particular interests will depend on the activity concerned. Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

5. How do we share personal information?

We do not sell personal information to third parties.

We may share relevant information with the following categories of recipients when necessary for the purposes described in this policy:

Payment providers

We may use payment providers, including PayPal or Stripe where enabled, to process payments and refunds. These providers may process payment information in accordance with their own privacy notices.

PayPal privacy information: https://www.paypal.com/uk/legalhub/privacy-full

Stripe privacy information: https://stripe.com/gb/privacy

Delivery and fulfilment providers

We may share your name, delivery address, contact details and relevant order information with delivery companies or fulfilment partners to deliver your purchases and manage delivery issues.

Website and technology providers

Our website hosting provider, ecommerce platform, security providers and technical support providers may process information on our behalf where necessary to operate and maintain our website.

Analytics and advertising providers

Where we use these services and the relevant legal requirements are met, we may share limited technical or usage information with analytics or advertising providers to measure website performance or marketing effectiveness.

Non-essential technologies requiring consent will only be used after valid consent has been obtained.

Professional advisers and authorities

We may disclose information to professional advisers, insurers, regulators, law enforcement agencies or other authorities where necessary and lawful, including to establish, exercise or defend legal claims.

Business transfers

If our business is sold, reorganised or transferred, relevant personal information may be disclosed to prospective or actual purchasers or other parties involved, subject to appropriate safeguards and applicable law.

Third parties that process personal information on our behalf must be subject to appropriate contractual and data protection arrangements. Independent third-party providers may also act as separate data controllers for their own processing.

6. Cookies and similar technologies

Our website may use cookies and similar technologies, including local storage, tracking pixels and scripts.

These technologies may be used to support essential website functions, maintain shopping baskets, remember consent preferences, analyse website usage or support advertising, depending on the services in operation.

Where required by law, we will obtain your consent before storing or accessing information on your device for non-essential purposes.

You can manage your optional cookie preferences through our cookie consent tool, where available.

For more information about the cookies we use, their purposes and how to manage your choices, please read our Cookie Policy.

7. How long do we keep your information?

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, tax, regulatory and reporting requirements.

Retention periods depend on the type of information and the reason it is held.

For example:

  • Order and accounting records: Retained for the periods required by applicable tax, accounting and other legal obligations.

  • Customer accounts: Retained while your account remains active and for an appropriate period afterwards where necessary.

  • Customer service correspondence: Retained for as long as needed to respond to enquiries, manage disputes and maintain appropriate business records.

  • Marketing information: Retained while you remain subscribed or otherwise eligible to receive the relevant communications, subject to applicable law and suppression requirements.

  • Technical and security logs: Retained for a period appropriate to security, troubleshooting and operational needs.

  • Cookie consent records: Retained as necessary to record and demonstrate your preferences for an appropriate period.

When information is no longer required, we will securely delete it, anonymise it or otherwise dispose of it appropriately, unless we are legally required or permitted to retain it for longer.

8. How do we protect your information?

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration, disclosure or misuse.

Depending on the services involved, these measures may include access controls, secure service providers, appropriate account protections and technical safeguards.

However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.

You should use a strong, unique password for any account you create and contact us promptly if you believe your account or personal information has been compromised.

9. International transfers

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that the transfer complies with applicable data protection law. Depending on the destination and circumstances, this may involve an applicable adequacy regulation or decision, appropriate safeguards such as an approved international data transfer agreement, or another lawful transfer mechanism.

You may contact us for further information about relevant international transfers and safeguards where applicable.

10. Your privacy rights

Under applicable UK data protection law, you may have the right to:

  • Access: Request a copy of the personal information we hold about you.

  • Rectification: Ask us to correct inaccurate or incomplete information.

  • Erasure: Ask us to delete personal information in certain circumstances.

  • Restriction: Ask us to restrict the processing of your information in certain circumstances.

  • Data portability: Receive certain information you have provided to us in a structured, commonly used and machine-readable format, or ask us to transfer it where the legal conditions apply.

  • Object: Object to processing based on legitimate interests in certain circumstances.

  • Withdraw consent: Withdraw consent at any time where processing is based on consent.

  • Object to direct marketing: Object at any time to the use of your personal information for direct marketing, including related profiling.

These rights are subject to legal conditions and exemptions. They do not apply in exactly the same way in every situation.

To exercise a right, email sales@hiddenairsoft.co.uk and explain your request. We may need to verify your identity before responding.

We will respond within the period required by applicable law. Requests are generally handled without charge, although the law permits charges or refusal in certain exceptional circumstances, such as manifestly unfounded or excessive requests.

You also have the right to complain to the UK Information Commissioner's Office (ICO) if you are concerned about how we handle your personal information.

ICO website: https://ico.org.uk/

We encourage you to contact us first if you have a concern so that we can try to resolve it.

11. Marketing communications

We may send you marketing communications about our products, offers or services where we are legally permitted to do so.

Where consent is required, we will ask for it before sending marketing communications. In other circumstances, we may rely on a lawful marketing route where its conditions are satisfied.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the message or by contacting us at sales@hiddenairsoft.co.uk.

Opting out of marketing will not prevent us from sending essential communications about your orders, account, payments, deliveries, refunds or other matters relating to services you have requested.

We will respect your marketing preferences and maintain suppression information where necessary to ensure that you are not contacted again for marketing after opting out.

12. Children's privacy and age-restricted products

Our website and products must be used in accordance with applicable age restrictions and laws.

We do not knowingly collect personal information from children where doing so would be unlawful. If we become aware that we have collected personal information unlawfully from a child, we will take appropriate steps to address the situation.

If you believe a child has provided us with personal information in circumstances where this should not have occurred, please contact us at sales@hiddenairsoft.co.uk.

Any age restrictions applicable to particular products or services must be followed independently of this Privacy Policy.

13. Links to third-party websites

Our website may contain links to external websites, services or social media platforms.

Those websites are operated by third parties and are subject to their own privacy policies and practices. We are not responsible for the privacy practices of websites that we do not control.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

14. Automated decision-making

We may use automated tools provided by our website, payment or security providers to assist with tasks such as transaction processing and fraud prevention.

We will provide any additional information required by law if we make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on you.

If such processing applies, we will explain the relevant information and your rights as required by applicable law.

15. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our business, website functionality, service providers, data processing activities or legal requirements.

The latest version will be published on our website with its updated date.

If a change materially affects how we use personal information, we will take any notification or other steps required by law.

We encourage you to review this policy periodically.

16. Contact us

If you have questions about this Privacy Policy, wish to exercise your privacy rights or have a concern about our handling of personal information, please contact us:

Hidden Supplies Ltd, trading as Hidden Airsoft Ltd

Newland Croft
Watton Road
Larling
Norfolk
NR16 2RA
United Kingdom

Email: sales@hiddenairsoft.co.uk

Website: https://www.hiddenairsoft.co.uk

If you are dissatisfied with our response, you may contact the Information Commissioner's Office at https://ico.org.uk/.