Privacy, with
nothing to hide.

Touch Grass Rest & Recreation Club Inc (“TGRX”) is the controller of personal information collected through this site. This policy is designed to meet the GDPR, UK GDPR, the California Consumer Privacy Act (as amended by the CPRA) and other applicable data protection laws worldwide.

• Inquiry details — name, email, organisation, and message you send through the partnership form.
• Access session data — an encrypted cookie confirming partner access; it contains no personal profile.
• Technical data — basic logs such as IP address, browser type, and timestamps, used for security.
• Preferences — display settings like light or dark mode, stored only in your browser.

We do not knowingly collect sensitive data, and we do not collect wallet addresses or payment details at this stage.

• To reply to partnership inquiries — legitimate interests or steps before a contract.
• To provide and secure partner access, including rate-limiting sign-in attempts — legitimate interests.
• To comply with legal obligations — legal obligation.

We do not sell or share your personal information for cross-context behavioural advertising, and we make no automated decisions with legal effect.

We use only strictly necessary cookies and browser storage: the partner session cookie (expires after 8 hours), sign-in tokens for studio members, and your theme preference. We use no advertising or third-party tracking cookies, so no consent banner is required.

We share information only with service providers that host our site, database, and infrastructure under contracts that require confidentiality and security, and with authorities where legally required. If TGRX is reorganised or acquired, information may transfer to the successor under this policy.

Our providers may process data outside your country. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK Addendum.

Inquiries are kept for up to 24 months after our last contact unless a partnership continues. Security logs are kept for a short period. Partner session cookies expire within 8 hours.

We use encryption in transit, encrypted session cookies, restricted database access, and attempt limits on sign-in. No system is perfectly secure, but we act promptly on any incident and notify you and regulators where the law requires.

Depending on where you live, you can ask to access, correct, delete, restrict, or port your data, object to processing, and withdraw consent. California residents may also know, delete, correct, and opt out of sale or sharing (we do neither), free from discrimination.

You can complain to your local data protection authority.

This site is not directed to anyone under 18, and we do not knowingly collect their information. If you believe a child has contacted us, let us know and we will delete it.

We will update this policy as TGRX evolves and change the “last updated” date. To exercise your rights or ask a question, use our club inquiries form with “Privacy” in your message. See also our Terms of Use.