Effective Date: October 27, 2026

Bad Moon Shooting ("Bad Moon Shooting," "we," "us," or "our") provides firearms training and Concealed Carry Weapon (CCW) certification classes in Northern California. This page explains what personal information we collect from the people who book our classes and the students who attend them, how we use and protect it, who we share it with, and the terms of our text (SMS) messaging program. It applies to our website, bookings made with our staff by phone or in person, and the emails and texts we send about classes.

By booking a class, providing your information, or opting in to receive text messages from us, you agree to the practices described below.

Information We Collect

When You Book

When you book a class on our website, we ask for:

• Email address (required). We send your booking confirmation, your booking page link, class reminders, and class updates to it.
• Phone number (optional). So we can reach you about changes to your class.
• How you heard about us (required). A choice from a short list, so we know where our students come from.

Your payment card is entered into a payment form provided by our payment processor, Stripe, and goes directly to Stripe; Bad Moon Shooting's servers never receive or store your card number. Stripe tells us the name on the card, which we keep as the name on your booking. Stripe also gives us its fraud checks on each payment, such as its risk assessment, whether the security code and postal code matched, and any dispute or fraud warning from your card issuer, and we record payment attempts that are declined. Our staff use these to review payments that look unusual.

Our staff can also make a booking for you by phone or in person, and take the same information.

Each Student's Details

After booking, your booking page links to a page for each seat, where you name the student taking it:

• Name (required). Printed on the training certificate. Without it, we cannot issue a certificate.
• Email address and phone number (optional). So we can reach the student directly about the class.

For CCW classes, each seat also asks for:

• The CCW issuing agency (the student's county sheriff, or the City of Williams). It decides which course of fire the student qualifies on and which forms the certificate uses. Without it, we cannot issue a correct certificate.
• Each firearm's type, make, model, caliber, and serial number. Your issuing agency requires them on the certificate. Without them, we cannot issue a correct certificate.

You can fill these in or change them from the seat page, and our staff can enter or correct them for you. We keep a record of each change, with serial numbers masked.

Classes Held on Beale Air Force Base

For a class at a range on Beale Air Force Base, each seat asks whether the student needs a base pass. Only a student who answers yes is asked for the details Beale's 9th Security Forces require to put them on the base's visitor list (Beale's visitor pass rules): name as shown on their ID, date of birth, ID or driver's license number, the state that issued it, whether it is a REAL ID, citizenship, and Social Security number. 9th Security Forces use them to check each visitor's identity and background before approving the pass. We put everyone in the class on one list for the base, so you don't need to request a pass yourself. If you don't provide them, we cannot obtain a base pass for you and you will not be able to attend the class; because that outcome results from information you didn't provide, no refund will be issued in that situation.

These details are handled more strictly than anything else we hold:

• They are encrypted when stored.
• Once entered, the date of birth, ID number, citizenship, and Social Security number are never shown on our website again, to you or to our staff, and are never emailed or included in any export; the printed visitor list described below is the only place they appear. Entering a new value replaces the old one.
• Their only use is the base's visitor list. Only our administrators can print it, after re-entering their password, and every printing is logged with who printed it, when, and from what IP address. The printed list shows the details in full, as the base requires. It goes to 9th Security Forces, and may pass through the instructor who sponsors the class's visitors onto the base, who handles it only for that purpose.
• They are deleted once the class's last day has passed, or sooner if the seat is canceled or the student changes their answer to no.

At Your Class

During the class, our instructors record:

• Check-in, when the student arrives.
• Range qualification scores for each firearm, including any remediation or requalification. A score entered by mistake is corrected or voided rather than erased, and the correction is recorded with who made it and why.
• Written test results. Students take the written test on their own phone through our website, or on paper. For the online test we keep the questions drawn, the answers given, and the score.
• Training certificates. Each certificate is issued on the official forms, printed and signed by your instructor, and stored with your seat; a "for your records" copy is available from your booking page.

For classes on Beale AFB, the students who attend sign the base's collection record (Air Force form AF IMT 2555), which lists each seat sold and its price, and which we give to the base.

We scan signed class paperwork (sign-in lists, the AF IMT 2555, and paper tests) and store the scans with the class.

Our instructors use our class app, Downrange, on their own phones and tablets at the range. It keeps a copy of their classes' rosters and records on the device, so it works without an internet connection, and it requires the instructor to sign in.

When You Contact Us

If you use our contact form, your name, email address, and message are emailed to our sales inbox so we can reply.

How We Use Your Information

We use the information described above to:

• Take and manage bookings and payments, and review payments that look unusual
• Issue and re-issue training certificates
• Qualify students on the correct course of fire for their issuing agency (CCW classes)
• Prepare the paperwork required by your CCW issuing agency (CCW classes)
• Request base passes and complete the base's collection record (Beale AFB classes)
• Send booking confirmations, reminders, and updates, and answer your questions
• Send the course alerts and CCW renewal follow-ups described below

Emails We Send

We send email about your booking and class: your confirmation and booking page link, reminders four days and one day before your class, and any messages from our staff about the class. A booking made after one of those reminders would have gone out doesn't get it: the booking confirmation covers what it would have said. So a booking made within four days of class gets only the day-before email, and one made the day before or on the day of class gets no reminder at all.

We keep a copy of each email we send you about a booking or class, with its links removed, and our email provider tells us whether each one was delivered, bounced, or marked as spam. If an email to your address bounces or is marked as spam, we stop sending marketing email to it.

Marketing Emails

We send two kinds of marketing email:

• Course alerts. If you sign up on a course's page to hear about new class dates, we email you to confirm the signup first, and send alerts only once you confirm.
• CCW renewal follow-ups. If you complete a CCW class with us, we send you a one-time email roughly two years later (three years for classes completed on or after January 1, 2027) letting you know your permit is coming up for renewal, along with information about upcoming classes.

Every marketing email has an unsubscribe link, and unsubscribing from either stops both. Emails about a booking you've made are not marketing and are not affected by unsubscribing. We do not share, rent, or sell your email address to anyone else.

Text Message (SMS) Program

If you provide a phone number, we may ask: "Text me about this class — changes, delays, anything I need before the day. Class messages only, never marketing. Reply STOP any time. Msg & data rates may apply." You can say yes when you book, on a student's seat page, or by telling our staff by phone; the box is never ticked in advance.

• What you'll receive. If you say yes, you'll get one automated text the day before your class as a reminder; we don't send any other automated text messages. Our staff may also text you about a class you have booked, for example a change of time or place, a delay, or something you need before the day. We never text you about anything else, and never marketing.
• Texts you send us. Replies and other texts you send to our number are recorded with your booking and passed to our staff to answer.
• Person-to-person messages. Separately, you and your instructor may text each other directly, for example if you have a question before class. Message and data rates may apply to these messages as well.
• Message frequency. One automated reminder per class, plus any messages from our staff about that class.
• Cost. Message and data rates may apply, depending on your mobile carrier and plan.
• Consent is not required. You do not have to opt in to text messages to enroll in a class or to purchase anything from us. Whether or not you opt in, whoever booked your class still receives the reminder emails described above.
• How to opt out. You can decline when you book, untick the box on the seat page, ask our staff, or reply STOP to any text message to opt out at any time. A message asking us to stop in your own words is honored too. Reply START to opt back in, or HELP for help.
• We do not share your mobile information. No mobile information collected as part of this text messaging program will be shared with third parties or affiliates for marketing or promotional purposes. This does not apply to Twilio, our text messaging platform, which sends messages on our behalf, or to aggregators and carriers involved in delivering the messages.

We keep a record of each text we send and of each number's consent, including when it was given or withdrawn and how.

Opting in or out of text reminders does not affect our cancellation policy.

Who We Share Information With

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We share limited information with the following, solely to provide our services:

• Stripe, our payment processor, to process online payments and check them for fraud.
• Mailgun, our email service provider, which handles the content and recipient address of the emails we send you and reports whether they were delivered.
• Twilio, our text messaging platform, to deliver the class text messages described above, if you opted in.
• Laravel, which provides the server our website and its data run on (Laravel VPS) and our application monitoring service (Laravel Nightwatch). Nightwatch records technical details about each page request, such as the page visited, response time, and your IP address, to help us keep the site running reliably; it does not capture the content of forms you submit, and base pass details are removed before anything is sent to it.
• Backblaze, which stores encrypted nightly backups of our website's data and documents.
• Cloudflare Turnstile, a bot-protection service that processes browser signals and a verification token to help prevent spam. Its script loads on every page of our site, though the interactive challenge itself only appears on our contact form.
• Beale AFB, for classes held on base: the visitor list goes to 9th Security Forces, through the class's base sponsor when there is one, solely to request base passes, and the signed collection record goes to the base.

Training certificates are given to you; you submit them to your CCW issuing agency yourself.

How We Protect Information

Firearm makes, models, calibers, and serial numbers, base pass details, stored certificates, and scanned paperwork are encrypted when stored, and our backups are encrypted too. Only our staff can sign in to see student records, and each instructor sees the classes they teach.

How Long We Keep Information

• Bookings, student details, firearm details, class records, and certificates are kept so we can reissue a certificate or confirm a past qualification on request, and for our financial records. You can ask us to delete them at any time (see "Your Choices" below).
• Base pass details are deleted once the class's last day has passed, as described above.
• Unpaid online bookings that were never completed are deleted 30 days after they expire.
• Backups are kept for 30 days.
• Phone numbers stay with the booking and seat they were given for, and each number's text consent record is kept so we can honor an opt-out.

Cookies

Our website uses session cookies needed for basic site functionality, such as keeping your booking in progress while you complete checkout and keeping your place in an online written test. We use Cloudflare Turnstile to help prevent spam, as described above. We do not use advertising or analytics tracking cookies on our website.

Our website does not respond to "Do Not Track" browser signals.

Your Choices

You can ask us at any time to tell you what information we have on file about you, correct it, or delete it, by contacting us using the information below. Because training certificates rely on accurate records, we may need to keep certain information, such as your name, issuing agency, firearm details, and qualification results, to be able to reissue a certificate on request, and we keep payment records as our financial records require.

Cancellations and Refunds

If you cancel a seat before the cancellation cutoff, we refund what you paid for it, less a card processing fee. If you cancel at the cutoff or later, we keep the seat's non-refundable deposit. Your booking page and your reminder email give the cutoff and the fee for your class. If you are attending a class on Beale Air Force Base and do not receive a base pass because you did not provide the information required by 9th Security Forces, no refund will be issued, as that outcome is not within our control.

Changes to This Policy

We may update this policy from time to time, for example as our text messaging program or our classes change. We'll update the effective date above when we do. Continuing to enroll in our classes or respond to our messages after a change means you accept the updated policy.

Contact Us

Questions about this policy, your information, or our text messaging program? Contact us at sales@badmoonshooting.com or through our contact page.