Privacy Policy

This Privacy Policy explains how Torrnado ("Torrnado," "we," "us," or "our") collects, uses, discloses, and protects personal data across our website (torrnado.uk) and our products, including Tor (tor.torrnado.uk) and Velmont (velmont.torrnado.uk), together with any future products we launch (the "Services"). By using the Services, you agree to the practices described here.

1. Information We Collect

We collect information you provide directly to us, and information collected automatically when you use our Services.

Information you provide

• Contact details: name, email address, phone number, mailing/billing/shipping address.
• Account information: username, password (stored in hashed form), and profile details.
• Order and transaction details: items purchased, subscription plan, order history.
• Payment information: processed directly by our payment processor, Stripe. We do not store full card numbers on our own servers — see Section 4.
• Communications: messages you send us via contact forms, email, or support channels.

Information collected automatically

• Device and usage data: IP address, browser type, device identifiers, pages viewed, and referring URLs.
• Streaming activity (Tor): titles viewed, watch history, playback preferences, and device used to stream.
• Cookies and similar technologies: used for authentication, remembering preferences, and analytics. You can control cookies through your browser settings.

2. How We Use Your Information

• To provide, operate, and maintain the Services, including processing orders and subscriptions.
• To communicate with you about orders, account activity, updates, and — where you've opted in — marketing.
• To personalize content and recommendations (for example, within Tor).
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with legal obligations and enforce our terms.
• To improve and develop new products and features.

3. How We Share Your Information

We do not sell your personal data. We share information only as follows:

• Service providers: companies that help us operate the Services, including payment processing (Stripe), hosting, email delivery, shipping/fulfillment (for Velmont orders), and analytics.
• Legal requirements: when required by law, regulation, legal process, or governmental request.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality arrangements.
• With your consent: for any other purpose disclosed to you at the time we collect the information.

4. Payment Processing

All payments are processed securely by Stripe, Inc. We do not store your full card number, CVC, or other sensitive payment details on our own servers. Stripe's use of your information is governed by Stripe's own Privacy Policy. We retain only the transaction records necessary for order history, accounting, tax, and refund purposes.

5. Data Retention

We retain personal data only as long as necessary to provide the Services, comply with our legal obligations (including tax and accounting requirements), resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymize it.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent for marketing communications at any time.

To exercise any of these rights, contact us using the details in Section 10.

7. Data Security

We use industry-standard technical and organizational measures — including encryption in transit, access controls, and secure payment processing through Stripe — to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

Our Services are not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your own, including where our service providers (such as Stripe and our hosting providers) operate. We take steps to ensure such transfers comply with applicable data protection laws.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at privacy@torrnado.uk.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last updated" date above. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.