Privacy Policy

Effective September 1, 2026. Covers forttroff.com and communications from forttroff.com.

1. Who is responsible for your data

forttroff.com ("forttroff.com", "we", "us"), 18047 Beach Blvd, #225, Huntington Beach, CA 92648, United States, operates forttroff.com and is the data controller (or "business" under California law) for the personal information described here. Contact our privacy team at info@forttroff.com with "Privacy" in the subject line, or call +1-714-933-7204. Our Privacy Officer for Canada and our Privacy Contact for Australia can be reached at the same address.

2. What we collect

Category	Examples
Identifiers and contact details	Name, email, phone number, shipping and billing address, account login, IP address, device identifiers
Order and payment information	Products purchased, order history, store credit balance, payment method type and last 4 digits (full card numbers are handled by our payment processors, never stored by us)
Communications	Emails, texts, reviews, questions, and support conversations you send us
Internet and device activity	Pages viewed, products viewed, cart activity, referring site, browser and device type, approximate location from IP address
Marketing preferences	Email and SMS subscription status, promotions used, affiliate or referral source
Age and identity verification	Confirmation that you meet the legal age to buy adult products where you live and, where we need it, identity documents used to verify an order (deleted after verification)
Inferences	Product interests derived from your browsing and purchases, used to personalize the site and our messages

Sensitive information. Shopping with us is personal, and we treat every order as confidential. Order data is used to fulfill your purchase, support you, keep your account secure, and tailor your experience on our own site, and for nothing else. California law lets you limit this use further at Your Privacy Choices. We do not collect government ID numbers, precise geolocation, biometrics, or health data.

3. Where it comes from

Directly from you when you browse, create an account, order, subscribe, review, or contact us. Automatically from your device through cookies and similar technologies. From our service providers (shipping, payment, fraud prevention). From advertising and analytics partners about how you found us. From affiliates and referral partners when you arrive through their link.

4. How we use it

• Process, ship, and provide support for your orders, exchanges, and store credit
• Run your account and remember your preferences
• Send order confirmations, shipping updates, and service messages
• Send marketing email and text messages when you have opted in (unsubscribe at any time)
• Personalize the site and recommend products
• Measure and improve the site, our products, and our marketing
• Advertise forttroff.com to adults on other platforms and measure those campaigns
• Detect and prevent fraud, abuse, and security incidents, and verify age
• Comply with law, respond to lawful requests, and enforce our Terms of Service

Legal bases (EU, UK, and where required). Performance of our contract with you (orders, account, support); our legitimate interests (site improvement, security, fraud prevention, direct marketing to existing customers where permitted); your consent (marketing to new subscribers, non-essential cookies, SMS); and legal obligation (tax, accounting, responding to authorities). You can withdraw consent at any time without affecting processing that happened before.

5. Who we share it with

We never sell your personal information for money. We share it only as described here.

• Service providers who work on our behalf under contract: our ecommerce platform (Shopify), payment processors, fraud screening, shipping carriers and fulfillment tools, email and SMS delivery, customer support, and hosting. They may use your data only to provide services to us.
• Advertising and analytics partners such as Google, Microsoft, Meta, TikTok, Snap, Reddit, and X, which receive device identifiers and site activity through cookies and pixels so we can measure our marketing and show relevant ads. Under California and some other US state laws, this counts as "sharing" for cross-context behavioral advertising or "targeted advertising", and you can opt out at Your Privacy Choices. We do not send your name, email address, or phone number to these partners for their own use, and we configure conversion tracking so that product-level detail is limited.
• Affiliate and referral partners receive confirmation that an order was placed through their link and the commissionable amount, not your identity. See our Affiliate Disclosure.
• Professional advisers, authorities, and successors where required by law, to protect our rights or safety, or in connection with a merger, acquisition, or sale of assets (your data would remain subject to this policy).

6. Cookies and advertising technology

We use cookies, pixels, and similar technologies for the site to function, to remember your cart and preferences, to understand how the site is used, and to advertise. Which technologies run depends on your choices: visitors in the EU, UK, and similar jurisdictions see a consent banner and non-essential cookies stay off until accepted; visitors in California and other US states with opt-out rights can opt out at Your Privacy Choices, and we honor the Global Privacy Control browser signal as a valid opt-out. Full details, including each category and the partners involved, are in our Cookie Policy.

7. How long we keep it

Order, payment, and tax records: 7 years from the last order or transaction to meet accounting and legal obligations. Account data: while your account is active and for 2 years after your last activity, unless you ask us to delete it sooner. Marketing preferences: until you unsubscribe, plus a suppression record so we do not contact you again. Analytics and advertising data: up to 26 months in aggregated or pseudonymous form. Support communications: 3 years. Identity verification documents: deleted after verification. Where a longer period is required by law or to defend a claim, we keep the minimum necessary.

8. Your rights by region

Wherever you live, you can access, correct, or delete the personal information we hold about you, unsubscribe from marketing, and ask questions about this policy by emailing info@forttroff.com with "Privacy" in the subject line. We verify requests by matching the details you provide to our records and may ask for more information to protect your account. You may use an authorized agent to make a request; we will ask for proof of authorization. We respond within 45 days in the US, 30 days in the EU, UK, Canada, and Australia, and we tell you if we need more time. We never discriminate against you for exercising your rights.

United States (California and other states)

If you live in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or another state with a comprehensive privacy law, you have the right to:

• Know what personal information we collect, use, and share, and access a copy
• Correct inaccurate information
• Delete your personal information, subject to legal exceptions
• Opt out of the sale or sharing of personal information and of targeted advertising, and opt out of profiling in furtherance of decisions with legal or similarly significant effects (we do not perform such profiling)
• Limit the use of sensitive personal information (California)
• Appeal a decision on your request by replying to our response; California residents may also contact the California Privacy Protection Agency

Opt out at Your Privacy Choices or by enabling Global Privacy Control in your browser. In the preceding 12 months we collected the categories listed in section 2, used them for the purposes in section 4, disclosed them to service providers for business purposes, and shared identifiers and internet activity with advertising partners for cross-context behavioral advertising. We did not sell personal information for money and have no actual knowledge that we sell or share the personal information of anyone under 16. We do not respond to "Do Not Track" signals because there is no common standard, but we do honor Global Privacy Control. See the Notice at Collection below.

European Union, European Economic Area, United Kingdom, and Switzerland

You have the right to access, rectify, erase, and receive a portable copy of your data, to restrict or object to processing (including an absolute right to object to direct marketing), to withdraw consent, and not to be subject to solely automated decisions with legal effect. We do not make such decisions. You may lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office). Because we ship to the EU from the United States, transfers are described in section 11.

Canada

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, you may access and correct your personal information, withdraw consent (subject to legal or contractual restrictions), and ask how your information is handled. Our Privacy Officer is reachable at info@forttroff.com. Personal information may be stored and processed in the United States. Complaints may be directed to the Office of the Privacy Commissioner of Canada.

Australia

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You may request access to and correction of your personal information by contacting us. We disclose personal information to service providers located in the United States and other countries listed in section 11, and we take reasonable steps to ensure they handle it in line with the APPs. If you believe we have breached the APPs, contact us first; we respond within 30 days. You may also complain to the Office of the Australian Information Commissioner. You can deal with us anonymously or under a pseudonym where practicable, though we need real details to ship an order.

9. California notice at collection

This is the notice required by the California Consumer Privacy Act at or before the point of collection. A standalone version lives at Notice at Collection.

Category collected	Purposes	Sold?	Shared for ads?	Retention
Identifiers and contact details	Orders, account, support, marketing, fraud prevention	No	Yes (device identifiers, IP)	7 years from the last order or transaction
Commercial information (orders)	Orders, support, personalization, analytics	No	Yes (limited conversion events)	7 years from the last order or transaction
Internet or network activity	Site operation, analytics, advertising	No	Yes	Up to 26 months
Geolocation (approximate, from IP)	Fraud prevention, shipping estimates, regional compliance	No	Yes	Up to 26 months
Inferences	Personalization	No	No	While account active plus 2 years
Sensitive personal information (order details)	Order fulfillment, support, fraud prevention, personalization on our site	No	No	7 years from the last order or transaction

Opt out of sharing or limit sensitive information at Your Privacy Choices.

10. Notice of financial incentive

When you subscribe to our email or SMS list we may offer a welcome discount or early access. Because this involves exchanging a benefit for your contact details, California law treats it as a financial incentive. You opt in by providing your email or phone number and can opt out at any time by unsubscribing; your store account and any store credit are unaffected. We estimate the value of your data at roughly the value of the discount offered, based on the average revenue a subscriber generates compared with a non-subscriber. Any loyalty or referral program we run will publish its terms and the same opt-in and opt-out mechanics.

11. International transfers

We are based in the United States and your data is processed there and in the countries where our service providers operate, including Canada, the European Union, the United Kingdom, Australia, and Singapore. For transfers from the EU, UK, and Switzerland we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and adequacy decisions where they apply, together with supplementary security measures. You can request a copy of the relevant clauses by emailing us.

12. Security

We protect your information with TLS encryption in transit, encryption at rest through our platform providers, access controls, and PCI DSS compliant payment processing. We never store full card numbers. No system is perfectly secure; if a breach affects you we will notify you and regulators as the law requires. See Secure Payments and Discreet Billing.

13. Age

forttroff.com is for adults only. We do not knowingly collect personal information from anyone under the legal age to buy adult products where they live. If you believe a minor has provided us information, email info@forttroff.com and we will delete it.

14. Changes and contact

We update this policy when our practices or the law change and post the new effective date at the top. For material changes we will notify subscribers by email or a site notice. Questions, requests, or complaints: info@forttroff.com (subject "Privacy"), +1-714-933-7204, or forttroff.com, 18047 Beach Blvd, #225, Huntington Beach, CA 92648, United States.

Common questions

Does forttroff.com sell my personal information?

No. We never sell your name, email, phone number, or order history for money. Advertising cookies count as "sharing" under California law and can be turned off at Your Privacy Choices.

Is my order history kept private?

Yes. Order data is confidential, used to fulfill your order and support you, and is never disclosed to third parties for their own purposes. Billing and shipping are discreet; see Secure Payments and Discreet Billing.

How do I delete my account and data?

Email info@forttroff.com with "Privacy" in the subject line. We verify the request and delete what the law allows us to delete, keeping only records we must retain for tax and accounting.

How do I stop marketing emails and texts?

Click unsubscribe in any email, or reply STOP to any text. Both take effect right away.

Do you honor Global Privacy Control?

Yes. When your browser sends a GPC signal we treat it as a request to opt out of sharing and targeted advertising for that browser.

Where is my data stored?

Primarily in the United States on our ecommerce platform and with our service providers. For EU and UK customers we use Standard Contractual Clauses and the UK Addendum to protect transfers.