Guard Theory

Privacy

What we collect, why, how long we keep it, and how to get it deleted.

What we collect

If you join the First Edition list we collect your first name and email address, and — only if you choose to give them — how long you have been training, your preferred sleeve length, and which products interest you. We also record when you joined, that you agreed to be emailed, and whether and when you confirmed your address from the link we email you. When we email you we keep a record of which message was sent.

If you contact us we collect your name, email address and whatever you write to us.

If you place an order we collect your email address, the name and postal address the parcel is going to, and a phone number for the shipping label. We keep those with a record of what you bought, what you paid, and each email we sent you about the order. Your card details are typed into our payment provider's page, not ours. They never reach us and we do not store them.

When you open your cart, go to pay, write to us or join the First Edition list, we count the requests coming from your network address, so that a script cannot flood any of them. We store a keyed hash of the address, never the address itself, and delete it after a day.

That is the entire list. We do not ask for a date of birth, and we do not ask for an address or a phone number unless something is being posted to you.

Why we collect it

The name and email exist so we can tell you when the First Edition is released and reply if you write to us. The optional answers exist so the first production run is split sensibly between sleeve lengths rather than guessed at. Order details exist so we can take payment, post the parcel to the right door, and answer you if something goes wrong with it.

We do not build advertising profiles, we do not track you across other sites, and we do not sell your details to anyone.

Who else handles it

Six companies each do one job for us, and each receives what that job needs.

Stripe takes payment and works out sales tax. You enter your card, email address, shipping address and phone number on Stripe's own page. Shippo buys the postage label, so it receives the name, address, phone number and email address for the parcel. Resend delivers our email, so it receives your email address and the message. Neon hosts the database all of this is stored in. Vercel hosts the site, so every request to it passes through Vercel. GitHub stores an encrypted copy of that database, taken each night and kept for fourteen days, so that it can be restored if something is lost.

How long we keep it

Waitlist details are kept until the First Edition has been released and you have been told, or until you ask us to delete them. An address that is never confirmed is not on the list, and it is deleted 30 days after we send the link. Messages sent through the contact form are kept while we deal with them and for as long afterwards as we need to answer a follow-up. Ask us to delete either and we will.

Our encrypted nightly backups are kept for fourteen days, so something we delete can remain in a backup until that backup expires.

Your data, and getting rid of it

Ask and we will tell you exactly what we hold about you, correct it, or delete it. There is no form and no reason required. Every email we send to the First Edition list carries a one-click unsubscribe. Emails about an order — the confirmation, the note that it is being prepared, the dispatch notice — are sent because you placed that order. They are not a mailing list, and placing an order does not add you to one.

If you are in the UK, EU or California, you have statutory rights to access, correction, deletion and portability. We apply the same standard to everyone regardless of where they live.

Analytics and tracking

This site sets no analytics cookies and loads no third-party tracking scripts. Nothing about your visit is sent to an advertising network.

If that ever changes, this page changes first, and nothing will load before you have agreed to it.