Who we are
Manley and Colwell Auctions is a sealed bid (also known as silent bid) auction site for the purchase of firearms. Our website address is: http://manleyandcolwellauctions.com
Manley and Colwell Auctions is a Private Limited Company registered at Companies House.
Company Number: 16809660
Company Address: Blaenpentre Rhosygarth, Llanilar, Aberystwyth, United Kingdom, SY23 4SE.
General enquiries for Manley and Colwell Auctions can be sent to info@manleyandcolwellauctions.com
Manley and Colwell Auctions work in association with Aber Armoury. Their website address is https://aberarmoury.co.uk
Aber Armoury is a Private Limited Company registered at Companies House.
Company Number: 15260173
Company Address: Blaenpentre Rhosygarth, Llanilar, Aberystwyth, United Kingdom, SY23 4SE.
Telephone number: 07951 821678
Firearms Licensing
Aber Armoury is the Registered Firearms Dealer for Manley and Colwell Auctions.
Aber Armoury’s RFD number is 63/3361.
Aber Armoury is licensed to trade Section 1 and Section 2 firearms. We do not trade in Section 5 firearms.
Website build Third Party Policies
The website http://manleyandcolwellauctions.com is built on WordPress and uses the WooCommerce plug-in for a seamless shop experience. WooCommerce is delivered through Automatic. Additionally we use the Ultimate Auction Pro plug-in to deliver silent bid auctions.
We do not use WooCommerce Payments or Stripe or store your financial data on this site.
The data collected by third parties on our site is described below but their full policies can be viewed at the following links:
WordPress Privacy Policy: https://wordpress.org/about/privacy/
WooCommerce Privacy Policy: https://automattic.com/privacy/
Ultimate Auction Pro Privacy Policy: https://auctionplugin.net/privacy-policy/
Your personal data, what we collect and how we use it
When you first register we will request your email address. This will send an email from Manley and Colwell Auctions to the email address you specified, requesting you set a password.
We request you add a shipping and billing address in the My Account section to ensure we can process your payments and orders correctly.
Your past orders and bids will appear in your My Account section.
Manley and Colwell Auctions admin can view your Display Name and Email Address, Billing and Shipping Addresses, bids and past transaction data within the website backend. We can send password resets but cannot see your password.
Manley and Colwell Auctions has the ability to delete your bids. We will only do this at your request or in exceptional circumstances. You will receive an email to your account email address if a bid is deleted. If you would like us to delete your bid please contact us at info@manleyandcolwellauctions.com
We have the ability to block your account. If you win bids and do not pay on more than one occasion without good reason we will block your account. You will need to contact us to unblock it. Unblocking will be at our discretion.
The data we view and collect allows us to create a seamless bidding, purchasing and shipping experience, facilitates customers to bid and purchase items and manage the website specifically:
We require customers that bid to create an account to verify you have read our terms and conditions and that you are an adult over the age of 18. By agreeing to the terms you are declaring you are legally able to purchase a Section 1 or Section 2 firearm.
We require your email, billing and shipping addresses to prove your identity, invoice you and process your orders.
We need to retain your data to ensure we are tax compliant and to prevent fraudulent activities.
When we collect a firearm from a seller we require their name, contact details, details of the product we are picking up from you, your firearm licensing details to stay legally compliant and transfer the details to the new owner, and payment information to ensure we can pay you once your firearm has been sold.
We ask you to consent to cookies for third parties (such as Google) to analyse the user journey people take when they visit our website.
Please refer to the table below for further clarity:
| Purpose of Processing | Personal Data Used | Lawful Basis | Justification |
| Account Registration and Auction Participation (Managing your bids, account, and identity) | Display Name, Email, IP Address, Account Details, Bid History. | Performance of a Contract | Processing is necessary to provide you with the auction service and allow you to bid/purchase items according to our Terms and Conditions. |
| Processing and Fulfilment of Orders (Invoicing, shipping, and confirming delivery) | Name, Billing & Shipping Addresses, Email, Phone Number, Order Details. | Performance of a Contract | Processing is necessary to complete the sale, process transactions, and deliver the goods you have purchased. |
| Firearms Compliance and Registration (Transferring firearms details to the new owner, using the RFD Gun Register) | Name, Contact Details, Firearm Licensing Details, Date of Birth. | Legal Obligation | Processing is necessary for us (and Aber Armoury as our RFD) to comply with UK law, specifically the Firearms Acts and associated regulations for Registered Firearms Dealers (RFDs). |
| Financial and Tax Record Keeping (Retaining order information for 6 years) | Name, Email, Billing/Shipping Addresses, Order Totals. | Legal Obligation | Processing is necessary to comply with legal requirements for tax, accounting, and anti-money laundering regulations in the UK. |
| Website Security and Fraud Prevention (Blocking accounts, sending password resets, using IP addresses for security checks) | IP Address, Account History, Transaction Data, Block Status. | Legitimate Interests | Our legitimate interest is protecting the integrity of our website, preventing fraud, maintaining the security of our systems, and ensuring fairness for all legitimate users. |
| Non-Essential Analytics and Embedded Content (Google Analytics, YouTube videos, social media embeds) | Usage Data, Cookies, Device Information, IP Address. | Consent | We rely on your explicit consent, obtained via our cookie consent banner, to use non-essential cookies and process your data for the purpose of improving the website user experience and content. You have the right to withdraw this consent at any time. |
How long Manley and Colwell Auctions retain your data
Inactive accounts (users who have not logged in or placed an order) will be deleted after 24 months. Any previous orders you have made will be converted to Guest Orders.
Pending or failed orders where you neglect to pay will be deleted after 60 days. If you fail to pay for a bid you have won on more than one occasion without good reason, we will block your account.
Cancelled orders (by yourself or Manley and Colwell Auctions) will be deleted after 7 days.
Refunded order information will be anonymised after 12 months.
Completed order information will be kept for 24 months before converting to anonymised data.
The above retention information relates to our website data. Data may be stored on other systems dependent on how you interact with Aber Armoury shop.
Contact Forms
The information shared in our contact forms is sent directly to info@manleyandcolwellauctions.com hosted on Google Workspace.
Analytics
This website uses Google Site Kit to analyse the journey users take when they visit our website. It feeds into Google Analytics, Google Search Console and Page Speed Insights all of which fall under Google’s general Privacy Policy. This can be viewed at https://policies.google.com/privacy?hl=en-GB
These tools allow us to improve your user journey and enhance our content for greater visibility in Google searches.
Please refer to the International Data Transfers section below to understand how your data is shared internationally with Google.
Embedded content from other websites
Content on this site may include embedded content (e.g. You Tube videos, social media sites, links to images and articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
Manley and Colwell Auctions share your data with Aber Armoury to stay compliant with Firearm Licensing rules and to process your orders, specifically:
When Manley and Colwell Auctions collect a seller’s firearm we input your name, date of birth, contact details, details of the firearm, licensing details and payment details into Aber Armoury’s Gun Register system as they are legally stored with Aber Armoury.
The Gun Register is provided by Epos Link. More information can be found at https://www.eposlink.co.uk/
We will not share your data with anyone else beyond those described in this privacy policy.
International Data Transfers
The personal data we collect is primarily processed and stored within the UK. However, to operate our website and use specific services, your data may be transferred to, and stored at, a destination outside the UK, specifically the United States of America (USA).
When we transfer your data outside the UK, we ensure a similar degree of protection is afforded to it by implementing at least one of the following legal safeguards:
Google Workspace and Google Analytics
For the data processed by Google (including your email communication, analytics, and IP addresses), the transfer to the USA is covered by one of the following:
- UK-U.S. Data Bridge: We rely on the UK Extension to the EU-U.S. Data Privacy Framework (UK-U.S. Data Bridge), provided that Google is a certified participant under this framework. This mechanism is recognised by the UK government as providing an adequate level of data protection.
- Standard Contractual Clauses (SCCs): Where the Data Bridge is not applicable, or for certain processing activities, Google provides the International Data Transfer Addendum to the EU Standard Contractual Clauses (SCCs), which contractually obligates Google to protect your personal data to the standard required by UK GDPR.
LiteSpeed Cache and QUIC.cloud
For data related to website caching and acceleration services provided by QUIC.cloud, which may involve processing in the United States, we rely on the following safeguard:
- Standard Contractual Clauses (SCCs): We have entered into a Data Processing Agreement with QUIC.cloud which incorporates the necessary Standard Contractual Clauses (SCCs) / International Data Transfer Addendum (IDTA) to ensure appropriate data protection when transferring data outside the UK.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
What rights you have over your data
If you have an account on this site, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us.
Under GDPR rules you have:
The right to be informed about how your personal data is being collected and used.
The right to access your personal data and get a copy of it.
The right to rectify your personal data if it is incomplete or inaccurate.
The right to ask for your personal data to be erased in certain circumstances. This does not include any data we are obliged to keep for administrative, legal or security purposes.
The right to restrict the processing of your personal data or for it to be restricted in certain circumstances.
The right to data portability, meaning you can request your personal data in a machine-readable format and have the right to transfer it to another organisation.
The right to object to the processing of your personal data for certain purposes.
The right not to be subjected to a decision based solely on automated processing including profiling.
Further information regarding your rights under GDPR can be found at https://ico.org.uk/your-data-matters/your-rights/
Please contact us for data related information at info@manleyandcolwellauctions.com
Security
This site has an active SSL certificate, forces all requests over HTTPS and has password protection to protect your personal data. The personal data that administrators can access has been described in this policy.
Our hosting service runs daily security checks, updates and malware scans, including for all themes and plug-ins.
Managing your Cookie Consent
We use a Cookie Consent Management Platform (CMP) provided by Complianz to ensure we meet UK legal requirements. This means that we seek your explicit, opt-in consent before setting any non-essential cookies on your device (such as those used for analytics and embedded content).
If you wish to change your preferences or withdraw your consent at any time, you can do so by clicking Manage Consent at the bottom right of the website page.
WordPress privacy
Comments
When visitors leave comments on the site, WordPress collects the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
If you leave a comment on our site, you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Visitor comments may be checked through an automated spam detection service.
WooCommerce privacy
WooCommerce collects information about you during the checkout process on our store.
What they collect and store
While you visit our site, WooCommerce will track:
- Products you’ve viewed: they use this to, for example, show you products you’ve recently viewed
- Location, IP address and browser type: WooCommerce uses this for purposes such as estimating taxes and shipping
- Shipping address: we’ll ask you to enter this so we can, for instance, estimate shipping before you place an order, and send you the order!
They also use cookies to keep track of basket contents while you’re browsing our site.
When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number and optional account information like username and password. We’ll use this information for purposes, such as, to:
- Send you information about your account and order
- Respond to your requests, including refunds and complaints
- Process payments and prevent fraud
- Set up your account for our store
- Comply with any legal obligations we have, such as calculating taxes
- Improve our store offerings.
If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.
We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for 6 years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses.
We will also store comments or reviews, if you choose to leave them.
Who on our team has access
Members of our website administration team have access to the information you provide us. For example, Administrators can access:
- Order information like what was purchased, when it was purchased and where it should be sent, and
- Customer information like your name, email address, and billing and shipping information.
Administrators have access to this information to help fulfil orders, process refunds and support you.
LiteSpeed Cache
This site utilises caching in order to facilitate a faster response time and better user experience. Caching potentially stores a duplicate copy of every web page that is on display on this site. All cache files are temporary, and are never accessed by any third party, except as necessary to obtain technical support from the cache plugin vendor. Cache files expire on a schedule set by the site administrator, but may easily be purged by the admin before their natural expiration, if necessary. We may use QUIC.cloud services to process & cache your data temporarily.Please see https://quic.cloud/privacy-policy/ for more details.
This privacy policy was last updated 13th November 2025.