Privacy Policy

Trans-System International, Company · Last updated 2026-05-17

What this policy covers

This Privacy Policy describes how Trans-System International, Company ("TSI") collects, uses, and shares information about customers and visitors. It applies to information we collect through the website, in-store visits, email, telephone, and text messaging.

Information we collect

Identity: name, date of birth, government-issued ID number (for firearms purchases as required by federal law)
Contact: address, email, mobile or landline phone
Eligibility: answers required by ATF Form 4473 (collected by the receiving FFL), citizenship, state of residence
Order: items, serial numbers, transfer destinations, FFL records, NFA tax stamp records
Payment: processed by our payment processor; TSI stores only card brand and last 4 digits
Compliance: records required by ATF (27 CFR Part 478), DDTC (ITAR, 22 CFR Parts 120-130), OFAC screening
Website use: IP address, browser type, pages visited, session cookies

How we use it

Process and fulfill orders, including FFL transfer coordination
Verify identity, age, and eligibility under federal and state firearms laws
Screen against OFAC's SDN list as required by U.S. sanctions law
Retain records required by ATF (A&D book retained 20 years), DDTC (ITAR records 5 years), and Texas tax authorities
Send transactional SMS and email about orders, account, and security (see SMS Policy)
Detect and prevent fraud, abuse, and unauthorized use

We do not sell, share, or rent your personally identifiable information (PII) to third parties for the purpose of marketing or promotional activities.

SMS opt-in data — explicit protection

The following SMS-specific protections apply in addition to the general PII protections above and are required by TCR / CTIA policy:

No phone/mobile number information will be shared with third parties or affiliates for marketing or promotional purposes.
All categories of data sharing described in this Privacy Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties for marketing or promotional use.
Your consumer data, as it relates to SMS messaging, will not be shared with non-affiliated third parties — explicit one-to-one consent is required for SMS communications.
We will not sell, share, or rent your SMS opt-in information to any third party for any reason other than to deliver the specific services associated with the campaign. We may share your personal data, including your SMS opt-in or consent status, only with third parties that assist us in providing messaging services — such as platform providers, phone carriers, and other vendors directly involved in delivering text messages on our behalf.

When we share it

Receiving FFL: name, contact, and order details for transfer completion
Common carriers (UPS, FedEx, USPS, Envia): name, address, and shipment metadata
Payment processors: card details and transaction data, processed under PCI DSS
SMS provider (Flowroute / BCM One): mobile number and message text for delivery
Regulators and law enforcement: ATF, DDTC, IRS, state agencies — when required by law, subpoena, or warrant
Professional advisors: counsel, accountants, auditors under confidentiality

SMS data

If you provide your mobile number, it is used only to deliver the transactional messages described in our SMS Policy. We do not share mobile numbers with third parties for marketing. Inbound replies are stored only for the operational purpose they relate to.

Retention

ATF firearm transaction records: 20 years minimum (27 CFR § 478.129)
ITAR-related export records: 5 years minimum (22 CFR § 122.5)
Tax records: at least 7 years (IRS and Texas Comptroller rules)
Account contact records: until account closure plus reasonable wind-down
Website analytics: 13 months aggregated

Cookies

Our website uses a small number of first-party cookies — no third-party tracking, no advertising cookies. The cookies we set are:

session_id, csrf_token — essential session cookies set by Odoo to keep you signed in and to prevent cross-site request forgery on form submissions.
frontend_lang — functional cookie that remembers your language preference.
tsi_age_verified — functional cookie set only when you confirm legal age on age-restricted sections of the site; remembers the verification for 30 days so you do not have to re-confirm on every page.

We do not use Google Analytics, advertising cookies, social-media tracking cookies, or any third-party cookies that share data outside TSI's hosting environment. Our analytics provider is Plausible, which is cookie-less by design and does not track individual visitors.

You may delete or block cookies via your browser settings at any time. Doing so may sign you out of the site or require you to re-confirm age on age-restricted sections.

Security

Industry-standard administrative, technical, and physical safeguards. TLS for all web traffic. Credentials encrypted at rest with Fernet AES-128 + HMAC-SHA256. Access limited to authorized personnel on a need-to-know basis.

Your rights

Subject to federal record-keeping laws we cannot lawfully override (ATF and DDTC retention requirements), you may:

Request a copy of information we hold about you
Correct inaccurate information
Request deletion of information not required to be retained
Withdraw SMS consent at any time by replying STOP
Close your account

Children

The services are not directed to children under 13. Firearms purchases require federally and state-mandated minimum age.

Changes

We may update this policy. Material changes will be noted with a new "Last updated" date.

Contact

Trans-System International, Company
Attn: Privacy
174 Duke Trail
Weatherford, TX 76088
Email: dmader@trans-sysintl.com