Privacy Policy

1. What we collect

Depending on how you interact with us, we may collect the following categories of data:

• Order & shipping data. Name, email, shipping address, phone number (optional), billing descriptor preferences, and order history.
• Account data. Email address, encrypted password hash, login session tokens, and any saved addresses or wallet entries.
• Payment data. Card or wallet details are processed exclusively by our PCI-compliant payment processor (Stripe). KTRL never sees or stores full card numbers, CVVs, or bank credentials.
• Device & usage data. IP address, browser type, pages viewed, referring URL, approximate location (country/city), and timestamps, collected via first-party cookies and a privacy-respecting analytics tool.
• Support data. Whatever you choose to share when you email support@ktrlpatch.com.

2. Why we use it

We use the data above only to: (a) process and deliver orders; (b) prevent fraud and chargebacks; (c) respond to support requests; (d) send transactional emails (order confirmations, shipping updates, policy notices); (e) improve site performance and customer experience; and (f) meet legal, tax, and accounting obligations.

We do not use your data for behavioral advertising across other sites, and we do not sell or rent your personal information to third parties for marketing.

3. Discreet billing

Your bank or card statement will display the descriptor KTRL — never the product name or category. Shipping labels show only our warehouse address and the recipient address, with no product description on the outside of the package.

4. Who we share with

• Payment processor. Stripe (stripe.com) to authorize and capture payments.
• Shipping carriers. USPS, UPS, DHL, and regional last-mile partners depending on destination.
• Cloud & email vendors. For hosting, transactional email, and customer support tooling, all bound by data-processing agreements.
• Authorities. When strictly required to comply with valid legal process, court order, or applicable tax law.

5. Cookies

We use a small set of first-party cookies to keep you signed in, remember your cart, and measure site traffic. You can clear cookies in your browser at any time; doing so will sign you out and reset your cart.

6. Your rights

Depending on where you live, you may have the right to: access the data we hold about you; correct inaccurate data; request deletion; restrict or object to certain processing; and receive a portable copy of your data. To exercise any of these, email privacy@ktrlpatch.com from the address on file. We respond within 30 days.

7. Retention

Order data is retained for up to 7 years to meet tax, warranty, and chargeback-dispute obligations. Account data is deleted within 30 days of account closure, except where retention is legally required.

8. Security

We use 256-bit TLS across the site, hashed credentials, role-based access for staff, and quarterly third-party vulnerability scans. No system is perfectly secure, but we treat protection of customer data as a baseline obligation, not a feature.

9. Children

KTRL is an adult wellness product. We do not knowingly collect data from anyone under 18. See our Underage Exit page.

10. Changes to this policy

Material changes will be announced by email and a banner on the site at least 14 days before they take effect. The “Last updated” date at the top always reflects the current version.

11. Contact

Data Protection Officer · KTRL Wellness Inc. · privacy@ktrlpatch.com