Legal

Privacy Policy

Effective September 21, 2026

1. 01Information We Collect

   We collect information you give us directly and information generated by using the platform:

   • Account information: name, email, phone, and shipping address, submitted when you create an account.
   • Order information: what you ordered, shipping and billing address, and order history.
   • Payment information: handled entirely by Stripe, our payment processor — we receive confirmation that a payment succeeded, never your full card number.
   • Preferences: your chosen theme and color palette, and your cart contents, stored locally in your browser rather than on our servers.
   • Communications: anything you send us directly, such as a support or verification-related email.

2. 02How We Use Information

   • To process, fulfill, and ship orders, and to communicate about them.
   • To provide customer support and respond to inquiries.
   • To detect and prevent fraud, abuse, or violations of our Terms of Service.
   • Internally, to understand order and revenue trends — including AI-assisted summaries our own staff use to review business performance. This never involves sharing your personal information with an outside party for their own purposes.

3. 03Who We Share Information With

   We share information only where it's needed to run the platform:

   • Stripe, to process payments.
   • Supabase, our database and authentication provider, which stores account and order data on our behalf.
   • Manufacturers or suppliers who fulfill specific orders receive the shipping information necessary to do so.

   We do not sell your information, and we do not share it with third parties for their own advertising or marketing purposes.

4. 04Cookies & Local Storage

   We use your browser's local storage to remember your selected theme/color palette and the contents of your cart between visits. This is functional, not tracking or advertising technology, and it never leaves your device — we don't read it, and it isn't shared with anyone.

5. 05Data Retention

   We keep account and order records for as long as your account is active and for a reasonable period after, to satisfy tax, accounting, and legal recordkeeping obligations tied to sales of regulated products.

6. 06Your Rights & Choices

   You can review and update most of your account information from your account settings. To request a copy of your data, a correction, or deletion, email buggeyandco@gmail.com — we'll respond directly, noting that some order records may need to be retained for the legal reasons above even after an account is closed.

7. 07Data Security

   We apply layered technical safeguards appropriate to the information we hold:

   • All traffic to and from the platform is encrypted in transit (HTTPS/TLS); we do not serve the site over an unencrypted connection.
   • We never receive, process, or store your full card number — Stripe, a PCI-DSS-compliant payment processor, handles that entirely. We hold only Stripe's confirmation that a charge succeeded.
   • Account and order data is stored with Supabase, our database provider, encrypted at rest, and access-controlled at the database level so an account can only reach its own records.
   • Administrative tools — order management, pricing, supplier data — require a separate staff login and are inaccessible to customer accounts.
   • Passwords are never stored or visible to us in plain text; authentication is handled by Supabase's auth system.

   No system is perfectly secure. If you believe you've found a security issue, email buggeyandco@gmail.com and we'll look into it promptly.

8. 08Age Restriction

   This platform is not directed at, and is not intended to be used by, anyone under 21. We don't knowingly collect information from minors.

9. 09Changes to This Policy

   We may update this policy as the platform changes. We'll update the effective date above whenever we do.

10. 10Contact

    Questions about this policy: buggeyandco@gmail.com — Buggey & Co., Las Vegas, Nevada.