Privacy policy
How LTB Racing uses information to answer inquiries, run the store, service vehicles, and provide customer accounts.Last updated: November 3, 2026Privacy settings
You can change your optional analytics choice here at any time.
Checking your saved choice.
What this policy covers
This policy covers LTB Racing, LLC (California, USA), including ltbracing.com, shop.ltbracing.com, invoice.ltbracing.com, and email you send us.
Information we use
We use the details you provide for inquiries, orders, appointments, repairs, and accounts: name, email, phone, addresses, messages, sign-in details, vehicle identifiers, service history, and related documents or photos. Hosting and security providers also process network and device information to deliver the sites and prevent abuse.
SMS sign-in and verification
Phone sign-in is optional. When you enter your own mobile number and request a code, we use it to send a one-time sign-in or registration code. We send one message per request, with another message only when you request a new code. Having a phone number on an existing customer record does not opt you in. SMS consent covers requested verification codes, not marketing. Message and data rates may apply. Reply STOP to stop SMS, START to resume delivery, or HELP for help. You can use email or Google sign-in instead. For support, email [email protected].
Order update texts
If we offer order updates by text, such as shipping notices and payment reminders, we send them through Twilio only to a mobile number whose owner agreed to receive them, and staff approve each message before it is sent. Agreeing to sign-in codes, or giving us a phone number for an order or customer record, does not sign you up. Message and data rates may apply. Reply STOP to stop these texts, or ask us to stop them.
Mobile information and SMS consent
We do not sell, rent, or share mobile phone numbers or SMS opt-in and consent information with third parties or affiliates for marketing or promotional purposes. We provide phone numbers and the texts we send to Twilio and delivery providers only as needed to deliver and protect the requested service or comply with law. SMS verification does not approve an estimate, authorize repair work, or authorize a payment.
Optional analytics and referral counts
The marketing site uses Google Analytics only after you accept optional analytics. It helps us understand visits and broad traffic sources, with advertising personalization disabled. You can reject analytics or change your choice using Privacy settings. We respect Global Privacy Control and Do Not Track browser signals. These choices and signals do not turn off error monitoring. The store and invoice portal do not load Google Analytics.
Aggregate acquisition
We also count broad arrival sources such as Google, Instagram, Yelp, email, and direct visits. These counts use fixed categories rather than full referral URLs, click identifiers, cookies, or persistent visitor IDs. We do not connect these counts to customer accounts. Browser privacy signals also disable these optional counts.
Cookies and browser storage
Authentication, fraud prevention, error monitoring, your cart, sign-in preferences, theme preferences, and your analytics choice can use cookies or browser storage. Email-link sign-in temporarily stores the email you provide. Analytics cookies on the marketing site require your opt-in. Payment and authentication providers may use storage to deliver the services you request.
Providers and storage
We use Google Cloud for hosting and business data, Google Workspace for LTB's email, self-hosted Logto for authentication, Twilio for SMS delivery, Google security services for abuse prevention, Cloudflare for delivery and security, Stripe for payments, Resend for email our systems send, Xero for accounting, Slack for staff notifications, and the AI service providers described below. Sentry processes error reports, performance data and masked recordings of failed sessions to help us fix software failures. Business records are held in our US Google Cloud database. Providers may process information in other locations under their own terms and our agreements. Stripe handles payment card details; LTB does not store your card number.
Email you send us
LTB's mailboxes use Google Workspace (Gmail). Our systems, with AI service providers, read new mail that arrives in them, including its text, to sort it and decide whether it needs attention, and open a work item for staff when it does. Our records keep each message's sender, recipients, subject, and Gmail's short preview, along with staff notes, AI summaries, and reply drafts about it; the full message stays in Gmail. Replies our systems draft are saved in the same Gmail thread and sent only after a staff member approves them. Staff-approved order updates, such as shipping notices and payment reminders, are emailed through Resend. When you tell us you paid by Zelle, we compare your claim with our bank's Zelle alert emails, which show the payer's name, the amount, and any memo.
Staff notifications in Slack
When enabled, our systems post staff notifications and approval requests to LTB's private Slack workspace for staff. These notifications may include customer and order details.
AI services
We use AI service providers to help us run the business, for example to sort email and draft replies, prepare quotes, and review records. They may process information we hold, such as emails you send us, customer, vehicle, order, and accounting records, and system logs. Staff review anything these services draft before it is sent to you. Provider processing and retention depend on the applicable service terms and settings.
Estimate review with AI
Staff may use an external AI service provider to review estimate pricing and technical details. The automatic context excludes customer identity, estimate and authorization notes, supporting-document contents and links, and signatures. Staff are instructed not to paste private customer information into chat. Provider processing and retention depend on the applicable service terms and settings.
Diagnostics
We use error reports to find and fix software failures and help affected customers. When something fails, Sentry can receive the error message and where in our software it happened, the page address, request details such as headers and your network address, your browser and device type, the software release, and recent activity such as pages visited, clicks, console messages and network requests. Reports can also include the data being processed when the failure happened, such as form entries and request contents. When you are signed in, reports identify your account and linked customer record, including your name and email. Reports can also name the customer an order or shared document belongs to, even when staff or someone with the link was using the site. If an error occurs on most pages, Sentry also receives a recording of your visit from about a minute before it until you leave or go idle, up to 60 minutes. Your browser holds this briefly during your visit and sends it only after an error. Text, images and typed entries are set to be hidden; layout, mouse movements, clicks and page addresses are not. Visits opened from a private shared-document link are not recorded. For a sample of page loads and server requests, even when nothing fails, Sentry receives timing data with the same details. Automatic filtering removes passwords, authentication tokens, authentication cookies, card numbers and private document link codes it can detect. Sentry keeps this data for about 30 days on our current plan, as our service provider, and we do not sell it. Error monitoring has no on-site off switch; email us with questions. Server failures are also recorded in our Google hosting logs. Selected alerts go to our operations inbox and, when enabled, LTB's private Slack workspace for staff, and can include a customer name and an internal record link. We privately upload build files that make error locations readable.
Records and your requests
We keep repair, order, invoice, and related records to meet legal, accounting, tax, security, and dispute obligations. You can ask to access, correct, or delete personal information. We may ask for details to verify your identity and may retain information that is required for those obligations; closing or archiving an account does not erase required business records.
Privacy requests and questions: [email protected]. For information about Google's processing, see Google's partner-site privacy information(opens in new tab).