Privacy Policy

Who we are

Torch the Way is operated by Taste and Tidy LLC, trading as Torch the Way. Taste and Tidy LLC is the data controller for the personal information described in this policy, which means we decide why and how it is processed. You can reach us through our Contact page.

What we collect and why

Research inputs — details you provide about your business, customers, industry, competitors, and research question. Used to generate the report you requested (performance of our contract with you).

Contact details — your name and email address, where provided. Used to deliver your report, send recovery links, and respond to support requests (contract performance).

Order information — transaction identifiers, purchase status, and refund status received from our payment provider. Used to confirm entitlement, keep records, and handle refunds (contract performance and legal obligation).

Technical and usage data — device identifiers, browser-generated session identifiers, IP address, and basic usage or error telemetry. Used for security, fraud prevention, troubleshooting, and improving the service (our legitimate interests in running a secure, reliable product).

Marketing preferences — if you opt in, your email address is used to send occasional updates from Torch the Way (consent). You may withdraw consent or unsubscribe at any time.

Who we share information with

Paddle.com — Merchant of Record. Our order process is conducted by our online reseller Paddle.com, which acts as the Merchant of Record for all our orders and handles payments, billing, order management, tax compliance, invoicing, customer payment inquiries, and returns. Payment card details are collected and processed by Paddle; Torch the Way never receives or stores your full card number.

Service providers. Hosting and database infrastructure, artificial intelligence and web research providers used to produce your report, transactional email delivery, and error monitoring. These providers process information only as needed to provide the service to us.

Professional advisers and authorities. Legal, accounting, or similar advisers, and government or law enforcement authorities where we are required to disclose information by law.

We do not sell your personal information.

Retention

Generated Torch Reports and their associated research inputs are securely stored for up to 12 months so you can continue to access and receive them, after which they are deleted. Order and refund records are kept for as long as required for accounting, tax, and dispute-handling purposes. Support correspondence and marketing preferences are kept until no longer needed or until you ask us to delete them. Technical and security logs are kept for a short period and then deleted or anonymised.

Your rights

Subject to applicable law, you may request access to the personal information we hold about you, correction of inaccurate information, deletion of your information, restriction of or objection to certain processing, a copy of your information in a portable format, and withdrawal of consent for marketing at any time. You may also ask us not to sell or share your information — which we do not do. To make a request, use our Contact page; we will respond within one month. If you are in the UK or EEA, you may also complain to your local data protection supervisory authority.

Security

We use appropriate technical and organisational measures to protect your information, including encryption in transit, access controls, and secret access links for stored reports. No method of transmission or storage is completely secure, so please do not submit passwords, financial account information, confidential trade secrets, health information, or other highly sensitive personal information in your research answers.

Cookies and international transfers

We use only essential browser storage and cookies needed to keep your session, remember your answers between steps, and confirm your purchase. We do not use advertising cookies. You can clear this storage in your browser settings, though doing so may prevent access to a report on that device. Our providers are based in the United States and elsewhere, so your information may be transferred internationally; where required, we rely on appropriate safeguards such as standard contractual clauses.

We may update this policy as the service develops. The date above shows when it was last revised.