Privacy policy
Last updated: October 12, 2026
This policy explains what Black Shield Supply, a trade name of Oxcart Holdings, LLC, collects when you use our site, how we use it, and the choices you have.
1. What we collect
- Order details: your name, email, phone, shipping and billing addresses, and what you order.
- Date of birth, only when your order includes an age-restricted item such as ammunition, to confirm you're old enough to buy it.
- Payment: you enter your card on a secure payment page run by Authorize.net, the payment gateway our card processor uses. Your card number goes straight to them and never passes through or is stored on our systems. We keep a payment reference, the amount, and your card type and last four digits, so we can match payments to orders and handle refunds. We never keep your full card number or security code (CVV).
- Fraud prevention: at checkout we record your IP address and share it with our payment providers to help spot fraudulent orders. Our bot check (Cloudflare Turnstile) looks at signals from your browser and device, not your card or order details, and sends us only a pass or fail.
- Email alerts you ask for: your email and what you asked to hear about, such as an item coming back in stock or checkout opening.
- Messages you send us, and our replies.
2. Cookies and local storage
- A cart cookie that remembers the items in your cart.
- An encrypted checkout cookie that holds your checkout details for up to two hours while you check out. After your order is placed, it keeps only your order number, order totals and email for the confirmation page, never your date of birth or card details.
- A cookie that remembers you confirmed you're 18 or older, for 30 days.
- Your browser remembers the state and ZIP code you enter for shipping checks, and your platform choice (AR-15, AR-10 or AK).
We don't use advertising trackers or sell ad space.
3. How we use it
- To process, ship and support your order, and to follow age, shipping and tax laws.
- To prevent fraud and protect our customers and store.
- To email you about your order, and about the alerts you asked for.
We don't send marketing email unless you sign up for it.
4. Who we share it with
Only the service providers that help us run the store, and only what each needs:
- Payment: Authorize.net and our card processor, to authorize and charge your card and screen for fraud.
- Bot checks: Cloudflare (Turnstile), at checkout.
- Email: our email providers, to send order emails and to store messages you send us and our replies.
- Shipping: our shipping and fulfillment partners and the carrier get your name, shipping address and phone number, for delivery and for deliveries that need an adult signature.
- Hosting: the companies that host our website and database.
We don't sell or rent your personal information, and we don't share it for advertising.
Legal requests. We don't give customer information to government agencies or anyone else unless the law requires it, for example a valid subpoena, warrant or court order, or unless it's needed to prevent fraud or protect someone's safety.
If our business is ever sold or merged, customer information may transfer to the new owner under this policy.
5. How long we keep it
- Order records are kept as long as we need them for tax, accounting and legal reasons.
- Date of birth is kept with the order for 3 years (the same period we keep sales and tax records), then deleted. If a checkout doesn't finish, the date of birth entered for it is deleted within 2 days.
- Email alert requests end when we send the alert or you ask us to stop.
6. Security
We use encrypted connections, limit who can access customer data, and never handle card numbers ourselves. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects it, as the law requires.
7. Your choices
Wherever you live, you can ask what we hold about you, or ask us to correct or delete it, by emailing support@blackshieldsupply.com. We'll respond within 45 days and may need to confirm your identity first. Some records, such as orders, must be kept for legal and tax reasons.
8. Age requirement
You must be 18 or older to use this site or buy from us, and 21 or older to buy ammunition. If you're under 18, please don't use the site or send us any information. If we find out we've collected information from someone under 18, we'll delete it.
9. Changes
We may update this policy; the date above shows the latest version.