Effective Date:16/11/2025
Welcome to surplus-tactical.com. We're FPFM SIA (a private limited company / Sabiedrība ar ierobežotu atbildību, registered in Latvia, Komercreģistrs No. 40203710743), with registered office at Saulgožu iela 4 - 17, LV-1055 Rīga, Latvia, proudly serving customers across Canada.
We're committed to protecting your privacy and being transparent about how we handle your personal information. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights under Canadian privacy law.
By using our website or placing an order, you agree to this Privacy Policy.
1. Information We Collect
We collect the following types of information when you visit or purchase from our website:
A. Personal Information You Provide
-
Contact Information: Name, email address, phone number, billing and shipping addresses
-
Payment Information: Credit/debit card details, billing information (processed securely by our payment provider)
-
Account Information: Username, password, order history (if you create an account)
-
Communications: Messages you send us via email, chat, or contact forms
B. Information Collected Automatically
-
Technical Data: IP address, browser type and version, operating system, device information
-
Usage Data: Pages visited, time spent on site, links clicked, referral sources
-
Cookies and Tracking: See Section 8 for detailed cookie information
C. Information from Third Parties
-
Payment Processors: Transaction confirmation and fraud prevention data
-
Shipping Carriers: Delivery status and tracking information
-
Analytics Providers: Aggregated website usage statistics
2. How We Use Your Information
We use your personal information for the following purposes:
| Purpose |
Legal Basis (PIPEDA) |
| Process and fulfill your orders |
Contract performance |
| Communicate about orders, shipping, and customer service |
Contract performance |
| Process payments and prevent fraud |
Contract performance & legal obligation |
| Send marketing emails (only with consent) |
Consent |
| Improve our website and user experience |
Legitimate interest |
| Comply with tax, accounting, and legal requirements |
Legal obligation |
| Respond to legal requests or prevent illegal activity |
Legal obligation |
Marketing Communications: We will only send you promotional emails if you opt in during checkout or account creation. You can unsubscribe anytime using the link in every email or by contacting us at contact@surplus-tactical.com.
3. Who We Share Your Information With
We do not sell your personal information to third parties. However, we share your data with the following trusted partners to operate our business:
Service Providers
| Provider Type |
Location |
Data Shared |
Purpose |
| Payment processors (e.g., Stripe, PayPal) |
Canada/USA |
Payment details, billing address |
Process transactions securely |
| International fulfillment partners |
Europe/Asia |
Name, shipping address, phone, order details |
Process and ship orders |
| Shipping carriers |
Canada/International |
Name, shipping address, phone |
Deliver packages |
| Email service providers |
USA/Europe |
Email address, name |
Send order confirmations and marketing (with consent) |
| Analytics providers (e.g., Google Analytics) |
USA |
Anonymized usage data |
Improve website performance |
| Cloud hosting and IT security |
Latvia/EU |
Technical data |
Maintain website and data security |
Important: Your payment information (credit card details) is processed exclusively by certified, PCI-DSS compliant payment processors in Canada or the USA. We never store your full payment card information, and it is never shared with fulfillment or shipping partners.
Legal Authorities
We may disclose your information if required by law or to:
- Comply with legal processes (subpoenas, warrants, court orders)
- Protect our rights, property, or safety
- Prevent fraud or illegal activity
- Cooperate with law enforcement or regulatory authorities
Business Transfers
In the event of a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the new owner. You will be notified via email and/or a prominent notice on our website.
4. International Data Transfers
As an international business based in Latvia and serving Canadian customers, your personal information may be transferred to and processed in countries outside of Canada, including Latvia, other European Union countries, the United States, and Asia.
Where Your Data Goes
| Location |
Data Transferred |
Purpose |
Protection Level |
| Latvia/EU |
All data types |
Server hosting, business operations |
EU GDPR (adequate protection) |
| USA |
Analytics, email data |
Website analytics, marketing tools |
Standard contractual clauses |
| Asia |
Shipping information only |
Order fulfillment and delivery |
Standard contractual clauses |
Data Protection Standards
Different countries have different privacy laws. Canada recognizes the European Union as providing adequate data protection. For transfers to the USA and Asia, we use:
-
Standard contractual clauses approved by Canadian authorities
-
Contractual requirements for our partners to implement appropriate security measures
-
Encryption and secure transmission protocols
-
Limited data sharing (only information necessary for service delivery)
Your shipping information (name, address, phone number, and order details) is transmitted to our international fulfillment partners for order processing and delivery. These partners are contractually required to:
- Use your information only for fulfilling your order
- Implement appropriate security safeguards
- Not use your data for marketing or other purposes
- Delete your information once the order is complete
Your consent: By placing an order with us, you consent to these international data transfers. If you do not consent, we will be unable to process and deliver your order. You can withdraw consent at any time by contacting us, though this may prevent us from fulfilling pending orders.
Your Rights
You have the right to:
- Request details about where your data is transferred
- Request a copy of the safeguards we use for international transfers
- Withdraw consent (though this may affect our ability to fulfill orders)
- File a complaint with the Privacy Commissioner of Canada if you have concerns
5. Data Retention – How Long We Keep Your Information
| Data Type |
Retention Period |
Reason |
| Order and transaction records |
7 years |
Canadian tax law (CRA requirement) |
| Account information |
Until account deletion or 3 years of inactivity
|
Service provision |
| Marketing consent records |
Until you unsubscribe or 3 years of inactivity
|
Compliance with anti-spam law (CASL) |
| Customer service communications |
2 years |
Quality assurance and dispute resolution |
| Website analytics (cookies) |
26 months maximum |
PIPEDA guidance |
| Payment information |
Not stored by us – processed by payment provider only |
Security |
After these periods, data is securely deleted or anonymized so it can no longer identify you.
6. Your Privacy Rights Under Canadian Law
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, you have the following rights:
Your Rights:
| Right |
What It Means |
How to Exercise |
| Access |
Request a copy of the personal information we hold about you |
Email contact@surplus-tactical.com
|
| Correction |
Request corrections to inaccurate or incomplete information |
Email or call us with details |
| Deletion |
Request deletion of your data (subject to legal retention requirements) |
Submit deletion request via email |
| Withdraw Consent |
Withdraw consent for marketing, cookies, or certain data processing |
Unsubscribe link or email us |
| Data Portability |
Request your data in a structured, commonly used format |
Email us your request |
| Object to Processing |
Object to processing based on legitimate interests |
Explain your objection via email |
| Complain |
File a complaint with the Privacy Commissioner of Canada |
See contact info below |
How to Exercise Your Rights
📧 Email: contact@surplus-tactical.com
📞 Phone: +1 416 477 5214
📍 Mail: FPFM SIA, Saulgožu iela 4 - 17, LV-1055 Rīga, Latvia
Response Time: We will respond to your request within 30 days as required by PIPEDA. If we need more time, we'll let you know and explain why.
Verification: We may ask you to verify your identity before fulfilling your request to protect your privacy and prevent unauthorized access.
Limits on Deletion: We may be unable to delete certain data if we're legally required to retain it (e.g., tax records, fraud prevention, pending legal matters).
Filing a Complaint
If you're not satisfied with our response to your privacy concern, you can file a complaint with:
Office of the Privacy Commissioner of Canada
🌐 Website: https://www.priv.gc.ca/en/report-a-concern/
📞 Toll-free: 1-800-282-1376
📧 Email: info@priv.gc.ca
7. Children's Privacy
Our website and services are not intended for children under 18 years of age. We do not knowingly collect personal information from minors without parental consent.
If you're a parent or guardian and believe your child has provided us with personal information, please contact us immediately at contact@surplus-tactical.com and we will delete it promptly.
8. Cookies and Tracking Technologies 🍪
What Are Cookies?
Cookies are small text files stored on your device when you visit our website. They help us improve your browsing experience, remember your preferences, and understand how you use our site.
Types of Cookies We Use
| Cookie Type |
Purpose |
Examples |
Consent Required? |
Duration |
| Strictly Necessary |
Essential for site functionality (shopping cart, login, security) |
Session cookies, authentication |
❌ No |
Session or up to 1 year |
| Performance/Analytics |
Understand site usage and improve performance |
Google Analytics |
✅ Yes |
Up to 26 months |
| Marketing/Advertising |
Show relevant ads and measure campaign effectiveness |
Google Ads, Facebook Pixel |
✅ Yes |
Up to 26 months |
| Functional |
Remember your preferences (language, region) |
Preference cookies |
✅ Yes |
Up to 1 year |
Managing Your Cookie Preferences
When you first visit our site, you'll see a cookie banner with the following options:
- ✅ Accept All – Allow all cookies (necessary, analytics, and marketing)
- ⚙️ Customize – Choose which non-essential cookies to accept
- ❌ Reject Non-Essential – Only strictly necessary cookies will be used
You can change your cookie preferences anytime by:
- Clicking the "Cookie Settings" link in our website footer
- Adjusting settings in your browser (may affect site functionality)
- Using browser extensions or privacy tools
Browser Settings:
Most browsers allow you to refuse or delete cookies. Consult your browser's help section for instructions. Note that disabling cookies may limit certain site features.
Third-Party Cookies and Tracking
We use the following third-party services that may place cookies on your device:
Google Analytics (USA)
Google Ads (USA)
-
Purpose: Display relevant advertisements and measure ad performance
-
Data Collected: Ad clicks, conversions, browsing behavior
-
Opt-Out: https://adssettings.google.com
Facebook Pixel (USA)
Important: These third-party services are governed by their own privacy policies. They may use the data collected for their own business purposes, including improving their products and building user profiles. We recommend reviewing their privacy policies:
9. Data Security
We take the security of your personal information seriously and implement industry-standard measures to protect it:
Technical Safeguards:
-
SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted
-
Secure Payment Processing: PCI-DSS compliant payment processors; we do not store full credit card details
-
Encrypted Databases: Personal information is stored in encrypted databases
-
Firewall Protection: Network security to prevent unauthorized access
Organizational Safeguards:
-
Access Controls: Limited employee access to personal data on a need-to-know basis
-
Employee Training: Staff trained on privacy and security best practices
-
Vendor Management: All third-party providers sign data protection agreements
-
Regular Security Audits: Ongoing monitoring for vulnerabilities and threats
Data Breach Response:
In the unlikely event of a data breach that poses a real risk of significant harm to you, we will:
- Investigate and contain the breach immediately
- Notify affected individuals as soon as feasible (via email or website notice)
- Notify the Privacy Commissioner of Canada as required by PIPEDA
- Provide information about what happened, what data was affected, and steps you can take to protect yourself
Your Responsibility:
While we implement strong security measures, no system is 100% secure. Please help protect your account by:
- Using a strong, unique password
- Not sharing your login credentials
- Logging out after using shared devices
- Reporting suspicious activity immediately
10. Third-Party Links
Our website may contain links to third-party websites, including:
- Social media platforms (Facebook, Instagram, Twitter)
- Payment processors
- Product manufacturers or suppliers
- Shipping carriers for tracking
We are not responsible for the privacy practices of these external sites. Each third-party website has its own privacy policy, and we encourage you to review them before providing any personal information.
Clicking on third-party links may allow those sites to collect or share data about you. We do not control these third-party sites and are not liable for their content or practices.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes in our business practices or services
- New legal or regulatory requirements
- Technological developments
- Feedback from customers or regulators
How We Notify You of Changes:
-
Minor Changes: Updated "Effective Date" at the top of this page
-
Material Changes: Email notification (if you have an account or newsletter subscription) and/or prominent notice on our homepage
We encourage you to review this policy periodically. Your continued use of our website after changes are posted constitutes acceptance of the updated policy.
Last Updated: 16/11/2025
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information:
FPFM SIA – Surplus Tactical
📧 Email: contact@surplus-tactical.com
📞 Phone: +1 416 477 5214 (Canadian support line)
📍 Registered Address: Saulgožu iela 4 - 17, LV-1055 Rīga, Latvia
Customer Support Hours: Monday–Friday, 9:00 AM – 6:00 PM EST
For Privacy Complaints:
If you're not satisfied with our response to your privacy concern, you can contact:
Office of the Privacy Commissioner of Canada
🌐 https://www.priv.gc.ca
📞 1-800-282-1376
📧 info@priv.gc.ca
Optics & Night Vision