Privacy policy
How LTB Racing uses information to answer inquiries, run the store, service vehicles, and provide customer accounts.Last updated: October 18, 2026What this policy covers
This policy covers LTB Racing, LLC (California, USA), including ltbracing.com, shop.ltbracing.com, and invoice.ltbracing.com.
Information we use
We use the details you provide for inquiries, orders, appointments, repairs, and accounts: name, email, phone, addresses, messages, sign-in details, vehicle identifiers, service history, and related documents or photos. Hosting and security providers also process network and device information to deliver the sites and prevent abuse.
SMS sign-in and verification
Phone sign-in is optional. When you enter your own mobile number and request a code, we use it to send a one-time sign-in or registration code. We send one message per request, with another message only when you request a new code. Having a phone number on an existing customer record does not opt you in. SMS consent covers requested verification codes, not marketing. Message and data rates may apply. Reply STOP to stop SMS, START to resume delivery, or HELP for help. You can use email or Google sign-in instead. For support, email [email protected].
Mobile information and SMS consent
We do not sell, rent, or share mobile phone numbers or SMS opt-in and consent information with third parties or affiliates for marketing or promotional purposes. We provide phone numbers and verification messages to Twilio and delivery providers only as needed to deliver and protect the requested service or comply with law. SMS verification does not approve an estimate, authorize repair work, or authorize a payment.
Optional analytics and referral counts
The marketing site uses Google Analytics only after you accept optional analytics. It helps us understand visits and broad traffic sources, with advertising personalization disabled. You can reject analytics or change your choice using Privacy settings. We respect Global Privacy Control and Do Not Track browser signals. The store and invoice portal do not load Google Analytics.
Aggregate acquisition
We also count broad arrival sources such as Google, Instagram, Yelp, email, and direct visits. These counts use fixed categories rather than full referral URLs, click identifiers, cookies, or persistent visitor IDs. We do not connect these counts to customer accounts. Browser privacy signals also disable these optional counts.
Cookies and browser storage
Authentication, fraud prevention, your cart, sign-in preferences, theme preferences, and your analytics choice can use cookies or browser storage. Email-link sign-in temporarily stores the email you provide. Analytics cookies on the marketing site require your opt-in. Payment and authentication providers may use storage to deliver the services you request.
Providers and storage
We use Google Cloud for hosting and business data, self-hosted Logto for authentication, Twilio for SMS delivery, Google security services for abuse prevention, Cloudflare for delivery and security, Stripe for payments, Resend for email, and Xero for accounting. When enabled, ntfy delivers staff notifications about orders, approvals, and payments, which can include customer names and order references. Business records are held in our US Google Cloud database. Providers may process information in other locations under their own terms and our agreements. Stripe handles payment card details; LTB does not store your card number.
Estimate review with AI
Staff may use an external AI provider (OpenAI by default) to review estimate pricing and technical details. The automatic context excludes customer identity, estimate and authorization notes, supporting-document contents and links, and signatures. Staff are instructed not to paste private customer information into chat. Provider processing and retention depend on the applicable service terms and settings.
Diagnostics
Storefront browser crash reports use fixed error types, route labels, coarse browser categories, and generated code locations. They omit raw error messages and full page URLs. Reports go to our hosting logs, and selected sanitized alerts go to our operations inbox through Resend.
Records and your requests
We keep repair, order, invoice, and related records to meet legal, accounting, tax, security, and dispute obligations. You can ask to access, correct, or delete personal information. We may ask for details to verify your identity and may retain information that is required for those obligations; closing or archiving an account does not erase required business records.
Privacy requests and questions: [email protected]. For information about Google's processing, see Google's partner-site privacy information(opens in new tab).