Last updated October 27, 2026

Privacy policy

G Hands is a brand of Castro Medical Devices LLC (“G Hands”, “we”, “us”). This policy explains what we collect when you visit this site, pre-order a G Hands or join our early-access list, what we do with it, and the choices you have. Questions? Email info@theghands.com.

What we collect

When you pre-order: your name, email address, phone number, billing and shipping addresses, what you ordered (edition, colour, quantity), the amounts charged including shipping and tax, and a record that you agreed to the refund terms, with the time. Checkout runs on Stripe. Your card details go straight to Stripe; we never see or store your full card number.
When you join the early-access list: your email address and the date you signed up.
When you email or call us: whatever you choose to send, such as your order email and photos of a damaged unit. Please don’t send us medical records or other health details; we don’t need them.
When you browse: our hosting provider records standard server logs (IP address, browser, pages requested, time) to run and secure the site. We don’t use analytics, advertising cookies or tracking pixels.

The pre-order page keeps your selections in your browser’s session storage so they survive a canceled checkout. They stay on your device and are cleared when you close the tab or complete your order. Stripe Checkout sets its own cookies on its checkout pages to prevent fraud; see Stripe’s privacy policy.

How we use it

To take payment, make and ship your order, and send your receipt, shipping updates, any delay notice and your tracking number.
To answer your questions and handle damaged, defective or not-as-described units, refunds and payment disputes.
To calculate and pay sales tax and keep the business and tax records the law requires.
To prevent fraud and keep the site and our systems secure.
To email the early-access list about the G Hands launch. You can unsubscribe at any time by replying or emailing us. We won’t add pre-order customers to marketing emails without asking.

If you’re in the UK or EU, our legal bases are: performing our contract with you (orders), complying with legal obligations (tax and accounting records), our legitimate interests in preventing fraud and securing the site, and your consent (the early-access list), which you can withdraw at any time.

We don’t sell your personal information, and we don’t share it for targeted advertising. We share only what each service provider needs to do its job for us:

Stripe processes payments, calculates sales tax and sends receipts.
Supabase hosts our order and early-access database.
Vercel hosts this website and its server code.
Shipping carriers and fulfillment partners receive your name, shipping address and phone number to deliver your order.
Our email provider delivers the messages we send you.

Charity Edition charities receive our donation, not your personal information. We may also disclose information when the law requires it, to protect our rights or someone’s safety, or to a buyer if the business is sold, under this policy’s protections.

These providers are based in the United States, so your information is processed and stored in the US. Where the law requires it, we rely on the providers’ standard contractual safeguards for those transfers.

How long we keep it

We keep order records for as long as we need them to fulfil your order and handle any claim, and then for as long as tax and accounting law requires (generally up to 7 years). We keep early-access emails until you unsubscribe or ask us to remove you. Server logs are kept for a short period by our hosting provider.

How we protect it

The site and all our services use encrypted connections (HTTPS). Payments are handled by Stripe, a PCI DSS Level 1 provider. Our database can only be read by our own server code and our team; the website itself has no access to it. No system is perfectly secure, but we limit what we collect and who can see it.

Your rights

You can ask us to tell you what personal information we hold about you, give you a copy, correct it or delete it, and you can unsubscribe from the early-access list at any time. We’ll keep only what the law requires us to keep, such as tax records of a completed order.

California residents have the right to know, access, correct and delete personal information, and to opt out of its sale or sharing (we do neither). UK and EU residents also have the rights to object, to restrict processing and to data portability, and may complain to their data protection authority. We won’t treat you differently for using any of these rights.

To make a request, email info@theghands.com from the email address you used with us (so we can confirm it’s you). We’ll respond within 30 days, or sooner where the law requires.

Children

This site isn’t directed to children under 13, and we don’t knowingly collect their personal information. Buyers must be adults; a parent or guardian can order for a younger player. If you believe a child has given us information, email us and we’ll delete it.

Changes to this policy

If we change this policy, we’ll update the date at the top of this page. If a change materially affects how we use information we already hold, we’ll tell you by email before it takes effect.

Contact

Castro Medical Devices LLC, doing business as G Hands
Email: info@theghands.com · Phone: 707 757 4922