1. Introduction

Turnandlevel respects the privacy of individuals who visit our website, purchase our products or contact us with enquiries. This Privacy Policy explains how we collect, use, disclose, retain and manage personal data in connection with our website and the sale of household hand tools and related accessories.

This policy applies to personal data processed through www.turnandlevel.com, including information provided when browsing our products, placing an order, making a payment or contacting our customer service team.

We process personal data in accordance with applicable Mexican data protection legislation and, where applicable, the EU General Data Protection Regulation (GDPR), relevant national data protection laws and other applicable requirements.

2. Data Controller

Turnandlevel acts as the data controller for personal data processed for the purposes described in this Privacy Policy.

Brand Name: Turnandlevel
Website: https://www.turnandlevel.com
Email: auditor@turnandlevel.com

For questions about this policy, personal data processing or requests concerning your data, please contact us by email.

3. Personal Data We Collect

Depending on how you use our website, we may collect the following categories of personal data:

Personal and Contact Information

  • Full name
  • Email address
  • Telephone number, where provided
  • Billing address
  • Delivery address

Order Information

  • Products purchased
  • Order reference and transaction date
  • Order value, currency and payment status
  • Delivery preferences and fulfilment records
  • Communications concerning orders, returns and refunds

Payment-Related Information

Payments on our website are processed by Stripe, which handles payment information in accordance with its applicable privacy documentation and contractual arrangements. Depending on the payment method and checkout process, payment-related information may include payment card details, transaction references and billing information.

We do not intend to collect or retain complete payment card details in our own order records where these are handled directly by Stripe.

Website Usage Information

When you visit our website, certain information may be collected automatically, including your IP address, browser type, device information, pages visited, access times and relevant website activity records.

Customer Communications

We may retain information contained in emails, contact forms and other communications you send to us, together with our responses, where necessary to handle your enquiry or maintain relevant business records.

4. How We Use Personal Data

We process personal data for the following purposes:

  • To receive, confirm and fulfil orders.
  • To process payments, refunds and related transaction records.
  • To communicate order confirmations and relevant purchase updates.
  • To respond to product enquiries and customer service requests.
  • To maintain accounting, tax and business records.
  • To administer website operations and understand general website usage.
  • To identify and address suspected fraudulent activity or misuse of our website.
  • To establish, exercise or defend legal claims.
  • To comply with applicable legal and regulatory obligations.
  • To send promotional communications where permitted by law and, where required, with your consent.

We limit the use of personal data to purposes that are relevant to the relationship with the customer and the applicable legal basis.

5. Legal Grounds for Processing

Where the GDPR applies, we rely on one or more of the following legal grounds, depending on the circumstances:

Contractual necessity: Processing information required to accept and fulfil an order, arrange delivery, issue a refund or respond to a request made before entering into a purchase contract.

Legal obligations: Processing records required for applicable tax, accounting, record-keeping or other legal obligations.

Legitimate interests: Processing reasonably necessary for customer service administration, website management, the prevention of fraudulent transactions and the establishment or defence of legal claims, provided that these interests do not override the individual’s rights and freedoms.

Consent: Processing based on consent where required, including certain promotional communications and the use of non-essential cookies or similar technologies.

Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect processing lawfully carried out before withdrawal.

Under Mexican data protection legislation, personal data will be processed in accordance with applicable requirements concerning information, consent, purpose limitation and the rights of data subjects.

6. Stripe Payment Processing

Turnandlevel uses Stripe as its payment processor to process online payments for purchases made through our website.

When you proceed to checkout, relevant information may be transmitted to Stripe to process your payment and support associated transaction activities. Depending on the payment method, this may include your name, email address, billing details, transaction amount, order reference and payment instrument information.

Stripe may process personal data as a processor acting on our instructions and may also act as an independent controller for certain activities, as described in its own privacy documentation.

Stripe may use relevant information to process payments, meet applicable legal obligations, manage payment-related enquiries and identify or address fraudulent activity, in accordance with its applicable terms and privacy practices.

Turnandlevel does not control all processing carried out independently by Stripe. For further information about Stripe’s handling of personal data, please consult the Stripe Privacy Policy and Stripe Privacy Centre.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support website functions, remember preferences, understand website usage and improve the browsing experience.

These technologies may include:

Essential Cookies: Used for functions required for website operation, such as maintaining a shopping basket and supporting checkout processes.

Preference Cookies: Used to remember selected website settings where available.

Analytics Cookies: Used to understand general visitor activity and website performance, where enabled.

Payment-Related Cookies: Stripe or other relevant service providers may use cookies or similar technologies in connection with payment processing, fraud prevention and related functions.

Where consent is required, non-essential cookies will only be activated after the relevant consent has been obtained. You may change your preferences through the cookie settings available on our website, where provided.

Further details about individual cookies, their providers and retention periods should be set out in our Cookie Policy.

8. Disclosure of Personal Data

We may disclose relevant personal data to the following categories of recipients where necessary for the purposes described in this policy:

  • Stripe, for payment processing and associated transaction activities.
  • Website hosting and website administration providers.
  • Delivery and fulfilment service providers.
  • Customer communication service providers.
  • Accounting, professional or legal advisers.
  • Public authorities, courts or regulatory bodies where disclosure is required by law.

We only disclose information relevant to the purpose of the disclosure and subject to applicable legal requirements.

We do not sell customers’ personal data as a business activity.

9. International Data Transfers

Turnandlevel operates from Mexico and sells products to customers in European markets. Personal data may therefore be processed in Mexico or other countries where our service providers operate.

Where personal data subject to the GDPR is transferred outside the European Economic Area to a country without an applicable adequacy decision, we will use an appropriate transfer mechanism where required by law. Depending on the circumstances, this may include standard contractual clauses and any additional measures required by applicable data protection rules.

The relevant safeguards and information about particular transfers may be requested by contacting auditor@turnandlevel.com.

10. Data Retention

Turnandlevel retains personal data only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal obligations, limitation periods and the need to establish or defend legal claims.

Our retention approach is as follows:

Order and Transaction Records: Order details, invoices, payment references and associated business records may be retained for up to seven years after the relevant transaction where required or justified by applicable accounting, tax, record-keeping or legal-claims requirements. The applicable period depends on the type of record and the law governing it.

Customer Service Correspondence: General enquiries and customer service correspondence are normally retained for up to 24 months after the enquiry has been closed, unless continued retention is necessary to resolve an outstanding matter or meet a legal obligation.

Website and Technical Logs: Routine website access and diagnostic logs are normally retained for up to 12 months, unless a longer period is reasonably required to investigate an incident, address misuse or comply with applicable law.

Marketing Preferences: Records relating to promotional consent and opt-out requests may be retained for as long as necessary to administer those preferences and demonstrate compliance with applicable requirements.

Legal Claims and Disputes: Relevant records may be retained until the matter is resolved and any applicable limitation period has expired, where continued retention is lawful and necessary.

Payment Provider Records: Stripe determines its own retention periods for information it processes in its capacity as an independent controller and may retain certain records to meet legal or regulatory obligations. Please consult Stripe’s privacy documentation for further information.

When personal data is no longer required, we will delete it or otherwise dispose of it in accordance with applicable requirements. Where records must be retained for a legal purpose after their original operational use has ended, access and further use will be restricted as appropriate.

11. Your Data Protection Rights

Subject to applicable law and any relevant exceptions, individuals may have the right to:

  • Request access to personal data held about them.
  • Request correction of inaccurate or incomplete information.
  • Request erasure of personal data where the applicable legal conditions are met.
  • Request restriction of certain processing activities.
  • Object to processing based on legitimate interests.
  • Request a copy of certain personal data in a commonly used, machine-readable format where data portability applies.
  • Withdraw consent where processing is based on consent.
  • Object to direct marketing and withdraw marketing consent at any time.
  • Lodge a complaint with the relevant data protection supervisory authority.

Under Mexican law, individuals may also exercise the applicable rights of access, rectification, cancellation and opposition, commonly referred to as ARCO rights.

These rights are subject to applicable legal conditions. For example, we may need to retain certain transaction records to comply with legal obligations even where a request for deletion has been made.

To exercise your rights, contact auditor@turnandlevel.com and describe your request. We may request information reasonably necessary to verify your identity before responding.

12. Marketing Communications

We may send information about our products or offers where permitted by applicable law and where any required consent has been obtained.

You may unsubscribe using the link included in a promotional email, where available, or contact auditor@turnandlevel.com to request that promotional communications stop.

We may continue to send non-promotional communications necessary to fulfil an order, provide requested customer service or meet legal obligations.

13. Data Protection and Confidentiality

Turnandlevel applies appropriate organisational and administrative measures intended to protect personal data against unauthorised access, unlawful processing, accidental loss, alteration or disclosure.

Access to personal data is limited according to business requirements. Relevant service providers may also be subject to contractual confidentiality and data-handling obligations.

No method of electronic transmission or data storage can be regarded as entirely free from risk. We review our data-handling practices as appropriate to the nature of the information and the purposes for which it is processed.

Where a personal data incident triggers a notification obligation under applicable law, we will provide the required notifications within the applicable timeframe.

14. Children’s Privacy

Our website is intended for individuals who are legally able to make purchases under the applicable rules in their jurisdiction. We do not knowingly seek to collect personal data from children in circumstances where doing so would be unlawful.

If you believe a child has provided personal data to us inappropriately, please contact auditor@turnandlevel.com so that we can review the matter and take appropriate action.

15. Third-Party Websites

Our website may contain links to external websites or services. Those websites operate under their own privacy policies and data-handling practices.

Turnandlevel is not responsible for the privacy practices of independent websites that we do not control. We encourage visitors to review the relevant privacy information before providing personal data to those services.

16. Changes to This Privacy Policy

We may update this Privacy Policy when our business practices, website functions or applicable legal requirements change.

The revised version will be published on www.turnandlevel.com with an updated revision date. Where required by applicable law, we will provide additional notice or seek consent for material changes to the processing of personal data.

17. Contact Us

For questions about this Privacy Policy, our handling of personal data or a request to exercise your data protection rights, please contact:


Email: auditor@turnandlevel.com

Please include sufficient information to help us understand your request. We will handle enquiries in accordance with the applicable data protection requirements.