Privacy Policy

Hydra Custom Coating (d/b/a Hydra Custom Coating), a trade name of Crossroads Hydrographics LLC (“Company”, “we”, “us”, or “our”)

Effective date: 10/02/2025

Contact:
Email: info@hydracustomcoating.com
Phone: [xxx-xxx-xxxx]
Address: 8882 Louisiana St. Merrillville IN,
FFL (if applicable): [FFL # — optional to include]

1. Summary — in plain English

  • We collect contact, transaction, and service information so we can provide coatings, shipping/transfer handling, quotes, and customer support.

  • We use data to perform services, process payments, communicate about orders, and improve our services.

  • We share data with service providers (payment processors, shipping carriers, background-check providers for transfers) and when required by law.

  • You can view, correct, delete, or export your personal information; you can also opt out of marketing communications.

  • For firearm transfers we may collect and retain additional legal information (e.g., ID, transfer forms) — these records are retained to meet legal obligations.

For key rights and how to exercise them, see Section 9 (Your Privacy Rights).

2. Scope & Who we are

This Privacy Policy applies to personal information we collect through:

  • our website at [hydracustomcoating.com] and any linked sites (the “Website”);

  • in-person transactions at our physical location(s);

  • phone, email, and text message communications; and

  • any other interactions where we collect personal information in relation to our services.

The data controller is Crossroads Hydrographics LLC (d/b/a Hydra Custom Coating).

3. Information we collect

Personal Information you provide directly

We collect the personal information you give us when you request services, sign quotes, book appointments, or contact us, including:

  • Contact details: name, email, phone number, billing and shipping address.

  • Identity & verification: government-issued ID details when required (for firearm transfers or certain pickups), Social Security Number (only when legally required), date of birth, and any identification required to complete lawful transfers.

  • Transaction details: order details, invoices, payment card/ACH info (note: payment details are typically collected by our payment processor).

  • Item & product details: serial numbers, make/model, condition notes, photos of items you provide (e.g., equipment/parts), and special service instructions.

  • Communications: messages, emails, recorded phone calls (where permitted), and service notes.

  • Marketing preferences and opt-in/opt-out choices.

Information collected automatically

When you use our Website we automatically collect:

  • Technical data: IP address, browser type and version, device identifiers, operating system, and pages visited.

  • Usage data: dates/times of visits, referring/exit pages, clickstream data, and interactions with the Website.

  • Analytics & cookies: cookies, pixels, and similar technologies (see Section 6).

Information from third parties

We may receive information from third parties, such as:

  • Payment processors (e.g., charge status, payment confirmations).

  • Carriers and shippers (tracking, delivery status).

  • Background-check/NICS providers and other legal/verification services for firearm transfers.

  • Public sources and business directories for verification and marketing.

4. Special category & law-enforcement data (FFL / firearm transfers)

If you use our firearm transfer services or services that require legal verification, we will collect, store, and process additional information as required by federal/state law (ATF Form 4473, state transfer forms, NICS results, etc.). These records are retained as required by law and may include sensitive identity information. We treat these records as highly confidential and restrict access only to authorized personnel.

5. How we use personal information

We use your personal information for the following purposes:

  • To provide and fulfill services (prepare quotes, perform coatings, hydrodipping, repairs, transfers, shipping and pick-up coordination).

  • To process payments and complete billing. (Payment card data may be handled by third-party processors.)

  • To communicate with you about orders, status updates, scheduling, receipts, and support.

  • To meet legal obligations — recordkeeping, compliance with law enforcement/ATF requirements, tax reporting, and defensive legal actions.

  • To improve our services — analytics, feedback, quality control, and internal research.

  • For marketing — with your consent where required, we may send promotional emails, newsletters, or offers. You can opt out of marketing at any time.

  • To protect Company & users — fraud prevention, security, and dispute resolution.

  • To respond to requests — for example, to comply with data subject access requests or lawful process.

We will not use your personal information for materially different purposes without notifying you.

6. Cookies & tracking technologies

We use cookies, web beacons, and similar technologies to operate and improve the Website and to deliver relevant content. Types we use include:

  • Essential cookies — required for basic site functionality (booking forms, shopping cart).

  • Performance & analytics cookies — to understand site usage and improve performance (e.g., Google Analytics).

  • Functional cookies — remember preferences and settings.

  • Advertising cookies — may be used by third-parties to deliver relevant ads (where applicable).

You can manage cookie preferences via your browser settings and, where available, a cookie banner on the Website. Blocking cookies may limit certain features.

7. Sharing & disclosures

We may share personal information with:

  • Service providers & subprocessors who perform services for us (payment processors, email service providers, hosting companies, shipping carriers, CRM providers, background-check services). These providers are only authorized to use your data to perform services for us and must keep data confidential.

  • Legal & regulatory authorities when required by law, subpoena, court order, or other legal process.

  • To protect rights — to enforce our Terms, protect against fraud, or respond to claims.

  • Business transfers — in connection with a sale, merger, financing, or acquisition of all or a portion of our business (we will place notice and obligations on the buyer).

  • With your consent or at your direction.

We do not sell personal information for monetary consideration. If we ever engage in activities that constitute a “sale” or “sharing” under applicable law (e.g., CCPA/CPRA), we will provide required notices and opt-out mechanisms.

8. Third-party sites & services

The Website may link to third-party websites (social networks, suppliers, or industry partners). This Policy does not apply to those sites. We encourage you to read the privacy policies of any third-party website you visit.

9. Data retention

We retain personal information only as long as necessary to fulfill the purposes in this Policy, to comply with legal obligations (for example, retention of firearm transfer records as required by ATF law), resolve disputes, enforce agreements, and as otherwise permitted by applicable law. Typical retention periods:

  • Transactional & accounting records: as required by tax and business law (commonly 3–7 years).

  • FFL/transfer records: retained for the period required by federal/state law (do not delete until lawful retention period has passed).

  • Marketing lists & preferences: until you opt out or request deletion.

  • Support & communications: retained as necessary for business operations unless you request deletion.

10. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, use, alteration, or disclosure. Examples include access controls, encryption for data in transit, and secure hosting. However, no system is completely secure — we cannot guarantee absolute security. If we become aware of a breach of personal data that creates a risk of harm, we will follow applicable breach notification laws and notify affected individuals where required.

11. International transfers

If you are located outside the United States, personal information may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate. Where required by law, we will implement appropriate safeguards (contractual protections) to protect your information.

12. Your privacy rights

If you are a resident of the United States (general rights)

You may have rights to:

  • Request access to the personal information we hold about you.

  • Request correction of inaccurate information.

  • Request deletion of your personal information (subject to legal exceptions and retention obligations).

  • Opt-out of marketing communications.

  • Opt-out of sale/sharing where applicable (if we ever engage in such activities).

To exercise any of these rights, contact us at info@hydracustomcoating.com or use the contact details above. We will verify your identity before acting on requests and respond in accordance with applicable law.

If you are a resident of the European Economic Area (EEA) — GDPR rights

Under the GDPR you may have the right to:

  • access, rectify, erase, restrict processing, object to processing, data portability, and to lodge a complaint with a supervisory authority.

  • The lawful bases for processing may include contract performance, compliance with legal obligations, legitimate interests, and where applicable, your consent.

To exercise GDPR rights, please contact us (see contact details). We may ask for identity verification and will respond within applicable timeframes.

If you are a California resident (CCPA/CPRA)

If you are a California resident, you may have additional rights under the CCPA/CPRA, including:

  • the right to know what personal information we collect, use, disclose, and sell;

  • the right to request deletion of personal information (with certain exceptions);

  • the right to opt-out of the sale or sharing of personal information (if applicable);

  • the right to non-discrimination for exercising your rights.

To submit a verifiable consumer request under CCPA/CPRA, contact info@hydracustomcoating.com. We will verify your request consistent with legal requirements.

13. Children’s privacy

Our services are not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children under this age. If you believe we have collected such information, contact us and we will take steps to delete it.

14. Marketing communications & opt-out

You may opt out of promotional emails or text messages by following the unsubscribe link in any message or by contacting us at info@hydracustomcoating.com. Please allow a reasonable period for processing opt-out requests. Transactional messages (order confirmations, service updates) are not subject to opt-out.

15. How to exercise your rights & verification

To exercise rights or submit requests:

  1. Email: info@hydracustomcoating.com with subject line “Privacy Request” and describe your request.

  2. Include sufficient information to verify your identity (name, email, order number, phone). We will reply to confirm receipt and may request further information.

  3. We may ask for government ID or other verification for sensitive requests (especially deletion or access). We will only request information reasonably necessary to verify identity.

We will respond to verifiable requests in accordance with applicable law.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated Policy on our Website with a revised “Effective date.” Significant changes (material changes) will be called out by notice on the Website or via email where required.

17. Contact & complaints

If you have questions, concerns, or want to file a complaint, contact us:

  • Email: info@hydracustomcoating.com

  • Phone: [xxx-xxx-xxxx]

  • Address: [Insert business address]

If you are an EEA resident and not satisfied with our response, you may lodge a complaint with your local data protection authority.

18. Additional notices (optional items you may want to include)

  • Payment processor disclosures — list payment providers (Stripe, Square, Payroc, etc.) and link to their privacy policies.

  • Analytics & ad tools — specify providers (Google Analytics, Facebook Pixel) and provide opt-out links.

  • Cookie banner & preference center — if you implement one, describe how users can set preferences.

  • State-specific disclosures — if you collect data from residents of certain states (e.g., Colorado, Virginia, Connecticut), include the specific rights required by those states and any designated agent information.