Last updated: 1 August 2026
Who we are
TrueFit Socks, 10199 Dean Drive, Manassas, VA 20110, United States. For any privacy question, email support@truefitsocks.com.
What we collect
- Order information — name, email, phone, shipping address and the items you bought. We need this to ship your order.
- Payment information — processed directly by Stripe. We receive confirmation of payment and the last four digits of the card. We never see or store your full card number.
- Support correspondence — emails and calls, kept so we can help you properly.
- Usage data — pages visited, device type and approximate location from your IP address, used to keep the site working and understand what's useful.
What we do not do
We do not sell your personal data. We do not rent mailing lists. We do not share your details with third parties for their own marketing.
Who processes data on our behalf
- Stripe — payment processing (PCI Service Provider Level 1).
- Shipping carriers — receive your name and delivery address only.
- Email and hosting providers — store order confirmations and site data under contract.
Cookies
We use cookies that are strictly necessary for the checkout to function, and basic analytics cookies to see which pages help people. You can block cookies in your browser; the checkout may not work correctly if you block the necessary ones.
How long we keep data
Order records are kept for seven years to meet accounting and tax obligations. Support emails are kept for two years. Analytics data is retained for 14 months.
Your rights
Wherever you live, you can ask us to show you the data we hold about you, correct it, delete it, or stop using it for marketing. If you are in the UK, EU or EEA you have these rights under the GDPR; if you are in California you have equivalent rights under the CCPA. Email support@truefitsocks.com and we will respond within 30 days.
Marketing email
We only email you about your order unless you opt in to updates. Every marketing email has a one-click unsubscribe link that works immediately.
Security
The whole site runs over HTTPS with 256-bit SSL encryption. Payments are handled entirely inside Stripe's environment.
Children
This site is not directed at children under 16 and we do not knowingly collect their data.
Changes
If we change this policy we'll update the date at the top. Material changes will be announced by email to customers affected.
See also our terms & conditions and returns policy.