Who we are
eShoot is a club management service for UK shooting clubs, operated by Teesweb UK Ltd, a company registered in England, of Unit A, 82 James Carter Road, Mildenhall, Bury St. Edmunds, IP28 7DE, England ("we", "us").
eShoot is used by shooting clubs to manage their memberships. For the personal data of a club's members, the club is the data controller and Teesweb UK Ltd acts as a data processor on the club's instructions. For data about club administrators' own eShoot accounts and billing, Teesweb UK Ltd is the controller.
What we collect
| Category | Examples |
|---|---|
| Account details | Name, email address, password (stored only as a secure hash) |
| Membership records | Member number, date of birth, telephone number, member photo, membership type and renewal dates |
| Firearms licensing details | Firearm and shotgun certificate numbers, issuing police force, firearms owned or used at the club, and an optional photograph of a firearm if the member chooses to add one |
| Attendance records | Dates and times of range visits, lanes used, firearms logged on each visit |
| Declarations | Annual declarations a member confirms (for example under Section 21 of the Firearms Act 1968), with the date and wording confirmed |
| Support messages | Emails and messages sent to a club's support inbox |
| Payment details | Club subscription payments are handled by Stripe; we never see or store card numbers |
The eShoot mobile apps collect no data beyond what is needed to sign in and display the member's own club records. The apps contain no advertising, no tracking, and no analytics identifiers.
Photographs
Photographs in eShoot are a member photo (used to identify a member at the range) and, optionally, a photograph of a firearm on its record. Firearm photographs are always optional. Nothing requires one, a member's profile is counted as complete without one, and one can be removed at any time.
We remove location and camera information from every photograph. Photos taken on a phone normally carry hidden metadata, which can include the exact GPS coordinates of where the photo was taken, along with the device make, model and timestamp. When a photo is uploaded to eShoot it is decoded and re-saved as a new image, so only the picture itself is kept. We never store the location a photograph was taken. This matters particularly for firearm photographs, which are often taken where a firearm is kept.
A firearm record belongs to its owner rather than to a single club, because the same firearm may be used at more than one club. If a member belongs to more than one club on eShoot, a photograph added to a firearm is visible to the administrators of each of those clubs, alongside the rest of that firearm's record.
Why we process it
- To provide the service — running club membership, attendance and firearms records on the club's behalf (performance of a contract).
- Legal obligations of clubs — Home Office approved clubs are required by firearms legislation to keep attendance registers and to notify police firearms licensing departments about certain membership events. eShoot processes the data needed for clubs to meet those duties (legal obligation).
- Service communications — renewal reminders, attendance notices and account emails sent on the club's behalf.
- Security and accountability — access controls, and audit logs of administrative actions (legitimate interests).
We do not sell personal data, and we do not use it for advertising.
Who we share it with
- Police firearms licensing departments — when a club sends a statutory notification (for example, members who have not attended for over 12 months or have not renewed), the notification is sent at the club's instruction and a record is kept.
- Service providers that host and run eShoot under contract: MongoDB Atlas (database), Render (application hosting), Amazon Web Services (photo storage), Resend (email delivery), Stripe (payments) and Twilio (SMS delivery, where a club enables it). Each processes data only to provide their service to us.
How long we keep it
Membership, attendance and firearms records are kept for as long as the club requires them, including any statutory retention period that applies to Home Office approved clubs. When a club leaves eShoot, its data is deleted. Audit records of statutory police notifications are retained as the club's evidence of compliance.
Staying signed in
When you sign in — with a password or an emailed sign-in link — we store a sign-in token on your device so you do not have to sign in again on every visit. By default this lasts until you sign out; you can choose a shorter session (1, 7, 30, 180 or 365 days) under your account settings. Signing out, changing your password, or using "sign out other devices" ends the session immediately, and your club or we can revoke it at any time. The token identifies your session only — it is not used for tracking or advertising.
Deleting your account
Members can request deletion of their online account at any time — through the app, the member portal, or by contacting their club or us at hello@eshoot.co.uk. Deleting your account removes your sign-in access and personal data that the club is not required to keep.
Your rights
Under UK GDPR you have the right to access your personal data, to have inaccuracies corrected, to request erasure (subject to the legal retention described above), to object to or restrict certain processing, and to data portability. For member records, requests are handled with your club as the data controller — contacting your club or us at hello@eshoot.co.uk will start the process either way.
You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Security
Data is held in a dedicated cloud database with encrypted connections. Passwords are stored only as secure hashes, integration credentials are encrypted at rest, access is role-based, and administrative actions are recorded in audit logs. Clubs can only ever access their own members' data.
Children
Club membership, including junior membership, is administered by each club under its own membership policies. eShoot does not knowingly collect data directly from children — junior members' records are created and managed by their club.
Changes to this policy
If we make material changes we will update this page and the effective date above, and notify clubs through the service.
Contact
Teesweb UK Ltd, Unit A, 82 James Carter Road, Mildenhall, Bury St. Edmunds, IP28 7DE, England · hello@eshoot.co.uk