Privacy & Data Protection

At Mercatus, we recognize the exceptional confidentiality required when procuring armored vehicle platforms, ballistic glass, and active security hardware. Our Privacy & Data Protection Policy is engineered to provide end-to-end operational security, ensuring that client identity, vehicle registrations, and tactical inventory remain strictly confidential.

We do not operate consumer advertising trackers, we do not trade client profiles, and we strictly safeguard all procurement telemetry.

In order to execute defense commerce, verify regulatory credentials, and fulfill global dispatch logistics, we collect only necessary categories of information:

• Commercial Identity Data: Corporate name, government agency, procurement officer name, certified business tax identification, and registered defense contractor credentials.
• Operational Dispatch Details: Secure delivery destination, nominated freight forwarder, border clearance authority, and designated logistics points of contact.
• Technical Fleet Configurations: Vehicle model (e.g. Toyota LC300, Lexus LX, Chevrolet Suburban), VIN identifiers for custom-cut ballistic glass, and suspension payload metrics.
• Export Compliance Verification: End-User Certificates (EUC), verified consignee certificates, and export compliance declarations required by governing trade ministries.

Your data is processed strictly under legitimate commercial necessity and statutory defense compliance:

• To fulfill and dispatch online and direct purchase orders.
• To execute legally mandated Denied Parties screening (OFAC, BIS, UN Sanctions).
• To validate ballistic warranty registries and provide technical service bulletins.
• To communicate critical shipment tracking and border customs documentation.

Mercatus maintains a zero-disclosure commitment:

We NEVER sell, rent, monetize, or publicly disclose client lists, purchase orders, or vehicle configurations to commercial data aggregators, media outlets, or unauthorized third parties. Information is only shared with accredited logistics carriers (e.g., DHL Defense Logistics, certified air cargo forwarders) solely to the extent necessary to clear customs and execute secure physical delivery.

All digital communications and transaction sessions on bucklerlandsystems.com/shop/ are encrypted using 256-bit Transport Layer Security (TLS 1.3) protocols with high-grade SHA-256 ciphers. Client fleet specifications, CAD drawings, and EUC records are maintained in isolated, role-restricted internal databases with multi-factor authentication (MFA) and immutable audit logging.

In accordance with global data protection frameworks, including the European Union General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA/CPRA), authorized client representatives possess the right to:

• Request access to all archived personal and commercial account records.
• Request rectification of inaccurate fleet dispatch data.
• Request erasure of non-mandatory account information (excluding records required by law for defense trade audits).
• Withdraw consent for optional technical product service advisories at any time.

For inquiries regarding data governance, cryptographic records verification, or to exercise statutory privacy rights, contact our Data Protection Officer:

Mercatus Data Governance Directorate
Email: dpo@bucklerlandsystems.com
Direct Hotline: +1 (800) MERCATUS
Hours: 08:00 – 18:00 UTC (Monday – Friday)