Privacy Policy

 

Introduction

NSC92 (“we”, “us”, or “our”) is committed to protecting personal data and respecting the privacy of individuals. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

• Business name – NSC92

• Website – www.nsc92.com

• Email – enquiries@nsc92.com

• ​

NSC92 operates as a shooting and sporting organisation and is subject to firearms licensing and related legal obligations.

What Personal Data We Collect

We may collect and process the following categories of personal data:

• Names and contact details

• Postal addresses

• Purchase or account history

• Health and safety information

• Account and membership information

• Website user information, including cookie data and user journeys

• Photographs or video recordings, including CCTV footage

• Identification documents

• Information relating to compliments or complaints

Special Category Data

We may process limited health and safety–related information where required to ensure safe participation in activities and compliance with legal obligations. This is handled with additional safeguards.

Purposes of Processing

We collect and use personal information for the following purposes:

• To provide services and facilities to members and customers

• To manage memberships, bookings, and accounts

• To comply with firearms licensing legislation and regulatory requirements

• To maintain health, safety, and security on our premises

• To prevent crime, investigate incidents, and protect individuals

• To communicate service updates, events, and relevant information

• To meet legal, insurance, and safeguarding obligations

Lawful Bases for Processing

We process personal data under one or more of the following lawful bases:

• Consent – where you have provided clear permission

• Legal obligation – where processing is required under firearms licensing and other legislation

• Legitimate interests – where processing is necessary for security, safety, and effective operation

• Vital interests – where processing is required to protect life or prevent serious harm

Legitimate Interests

We rely on legitimate interests for activities such as:

• Operating CCTV systems for safety, security, and crime prevention

• Maintaining records necessary for the lawful and safe operation of shooting activities

• Protecting staff, members, and visitors

​

A legitimate interests assessment has been carried out to ensure that these activities are proportionate, necessary, and not overly intrusive.

Where We Get Personal Data From

We collect personal data from the following sources:

• Individuals directly (members, customers, visitors)

• CCTV systems and recorded images

• Third parties

• Councils and other public sector organisations

Sub Processors and Systems

We use the following systems and organisations to support our operations. These act as data processors and are required to maintain appropriate security and confidentiality:

• Square – payment processing

• Wix – website hosting and online services

• Google – email, analytics, and related services

• Microsoft – email and productivity tools

• Xero – accounting and financial records

​

We also interact with relevant third parties, including:

• Scottish Clay Target Association

• Scottish Target Shooting

• Police Scotland

Data Sharing

Personal data may be shared where necessary with:

• Regulatory authorities

• Law enforcement and emergency services

• Safeguarding bodies

• Organisations we are legally obliged to share information with

• Relevant third parties involved in licensing, insurance, or governance

​

Information may also be published publicly, such as on our website or social media, where appropriate and lawful.

​

We do not sell personal data.

Data Retention

Personal data is retained only for as long as necessary to fulfil its purpose or to comply with legal and regulatory requirements, including firearms licensing, safety, and financial obligations.

International Data Transfers

We do not routinely transfer personal data outside of the UK. Where any systems used may involve international processing, appropriate safeguards are in place, such as:

• UK adequacy decisions

• Standard Contractual Clauses (SCCs)

• Other legally recognised transfer mechanisms

Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

• Secure systems and access controls

• Restricted access on a need-to-know basis

• Physical security measures

• Regular review of data-handling practices

Your Rights

Under UK GDPR, individuals have the right to:

• Access their personal data

• Request correction of inaccurate data

• Request erasure where legally permissible

• Restrict or object to certain processing

• Withdraw consent at any time

• Lodge a complaint with the supervisory authority

​

Requests can be made using the contact details above.

How to Complain

If you have concerns about how your personal data is handled, please contact us first so we can address the issue.

​

You also have the right to complain to the Information Commissioner’s Office (ICO):

• Website – www.ico.org.uk

• Telephone – +44 303 123 1113

Policy Review

This Privacy Policy is reviewed regularly and updated to reflect changes in law, regulation, or our operations.