Privacy Notice

Who is the controller

Scorch LLC, trading as Scorch from 118 Sawtooth Alley, 80424 Breckenridge, United States, is the data controller for the personal data described on this page. Contact us at hello@scorch.co for anything relating to your data.

What we collect

When you use this site, we collect data through three routes:

• The booking form — name, email, phone, preferred dates, board type, height, weight, boot size, your design brief, and budget band.
• Reference images you upload — photos, sketches, or other images you attach to a booking request so the artist has something to design from.
• The contact form — name, email, and whatever you write in the message field.

We don't collect payment details through this site — deposits and balances are handled separately, once a booking is confirmed.

Why we collect it (legal basis)

• Booking form data is collected to take the steps you request before entering a contract with us — confirming a session date — and, once booked, to perform that contract.
• Reference images are collected on the same contractual basis: we can't design your board without them. You are responsible for having the right to share any image you upload — see the Terms page.
• Contact form data is collected under our legitimate interest in answering questions sent to us, balanced against your right to privacy — we only use it to reply.

How long we keep it

• Booking requests that don't turn into a session: kept for 12 months, then deleted.
• Confirmed booking and order records, including invoices: kept for as long as US and Colorado tax and business-records law requires business records to be retained.
• Reference images: kept as a build record for as long as the warranty on your board runs, then deleted — sooner on request.
• Contact form messages: kept for 12 months after the conversation ends.

Who processes it

This site is hosted on Cloudflare's infrastructure, which processes standard technical data (like IP addresses) as part of serving the site and any form submissions. We do not currently use any analytics service or third-party email platform — this MVP has neither wired up. If that changes, this notice will be updated first, and any new processor will be listed here by name.

Your rights

If you're a Colorado resident, you have rights over your personal data under the Colorado Privacy Act. You can:

• Access the personal data we hold about you.
• Correct anything inaccurate or incomplete.
• Delete your data, where we have no overriding reason to keep it.
• Port your data — get a copy in a portable format.
• Opt out of the sale of personal data, targeted advertising, or profiling — though this MVP doesn't do any of those things today.

How to exercise your rights

Email hello@scorch.co telling us which right you're exercising. We'll respond within 45 days. We may ask for information to confirm you are who you say you are before acting on the request.

Contacting the Colorado Attorney General

If you're unhappy with how we've handled your data, we'd rather you told us first so we can fix it. You also have the right to contact the Colorado Attorney General's office, which enforces the Colorado Privacy Act, independently of anything we do.

Cookies

This MVP sets no non-essential cookies — no analytics, no advertising or tracking pixels, nothing beyond what's strictly necessary to serve the page. If we add analytics later, this section will be updated to name the tool and, where the law requires it, we'll ask for your consent before it runs.