Privacy policy

Last updated on December 5, 2024

Bullet Force, operated by Printful, Inc. (“we,” “our,” “us,” or “Printful”), respects your privacy and is fully committed to protecting your personal data. We handle your data in line with data privacy laws. This Privacy Policy explains how we collect, use, and process your personal data when you use Bullet Force’s website (www.printful.com or bulletforce.com if applicable), mobile apps, or print-on-demand services (together, the “Services”). By using our Services, you agree to the terms of this Privacy Policy.

If you live in the United Kingdom or the European Economic Area, please see the Additional Disclosure for European Residents below.
If you are a California resident, please see the Additional Disclosures for California Residents below.
If you live in Colorado, Connecticut, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, Virginia, or any other state with similar privacy laws, please see the Additional Disclosures for Residents of those states below.

We do not knowingly collect or keep personal information from anyone under 18 years old. If you are under 18, please do not use our Services. If you are under 18 and have used our Services, contact us at bulletxforce2024@gmail.com so we can delete your information.

1. Background

Printful provides Services to both business customers and end users, including the Bullet Force brand.

• If you use Bullet Force’s Services for personal use only, you are a “User.” Under data protection laws, we are the “data controller” responsible for your personal data.

• If you use Bullet Force’s Services to fulfill orders and deliver products to others, you are a “Merchant.” In this case, we may be the data controller for your own contact and payment info, but when we process data to fulfill your customers’ orders, we act as a “data processor” on your behalf, following our Data Processing Terms.

The term Data Protection Law(s) refers to all applicable privacy laws such as GDPR (EU and UK), California Consumer Privacy Act, and similar laws in Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia.

2. Information We Collect About Users and Merchants and How We Use It

The personal data we collect depends on how you use Bullet Force’s Services. The categories include:

• Identifiers: Your name, postal and shipping address, email, phone number

• Payment Information: Billing details and partial payment card numbers

• Commercial Information: What services you have bought or looked at, your preferences related to Bullet Force products

• Device and Unique Identifiers: IP address, device and browser info, referring pages, timestamps, cookies

• Geolocation Data: Approximate location based on your IP address

• Audio Information: Recorded phone calls involving Bullet Force or Printful representatives, as allowed by law

• Government Issued Identification: Images and data on ID cards or documents you provide

• Content: Communications with Bullet Force, social media profiles, images, videos, surveys, comments, reviews, testimonials

3. How We Collect Your Data

We collect your personal data in various ways:

• Directly from you: When you buy Bullet Force products, create an account, contact us, respond to surveys, participate in contests, apply for jobs, subscribe to newsletters, or otherwise communicate with us.

• Using tracking technologies: When you visit bulletforce.com or related websites, use our Services, open or click our emails, or interact with our ads, we or our partners automatically collect info via cookies and similar technologies. (See our cookies policy for details.)

• From Merchants: We receive data from Merchants like Bullet Force when providing Services on their behalf.

• From social media: When you interact with Bullet Force on Instagram (@bullet.force_) or other platforms, we collect the info you provide there.

• From other sources: We may get info from analytics providers, marketing services, fraud prevention services, vendors, or public sources.

4. How We Use Your Data

We use your data for the following purposes related to Bullet Force:

• Providing Services: To fulfill your orders for Bullet Force products, maintain and improve the Services, confirm your identity, contact you, provide support (chat, blog comments), manage your account, and bill you.

  • We process Identifiers, Payment Information, and Commercial Information for this.

• Legal Obligations: To comply with laws and sanctions regulations, verify users are not on restricted lists, enforce rights, and defend legal claims.

• Consent-Based Uses: If you opt in, we use your data to send newsletters, promotions, and other communications about Bullet Force products and services.

  • We process your Identifiers (like your email).

  • We do not market directly to your customers if you are a Merchant.

  • You can unsubscribe anytime (see Your Choices below).

• Analytics and Personalization: To research and improve Bullet Force’s Services, understand your interactions, personalize your experience, and offer recommendations. Location info helps with localized content, delivery, and marketing.

  • We process Device and Unique Identifiers for these purposes.

• Communications: To respond to your requests and feedback, hold meetings with Merchants, and provide customer service. Calls and chats may be recorded for quality assurance.

  • Recordings are kept as long as you have an account or up to 12 months otherwise.

  • We process Identifiers, Device and Unique Identifiers, and Content.

• Security and Fraud Prevention: To detect and prevent fraud, illegal activities, and security incidents, and protect users of Bullet Force’s Services.

• Improving Services and Products: To analyze use of Bullet Force’s Services and website, understand access patterns, and develop new products.

  • We process Device and Unique Identifiers.

• Marketing and Advertising: To send marketing emails and SMS, show ads for Bullet Force, and run contests.

  • Your SMS consent is only shared with service providers who help deliver messages.

  • We process Identifiers, Device and Unique Identifiers, Commercial Information, and Geolocation Data.

5. Information Collected About Our Merchant’s Customers

When fulfilling orders for Merchants such as Bullet Force, we collect and process certain information about their customers (“Customer Data”), which may include name, email, phone number, shipping address, and any personal data included in print content.

• If you are a customer of Bullet Force or another Merchant, the Merchant controls your personal data and should explain how it is used.

• Please contact Bullet Force or the Merchant for questions about your data.

6. Sharing Personal Data With Third Parties
The following details the types of third parties whom we share information with in connection with your use of the Services:

Service Providers. In order for BULLET FORCE to provide you with our Services, we work with third parties who perform services on our behalf and with whom we share personal data to support our Services (“Service Providers”). Service Providers include:

Hosting and Online Services. Information you have provided to us during the use of our Services, including technical usage data, is shared for business purposes in our legitimate interests with third parties who provide hosting and server co-location services as well as data and cyber security services.

Manufacturing Services. Information you have provided to us during the use of our Services may be shared with third-party manufacturing services whom we engage to provide our Services to you.

Email Service Providers. Your email address and other contact details you have provided to us and your messages to our customer service is shared for business purposes in our legitimate interests with communication, email distribution, and content delivery services as well as customer support system providers.

Payment Processors. Information regarding your purchases and payments is shared with billing and payment processing services, fraud detection and prevention services, accounting and financial advisors, so that we can provide our Services to you.

Analytic and Digital Marketing Providers. Information regarding your use of our Services and other information received from cookies and similar technology is shared with web analytics, session recording, and online marketing services.

If we provide marketing to you, information on your account, purchases and preferences can be shared with marketing services.

Legal Advisors, Legal Process, and Protection. Insofar as reasonably necessary, we may be required to share information with third parties to (1) comply with legal requirements or requests, including any subpoenas, claims, disputes or litigation, (2) protect our, or a third party’s, lawful interests, (3) enforce or apply our agreements; and (4) protect property or safety of us or others.

We will only share personal data to Service Providers that have undertaken to comply with obligations set out in applicable data protection laws.

Affiliates. We may share your personal data with our affiliates (companies within our corporate family), in our legitimate interests for business purposes.

Business Customers (i.e., Merchants). Where we provide Services on behalf of Merchants, we will provide certain information related to your orders and purchases.

In a Business Transfer. We may disclose or share your information as part of a corporate business transaction, such as a merger or acquisition, joint venture, corporate reorganization, financing, or sale of company assets, or in the unlikely event of insolvency, bankruptcy, or receivership, in which such information could be transferred to third parties as a business asset in the transaction.

Facilitating Requests. We share information at your request or direction, such as when you choose to share information with a social network about your activities using the Services.

Notwithstanding the above, we may share information that does not identify you (including information that has been aggregated or de-identified) except as prohibited by applicable law. For information on your rights and choices regarding how we share information about you, please see Your Choices In Connection With Our Services below.

If you are a resident of a jurisdiction that grants additional legal rights, please see the applicable disclosure, including the following:

Additional Disclosure for European Residents

Additional Disclosures for California Residents

Additional Disclosures for Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia Residents

7. Retention Periods
We may retain your personal data for as long as you have a BULLET FORCE account or any of the abovementioned legal bases for personal data processing still exists. For example, if you unsubscribe from our marketing, newsletter, or blog emails, we will stop the processing of the personal data for such purposes.

If you have used our Services without creating a BULLET FORCE account, we will keep your personal data as long as necessary to comply with our legal obligation to retain information relating to provision of services, for example, for tax purposes.

After terminating your relationship with us by deleting your BULLET FORCE account or otherwise ceasing to use our Services, we may continue to store copies of your (and in regard to Merchants, your customers’ personal data) as necessary to comply with our contractual obligations with Merchants and legal obligations, as well as to resolve disputes between you and us (or Merchants and applicable customers), to prevent fraud and abuse, to enforce our agreements, and/or to protect our legitimate interests (to the extent that we are permitted by the applicable law to continue to store copies to protect our legitimate interests).

We reserve the right to retain usage data relating to our products and services, as well as data that has been anonymized and/or aggregated, to the extent permitted by applicable laws.

8. Information Security
We seek to use reasonable organizational, technical, and administrative measures to protect the confidentiality, integrity, and availability of personal data. We encourage you to take care of the personal data in your possession that you process online and set strong passwords for your BULLET FORCE account, limit access to your computer and browser by signing out after you have finished your session, and avoid providing us with any sensitive information.

---

9. Your Choices In Connection With Our Services
A. Account.

You may access, update, or remove certain information that you have provided to us through your account (log in here) or by sending an email to bulletxforce2024@gmail.com. We may require additional information from you to allow us to confirm your identity.

Please note that we will retain and use information about you as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

B. Communications.

Emails. You can opt-out of receiving promotional emails from us at any time by following the instructions as provided in emails to click on the unsubscribe link or emailing us at bulletxforce2024@gmail.com with the word UNSUBSCRIBE in the subject field of the email. Please note that you cannot opt-out of non-promotional emails, such as those about your account, transactions, servicing, or BULLET FORCE’s ongoing business relations.

C. Cookies and Tracking Technologies.

Cookies. See our Cookie Policy here for information about how to control cookies.

Do Not Track. Some browsers have a “do not track” feature that lets you tell websites that you do not want to have your online activities tracked. We currently do not respond to browser “do not track” signals. For more information on “Do Not Track,” visit http://www.allaboutdnt.com.

D. Analytics.

We use Google Analytics to conduct analytics of our Service. We provide you with the ability to exercise certain controls and choices about how we collect, use, share, and store your information. Google also provides tools to allow you to opt out of the use of certain information collected by Google Analytics at https://tools.google.com/dlpage/gaoptout.

Please note that your opt-out will only apply to the specific browser or device from which you opt-out.

E. Legal Privacy Rights.

You may have additional legal privacy rights under certain applicable laws, including but not limited to the California Consumer Privacy Act and other similar laws that may come into effect. For more information about your rights under these respective laws, please see the following sections where applicable:

Additional Disclosures for European Residents

Additional Disclosures for California Residents

Additional Disclosures for Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia Residents

For more information about how to exercise applicable legal rights, please see the section titled How to Exercise Your Legal Rights Under GDPR, CCPA, or Heightened U.S. Privacy Laws below.

12. Additional Disclosures for Colorado, Connecticut, Delaware, Nevada, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia Residents

Under the state laws including the Colorado Privacy Act, Connecticut Data Privacy Act, Delaware Personal Data Privacy Act, Indiana Consumer Data Protection Act, Iowa Consumer Data Protection Act, Montana Consumer Data Privacy Act, Oregon Consumer Privacy Act, Tennessee Information Protection Act, Texas Data Privacy and Security Act, Utah Consumer Privacy Act, Virginia Consumer Data Protection Act, and other similar laws that may be enacted in the future (each a “Heightened U.S. Privacy Law”), applicable residents are afforded certain rights regarding the data we have collected about them. This notice describes how we collect, use, and share your Personal Data in our capacity as a “Controller” under such respective Heightened U.S. Privacy Laws, and the rights that you have with respect to your Personal Data, including sensitive personal data. For purposes of this section, “Personal Data” and “sensitive data” have the meanings given in the respective Heightened U.S. Privacy Laws and do not include information excluded from such respective Heightened U.S. Privacy Laws. In general, personal data is information reasonably linkable to an identifiable person.

A. Notice of Collection
To learn more about the categories of personal information we collect about you and how we use it, please see Information Collected About Users and Merchants and How We Use Your Data above. To learn more about the categories of third parties with whom we may share your personal information, please see How We Share Personal Data With Third Parties above.

In addition, we may collect and/or use additional types of information after providing notice to you and obtaining your consent to the extent such notice and consent is required by Heightened U.S. Privacy Laws.

B. Your Rights Under Heightened U.S. Privacy Laws
If you are a resident of a state with a Heightened U.S. Data Privacy Law, the processing of certain personal information about you may be subject to the respective Heightened U.S. Data Privacy Law. Where the Heightened U.S. Data Privacy Law applies, this section provides additional privacy disclosures and informs you of key additional rights as a resident of such state. We will never discriminate against you for exercising your rights, including providing a different level or quality of services or denying goods or services to you when you exercise your rights under the Heightened U.S. Privacy Law.

• Right to Access Information/Correct Inaccurate Personal Data. You have the right to request access to Personal Data collected about you and information regarding the purposes for which we collect it, and the third parties and service providers with whom we share it. Additionally, you have the right to correct inaccurate or incomplete Personal Data. You may submit such a request as described below. If you live in Oregon, you also have a right to request a list of the specific third parties to which we’ve disclosed your personal data.

• Right to Deletion of Personal Data. You have the right to request in certain circumstances that we delete any Personal Data that we have collected directly from you. You may submit such a request as described below. We may have a reason under the law why we do not have to comply with your request, or why we may comply in a more limited way than you anticipated. If we do, we will explain that to you in our response.

• Right To Correct. You have the right to ask us to correct, or make available a means to correct, the personal information we have collected about you, subject to certain exceptions.

• Right to Opt-Out of Sale of Personal Data to Third Parties. You have the right to opt out of any sale of your Personal Data by BULLET FORCE to third parties.

• Right to Portability. You have the right to request a copy of the Personal Data that you previously provided to us as a Controller in a portable format. Our collection, use, disclosure, and sale of Personal Data are described in our Privacy Policy.

• Right to Opt-In to Processing of Sensitive Data. Before we collect and process sensitive personal information, we will obtain your opt-in consent as required under applicable law.

• Right to Opt-Out of Targeted Advertising. You have the right to opt-out of Targeted Advertising based on your Personal Data obtained from your activities over time and across websites or applications.

• Right to Opt-Out of Profiling. You have the right to opt-out of having your Personal Data processed for the purpose of profiling in the furtherance of decisions that produce legal or similarly significant effects concerning you.

• Right to Appeal. If we decline to take action on any request that you submit in connection with the rights described in the above sections, you may ask that we reconsider our response by sending an email to privacy@bulletforce.com (or bulletxforce2024@gmail.com if you prefer) that you received the decision. You must ask us to reconsider our decision within 45 days after we send you our decision.

These rights may be limited in some circumstances. For more information about how to exercise your legal rights and limitations that may apply, please see How to Exercise Your Legal Rights Under GDPR, CCPA, or Heightened U.S. Privacy Laws below.

C. Nevada Opt-Out Rights
If you are a Nevada resident, you have the right to submit a request directing us not to make any sale of your personal information. We do not sell your personal information as defined under Nevada law. However, to request email confirmation that we do not sell your personal information, please send an email to us with “Nevada Opt-Out of Sale” in the subject line and in the body of your message at bulletxforce2024@gmail.com.

13. How to Exercise Your Legal Rights Under GDPR, CCPA, or Heightened U.S. Privacy Laws

If you are an applicable resident to whom the Data Protection Laws apply, you may contact us to exercise your rights in accordance with the below procedures:

A. Verification Requirements
For certain requests, we may require specific information from you to help us verify your identity and process your request. Depending on your request, we will ask for information such as your name, address, phone number and account number (to the extent available) used in connection with your account or applicable purchases, and may ask for government-issued ID, or date of birth. If we are unable to verify your identity, we may deny your requests to know or delete.

B. Requests to Know, Access and Delete Information
If the Data Protection Laws apply to you, you may exercise your right to know, access or delete information through any of the following means:

• Account Settings: As provided in Your Choices in Connection with Our Services above, you can access the majority of your personal information through your account within the Services by logging in to your BULLET FORCE account.

• Online form: You may make a request by completing this form (link to form to be added by BULLET FORCE).

• Email Us: You may make a request by emailing us at bulletxforce2024@gmail.com.

C. Correction Requests
You can correct information related to your account through the following means:

• Account Settings: As provided in Your Choices in Connection with Our Services above, you can access the majority of your personal information through your account within the Services by logging in to your BULLET FORCE account.

• Email Us: You may make a request by emailing us at bulletxforce2024@gmail.com.

D. Right to Opt-Out of Sale, Profiling, and Context-Based Behavioral Advertising
You may opt-out of the sale of personal information or data by completing this form to opt-out of the sale of personal information or by sending an e-mail to bulletxforce2024@gmail.com.

The use of certain third-party providers and their cookies or other tracking technologies for such third parties’ commercial use or profiling or cross-context behavioral advertising must be capable of opt-out. However, as stated in this Privacy Policy, we do not sell or share your information to third parties for these purposes, and therefore, we do not offer any opt-out right.

If you believe that we are forwarding personal information to a third party and it is using it in a manner that exceeds such third party’s processing on our behalf as a service provider or processor (as those terms are understood under applicable law), please contact us at bulletxforce2024@gmail.com so that we may look into the matter further.

E. Right to Portability
If you wish to receive your personal data in a machine-readable format, please contact us at bulletxforce2024@gmail.com. We may provide you instructions on how to access your own information and download it yourself, or otherwise will work with you to provide you your personal data in accordance with applicable Data Protection Law.

If applicable Data Protection Law does not provide you with the right of portability, we may deny your request.

F. Authorized Agents
Residents of California, Colorado, and Connecticut may designate an authorized agent to submit a request on your behalf to access or delete your personal information. Use of an authorized agent must comply with the CCPA and Heightened U.S. Privacy Law as applicable, including that you must provide the authorized agent written and signed permission to submit such request. Please note, we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf. We will still have to verify your identity directly with us in accordance with the applicable law.

G. Responding to Requests as a Controller or Covered Business
Once we receive your request, we will review it, determine whether we can verify your identity, and process the request accordingly within the time period allowed under the applicable law. We aim to fulfill all verified requests within 45 days pursuant to the CCPA and most Heightened U.S. Privacy Laws, unless required to respond sooner. For example, if you live in Europe, we aim to respond within 30 days as required by law. If necessary, extensions as allowed under applicable law (generally for an additional 45 days) may be required and will be accompanied by an explanation for the delay.

Please note that we may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by applicable law.

H. Responding to Requests as a Processor or Service Provider
If your personal data has been processed by us on behalf of a Merchant and you wish to exercise any rights you have with such personal data, please inquire with such Merchant directly. If you wish to make your request directly to us, please provide the name of the Merchant on whose behalf we processed your personal data. We will refer your request to that Merchant and will support them to the extent required by applicable Data Protection Law in responding to your request.

14. Links to Third-Party Sites
Our Services may contain links to other websites or services. Please note that these links are provided for your own convenience and information, and the websites and services may operate independently from BULLET FORCE and have their own privacy policy notices, which we strongly suggest you review.

15. Privacy Policy Changes
Any changes we make to this Privacy Policy in the future will be posted on this page. Therefore, we encourage you to check this page frequently from time to time.

16. Complaints
If you are a User that has directly purchased our Services from BULLET FORCE and believe that we have unlawfully processed your personal data, you have the right to submit a complaint to the contact information provided below, or to your respective data protection supervisory authority. We would, however, appreciate the opportunity to address your concerns before you approach a data protection regulator, and would welcome you directing an inquiry first to us.

If you are a customer of a Merchant (an end user of our Services), please direct your concern to the relevant Merchant in the first instance.