Home › Privacy Policy
What we collect from students and providers, how message relay protects both sides, and how long we keep each type of record.
Last updated: January 2026
We collect what we need to run a directory and nothing we cannot justify. That falls into three groups.
We use information to:
We do not sell personal information, and we do not build advertising profiles from your searches.
Messages you send through a listing are relayed by CCW Directory rather than delivered directly. The provider receives your message from our system and replies through the same thread, so neither party’s email address is exposed to the other unless one of you chooses to write it in the message body.
We retain copies of relayed messages so we can support both sides of a conversation, resolve disputes about what was quoted or promised, and handle abuse — including spam, harassment and attempts to use the relay for bulk marketing.
Relayed messages are readable by a small number of staff for those purposes only. They are not used for marketing and are not shared with other providers.
We set a session cookie so signed-in owners stay signed in, a preference cookie that remembers your list or grid view, and analytics cookies that measure aggregate traffic.
We do not run cross-site advertising pixels. You can block or delete cookies in your browser; the directory keeps working, though view preferences will reset each visit.
Reviews are public by design. Your display name, star rating, review text, the month you attended and the training type are shown on the listing and may appear in search engine results. Do not include anything in a review you would not want indexed publicly.
We share information only in these situations:
Retention is tied to purpose. Relayed messages and contact submissions are kept for twenty-four months. Verification records are kept for the life of the listing plus three years, since they document why a badge was granted. Billing records are kept for seven years.
Analytics data is aggregated after thirteen months. When a listing is removed we delete its public content and keep only the records described above.
You can ask us to:
Write to [email protected]. We verify identity before acting on a request and respond within thirty days.
California residents may request the categories and specific pieces of personal information we collect, the purposes we use it for, and the categories of parties we disclose it to, and may request deletion or correction.
We do not sell personal information or share it for cross-context behavioural advertising, so there is nothing to opt out of on that front. Exercising these rights never affects the service you receive.
Traffic is encrypted in transit, credentials are hashed, and access to relayed messages and verification records is limited to staff who need it. No system is perfectly secure, so we also keep audit logs and will notify affected users and regulators if a breach requires it.
The directory is not intended for children. We do not knowingly collect information from anyone under thirteen, and accounts, reviews and messages require you to be eighteen or older. If a child has submitted information, write to us and we will delete it.
The directory covers United States firearm training and is operated from the United States. If you visit from elsewhere, your information is transferred to and processed in the US, where privacy law differs from your own.
We revise this policy as our practices change and update the date at the top of the page. When a change materially affects how we handle personal information, we post a notice on the site before it takes effect.
Privacy questions and rights requests go to [email protected] or CCW Directory LLC, 1200 Commerce St, Suite 410, Fort Worth, TX 76102.
Still unclear on something in this document? Our support team can walk you through it.
