PRIVACY POLICY - Magtech

MAGTECH AMMUNITION INC. PRIVACY AND PERSONAL INFORMATION PROTECTION POLICY (“POLICY”)

INTRODUCTION

This Privacy Policy is meant to demonstrate the commitment of Magtech Ammunition Inc (hereinafter referred to as “Magtech”), managed by CBC Global Ammunition (hereinafter referred to as “CBC”) to the privacy and protection of User Personal Information. It also establishes the rules for the Processing of your Personal Information within the scope of Magtech’s services and features, including its website [magtechammunition.com], in accordance with applicable laws.

As a condition for accessing and utilizing the exclusive functionalities of the Magtech’s website, we strongly recommend that you carefully read this Policy in its entirety. This will ensure you have full knowledge of its terms. Should you have any remaining questions, please feel free to contact us through the Support Channels provided herein.

Any User who does not agree with the provisions of this Policy must discontinue their access or use of the Magtech’s website.

DEFINITIONS

Notice: This refers to this Privacy Policy.
Controller: The company or individual who determines the purposes and means of processing Personal Information. Magtech is the Controller of its Users’ Personal Information.
Cookies: Small files sent by Magtech’s website, saved on Users’ devices, which store preferences and other limited information. Their purpose is to personalize Browse according to the User’s profile.
Data Protection Officer (DPO): The individual appointed by Magtech to act as a communication channel between the Company, Personal Data Subjects, and the competent authority.
Personal Information: Any information that refers to an identified or identifiable individual, such as, for example, a name, identification number, or address.
Sensitive Personal Information: Personal Information concerning racial or ethnic origin, religious conviction, political opinion, trade union membership or membership in a religious, philosophical, or political organization, data concerning health or sex life, or genetic or biometric data, when linked to a natural person.
Applicable law: All legislation concerning the privacy and protection of Personal Data.
Our environment: Refers to the electronic address [magtechammunition.com] and its subdomains, in addition to our physical premises.
Processor: The company or individual who processes Personal Data according to the Controller’s instructions.
Personal Data Subject: This refers to you, the natural person to whom Personal Data refers, whether as a user of the website.
International Data Transfer: The transfer of Personal Data to a foreign country or international organization of which the country is a member.
Processing: Any operation performed with Personal Data, such as those that refer to collection, production, receipt, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, deletion, evaluation or control of information, modification, communication, transfer, diffusion, or extraction.
User: Any individual who interacts with Magtech in situations where Personal Data may be provided, such as individuals who browse our website, employees, and service providers.

COLLECTION OF PERSONAL INFORMATION

The collection of Personal Information is necessary for Magtech to offer services tailored to its Users’ needs. If you choose not to provide some of this Personal Information, the provision of the service may be partially or entirely impossible.

Personal Information may be collected when the User provides it personally or when there’s interaction on our website, as detailed below:

What we collect?	Why we collect?
Contact information (requests via email at sales@magtechammunition.com or through the technical support link Contact – Magtech)
Name	· Identification and authentication. · Customer contact, primarily to provide Technical Assistance.
E-mail
Phone number
Country
Company
Ammunition Information
Firearm Information
Digital Identification Information
IP Address and Logical Source Port	· Identification and authentication. · Compliance with legal and regulatory obligations.
Device (Operating System Version)
Geolocation
Timestamps
Pages Accessed
Session ID
Cookies
E-mail

SOCIAL MEDIA

We maintain pages hosted on social media networks like Facebook, Instagram, and YouTube for the promotion of our products and events, as well as for interaction with users.

These social media networks have their own privacy policies, which may differ from how we handle Personal Information. Therefore, you should consult the documents on each of these companies’ websites.

UPDATING AND ACCURACY OF PERSONAL INFORMATION

You are solely responsible for the accuracy, truthfulness, and updating of the Personal Information you provide to us. We are not obligated to process your Personal Information if we have reason to believe that such Processing might lead us to violate any applicable law, or if you are using our environments for any illegal or unlawful purposes.

DATABASE

The database created through the collection of Personal Information is our property and our responsibility. Its use, access, and sharing, when necessary, will be conducted within the limits and purposes of the businesses described in this Policy.

We don’t use any type of solely automated decision-making that impacts your interests.

USE OF COOKIES

To enhance your Browse and experience on the Magtech website, we use Cookies.

Cookies are small digital text files that your internet browser stores on your device (computer, smartphone, tablet, etc.). They store information related to your preferences, such as your preferred language, location, session recurrence, and other variables.

The purpose of cookies is to improve the User’s experience, both in terms of performance and usability, as the content provided will be directed to your needs and expectations.

Cookies can also be used to perform anonymous and aggregated statistics that help us understand how Users interact with the website and improve its structure and content. Because these are anonymous statistics, it’s not possible to personally identify the User through this data.

The User can change their settings to block the use of cookies or to alert them when a cookie is being sent to their device. Consult your browser’s instructions or help section to learn more about how to adjust or change these settings.

For more information, please refer to our Cookie Policy. [https://magtechammunition.com/cookie-policy/].

SHARING OF PERSONAL INFOMRATION

The Personal Information collectesd and the activities recorded may be shared:

With companies that are part of the Economic Group to which Magtech belongs, always in compliance with the guidelines of this Policy.;
With third parties, for the provision of products or services essential to the delivery of our services;
With marketing and advertising companies, to deliver promotions and information relevant to your profile;
With competent judicial, administrative, or governmental authorities, whenever there is a legal determination, demand, request, or order to do so;
Automatically, in the event of corporate operations such as merger, acquisition, and incorporation.

If you have any questions about who we share your data with, please contact us through the Support Channels provided at the end of this Policy.

HOW WE PROTECT YOUR DATA AND HOW YOU CAN PROTECT IT TOO

INFORMATION SECURITY AND GOVERNANCE PRACTICES

To safeguard your privacy and protect your data, we have a governance program that includes good practice rules, internal policies, and procedures. These establish organizational conditions, training, educational actions, and mechanisms for supervising and mitigating risks related to the Processing of Personal Data.

THIRD-PARTY PROCESSING UNDER OUR DIRECTION.

We carefully vet our partners and service providers and enter into contractual obligations with them regarding confidentiality, information security, and data protection. Our goal is to protect you by ensuring they adhere to our directives when processing your data.

DATA ACCESS: PROPORTIONALITY AND REVELANCE

Internally, only duly authorized professionals can access the Personal Information we collect. This access is always guided by the principles of proportionality, necessity, and relevance, along with a commitnment to confidentiality and preserving User privacy, as outlined in this Policy.d

HOW WE STORE YOUR DATA AND ACTIVITY LOGS

STORAGE LOCATION

We store your Personal Data and activity logs (logs) on our own servers located in the United States of America or on carefully selected partner servers. To protect your privacy, we implement rigorous security measures, both technical and administrative, to ensure your data is secure, accessible only by authorized personnel, and protected from unauthorized alterations. Our commitment is to preserve the confidentiality, integrity, and availability of your data for the entire period it’s under our responsibility.

For Users located in Brazil or if your Personal Data is processed with activities in Brazil, if your Personal Data is stored on servers located outside of Brazil, this may constitute an international data transfer. In such a case, the provisions of the “International Data Transfer” section will apply.

DATA RETENTION PERIOD

We store Personal Information only for the period necessary to fulfill the purposes for which it was collected or to comply with any legal, regulatory, or rights preservation obligations. To achieve this, we have a Secure Information Retention and Disposal Policy.

DISPOSAL OF PERSONAL INFORMATION

After the retention period and legal necessity expire, Personal Information will be deleted using secure disposal methods or used in an anonymized form for statistical purposes.

INTERNATIONAL DATA TRANSFER

In order to enable and improve the performance of our operations, some of our resources and servers, as well as those of our partners and service providers, are located in various countries. As a result, your personal data may be transferred internationally, meaning your information may be shared outside of Brazil for the following purposes:

Purpose	Destination Country/Countries
Technical support	Brazil

We take the necessary measures to ensure that all data transfers comply with the requirements set forth by applicable data protection laws. We only transfer your personal data to partners that demonstrate compliance with Brazilian data protection regulations.

We maintain contracts with these partners that require strict standards for personal data protection and information security. These agreements ensure that your personal data is kept confidential and is processed solely for the purposes described above.

WHAT ARE YOUR RIGHTS AND HOW TO EXERCISE THEM

Your Fundamental Rights

Your data belongs to you. Applicable data protection laws grant you a series of rights concerning your personal data, which you may exercise by submitting a request to our Data Protection Officer (DPO) via the Contact Channel provided at the end of this Policy.

Confirmation and access: you may request confirmation of whether we process your personal data and access to such data, including copies of records we hold about you.
COrrection: you may request the correction of any personal data that is incomplete, inaccurate, or outdated.
Anonymization, Blocking or Deletion: you may request the anonymization of your personal data so that it can no longer be associated with you, the temporary blocking of data processing for certain purposes, or the deletion of your personal data.
Data Portability: you may request that your personal data be provided in a structured and interoperable format for transfer to another entity, subject to our intellectual property rights and trade secrets.
Information about sharing: you may request information regarding third parties with whom we share your data, limited to information that does not compromise our intellectual property or trade secrets.
Withdrawal of Consent: you may withdraw your consent for processing activities based on consent. This withdrawal will not affect the lawfulness of processing carried out prior to the withdrawal. If the withdrawn consent is essential for the functioning of our services or platforms, access to such services may become unavailable.
Objection: you may object to the processing of your personal data if you do not agree with a specific purpose of processing.
Review of Automated Decisions: in cases involving decisions made solely through automated processing, you may request a review of the decision and express your point of view or indicate any interests that may have been affected.
Access to Contractual Clauses: if your personal data is transferred internationally based on standard or specific contractual clauses, you may request access to such clauses, subject to the protection of our trade and industrial secrets.

You may exercise your rights by submitting a request through the following Contact Channel:

MAGTECH AMMUNITION INC
9100 Wyoming Ave N #515- Brooklyn Park, MN
EUA – 55445
763-235-4000
dpo@cbc.com.br

Primary DPO : Cecília Helena de Castro
Deputy DPO: Leandro Bissoli

Requests

To ensure your security, whenever you submit a request to exercise your rights, we may ask for additional information to verify your identity. This is necessary to prevent fraud and unauthorized access to personal data.

Denial of requests

We may decline certain requests to exercise rights if compliance would violate our intellectual property rights or trade secrets, or if we are legally or regulatorily required to retain the data. Additionally, we may reject requests when data retention is necessary to protect our rights or the rights of third parties in legal or administrative proceedings.

Response of requests

We are committed to responding to all requests within a reasonable timeframe and always in accordance with applicable data protection laws.

ADDITIONAL INFORMATION

Magtech the right to amend the content of this Policy at any time, based on purpose or necessity. Users are advised to review the Policy regularly whenever accessing the website or using the services provided.

If updates to this document require a new collection of consent, Users will be duly notified.

If any provision of this Policy is deemed unenforceable or invalid by a competent authority, including a court, the remaining provisions shall remain in full force and effect.

This Policy shall be governed by and interpreted in accordance with the laws of the United States. Any disputes arising from or related to this document shall be resolved by the courts located in the User’s place of residence, unless otherwise required by applicable personal, territorial, or subject-matter jurisdiction rules.

Last updated : August 20th, 2025