Privacy Policy

Last updated: June 2026

We collect the minimum amount of personal information needed to take your order, ship it, and let you contact us. We never sell or rent your data.

What we collect

• Account info: email and a hashed password (we never see your plain password).
• Order info: shipping name, address, phone (optional), and the items you bought.
• Payment info: handled directly by our payment processor. Card numbers do not touch our servers — we only receive a transaction reference.
• Email correspondence: anything you send to support@touchline.fit lands in our inbox.
• Basic technical data: IP address, browser type, and pages visited, used for security and to detect abuse.

How we use it

• Fulfill and ship your orders.
• Send order confirmation, shipping, and delivery emails.
• Respond to your messages.
• Detect and prevent fraud.
• Comply with legal obligations (tax records, etc.).

Who we share it with

Only the third parties we need to run the business:

• Payment processor — to charge your card.
• Email service (Resend) — to send order and shipping emails.
• Shipping & fulfillment partners — to make and deliver your order.
• Hosting (Cloudflare and our VPS provider) — to serve the website.

We do not sell or rent your data. We do not share it for advertising.

Cookies

We use essential cookies only — to keep you signed in and remember your cart. We do not use third-party advertising trackers.

Data retention

Order records are kept for as long as is reasonable for warranty, accounting, and legal purposes (typically 7 years for tax records). You can delete your account at any time by emailing us; we will erase your account data within 30 days unless we are legally required to keep it.

Your rights

You can ask us to:

• Access the personal data we hold about you.
• Correct anything that is inaccurate.
• Delete your account and personal data.
• Export your data in a portable format.

Email support@touchline.fit with the request and we will respond within 30 days.

Security

Passwords are hashed with scrypt before storage. Connections are HTTPS-only. The site is fronted by Cloudflare for DDoS protection. We do our best, but no system is perfectly secure — if you suspect a breach, contact us immediately.

Children

This site is not directed at children under 13. We do not knowingly collect data from anyone under 13.

Changes

If we materially change this policy, we will update the date above and, where appropriate, notify you by email.

Contact

For any privacy question: support@touchline.fit.