Privacy Notice
Information We Collect About You
We collect the personal information you provide to us when you purchase our products or visit our website. The categories of information we may collect include:
- Personal Identifiers, including name, email address, postal address, telephone number, and online Identifiers
- Internet Activity
- Commercial Information, including purchases
- Financial Information, including credit or debit card number
- Location Information, including general location data
- Physical and Audio Data, including physical characteristics or descriptions
- Protected Classifications and Other Personal Characteristics, including age and sex, gender, or gender identity
- Consumer Communications, including direct communications with your consumers
- Inferences from Other Data, including inferences created from other personal information collected
Browser Cookies
We use cookies to create a better experience for you on our site. For example, cookies prevent you from having to login repeatedly, and they help us remember items you've added to your cart. We also use third-party cookies, which are cookies placed by third parties for advertising and analytics purposes. You can control these cookies through your browser settings.
Information from other sources
We may collect personal information about you from third-party sources, including Retail Partners.
The categories of information we may collect include:
Retail Partners
- Personal Identifiers, including Name, Email address, Postal address, and Telephone number
- Commercial Information, including Purchases
How long we keep your data
We do not retain data for any longer than is necessary for the purposes described in this Policy.
We generally retain data according to the guidelines below.
| Type of Data | Retention Period |
|---|---|
| Cookies and online data we collect while you use our website, including Online Identifiers, Internet Activity, General location data | We delete or anonymize data concerning your use of our website within 2 years of collecting it. |
| Data we collect in order to process and ship orders you place with us, including Name, Email address, Postal address, Telephone number, Purchases, Credit or debit card number | We keep personal information related to products and services you purchase for as long as the personal data is required for us to fulfill our contract with you, and for 7 years from your last purchase with us. We may keep data beyond this period in anonymized form. |
| Data we collect when you contact us for customer support and other inquiries, including Name, Email address, Telephone number, Purchases, Direct communications with your consumers | We keep customer feedback and correspondence with our customer service for up to 7 years to help us respond to any questions or complaints. We may keep data beyond this period in anonymized form. |
| Data we collect when you sign up for promotional and marketing communications, including Name, Email address, Postal address, Telephone number, Online Identifiers, Internet Activity, Purchases, General location data, Physical characteristics or descriptions, Age, Sex, gender, or gender identity, Direct communications with your consumers, Inferences created from other personal information collected | Where you have signed up to receive promotional and marketing communications from us, we will retain any data collected until you opt out or request its deletion. We may keep data beyond this period in anonymized form. We will further retain a record of any opt-outs in order to prevent sending you future communications. |
| Data we collect when you review our products, answer surveys, or send feedback, including Name, Email address, Purchases, Direct communications with your consumers | We retain review, survey, and feedback data for up to 7 years following your last contact with us. We may keep data beyond this period in anonymized form to help improve our products and services. |
| Data we collect in connection with privacy requests, including Name, Email address, Online Identifiers | We retain records related to privacy requests as long as necessary to comply with our legal obligations. |
| Data we collect for security purposes, including Name, Email address, Online Identifiers | We retain security-related data as long as necessary to comply with our legal obligations and to maintain and improve our information security measures. |
Why we process your information
We process personal information for the following business and commercial purposes:
- Analyzing Data
- Conducting Surveys
- Creating Customer Profiles
- Delivering Targeted Ads
- Fulfilling Customer Orders
- Improving Our Products & Services
- Internal Business Operations
- Marketing Our Products & Services
- Meeting Compliance & Legal Requirements
- Operating Our Website or Mobile Apps
- Preventing Fraud
- Processing Payments
- Providing Customer Support
- Providing Cybersecurity
- Sending Promotional Communications
- Storing and Managing Data
- Tracking Purchases & Customer Data
How we disclose your information
We may disclose personal information about you for business and commercial purposes when you purchase our products or visit our website:
| Personal Information Category | Categories of Service Providers | Categories of Third Parties |
|---|---|---|
| Personal Identifiers | Business Operations Tool, Collaboration & Productivity Tools, Commerce Software Tools, Data Analytics Providers, Engineering Contractors, Governance, Risk & Compliance Software, Retail Partners, Sales & Marketing Contractors, Sales & Marketing Tools, and Shipping Services | Ad Networks, Commerce Software Tools, Data Analytics Providers, Fraud Prevention Tools, Payment Processors, and Shipping Services |
| Internet Activity | Commerce Software Tools, Engineering Contractors, Sales & Marketing Contractors, and Sales & Marketing Tools | Ad Networks, Commerce Software Tools, and Data Analytics Providers |
| Commercial Information | Business Operations Tool, Commerce Software Tools, Data Analytics Providers, Retail Partners, and Sales & Marketing Tools | Ad Networks, Commerce Software Tools, Data Analytics Providers, Fraud Prevention Tools, and Payment Processors |
| Financial Information | Commerce Software Tools | Fraud Prevention Tools and Payment Processors |
| Location Information | Business Operations Tool, Commerce Software Tools, Data Analytics Providers, Engineering Contractors, Governance, Risk & Compliance Software, Retail Partners, Sales & Marketing Contractors, Sales & Marketing Tools, and Shipping Services | Ad Networks, Commerce Software Tools, Data Analytics Providers, Fraud Prevention Tools, Payment Processors, and Shipping Services |
| Consumer Communications | Commerce Software Tools and Sales & Marketing Tools | None |
EEA/UK (GDPR)
This section provides additional information for people in the European Economic Area (EEA) or United Kingdom (UK). The terms used in this section have the same meaning as in the General Data Protection Regulation and the UK Data Protection Act (GDPR). The term “personal information” as used in this notice has the same meaning as “personal data” in the GDPR.
Collection and Disclosure of Personal Data
The personal data we collect and how we share it is described above in our Privacy Policy.
We may disclose your personal information to the following third party controllers for business purposes: Signifyd, DHL, PayPal - Pay with PayPal, Venmo, Pay Later, Google Pay, Amazon Pay, USPS, Google Ads, Pinterest Ads, Microsoft Ads, Facebook Ads, Instagram Ads, Amazon Advertising, Results.is, Shop Pay. To understand how these parties handle your data, please refer to their respective privacy policies.
Cookie Notice
We use cookies to improve your experience on our site and to allow us and third parties to personalize the marketing content you see on other websites and social media. Website visitors from GDPR regions can control cookie settings. Manage your region specific consent settings here.
Essential Cookies
We use these cookies for things like security, logins, site errors, and processing payments. We can't turn these necessary cookies off, but you can control them in your browser.
| Cookie Name | Provider | Duration |
|---|---|---|
| _cmp_a | Shopify | 1 Day |
| _tracking_consent | Shopify | 1 Year |
| cart_currency | Shopify | 14 Days |
| keep_alive | Shopify | 31 Mins |
| secure_customer_sig | Shopify | 1 Year |
| shopify_pay_redirect | Shopify | 1 Hour |
| thx_guid | Signifyd | 1 Year 1 Month 4 Days |
| tmx_guid | Signifyd | 1 Year 1 Month 4 Days |
Analytics Cookies
These cookies tell us how you use our sites and apps, and provide information to help us improve your experience.
| Cookie Name | Provider | Duration |
|---|---|---|
| _clck | Microsoft Clarity | 1 Year |
| _clsk | Microsoft Clarity | 1 Day |
| _ga | Google Analytics | 1 Year 1 Month 4 Days |
| _ga_HTVVRBFDL8 | Google Analytics | 1 Year 1 Month 4 Days |
| _gat | Google Analytics | 2 Mins |
| _gid | Google Analytics | 1 Day |
| _isuid | Searchspring | 1 Year |
| _landing_page | Shopify | 14 Days |
| _orig_referrer | Shopify | 14 Days |
| _shopify_s | Shopify | 31 Mins |
| _shopify_sa_p | Shopify | 31 Mins |
| _shopify_sa_t | Shopify | 31 Mins |
| _shopify_y | Shopify | 1 Year |
| CLID | Microsoft Clarity | 1 Year |
| MR | Microsoft Clarity | 7 Days |
| receive-cookie-deprecation | Shopify | 1 Year 1 Month 4 Days |
| SM | Microsoft Clarity | Session |
| SRM_B | Microsoft Ads | 1 Year 25 Days |
| ssSessionIdNamespace | Searchspring | Session |
| ssUserId | Searchspring | 1 Year |
| swym-cu_ct | Shopify | 1 Year |
| swym-email | Shopify | 1 Year |
| swym-instrumentMap | Shopify | 1 Year |
| swym-pid | Shopify | 1 Year |
| swym-session-id | Shopify | 31 Mins |
| swym-swymRegid | Shopify | 1 Year |
| swym-v-ckd | Shopify | 31 Mins |
Personalization Cookies
We use these cookies to enhance functionality and personalize content for you. For example, they allow us to remember you when you return to our website or app. If you do not allow these cookies then some or all of these services may not function properly.
| Cookie Name | Provider | Duration |
|---|---|---|
| localization | Shopify | 1 Year |
Advertising Cookies
These cookies help us decide which products, services and offers may be relevant for you. We use this data to customize the marketing content you see on websites, apps and social media, and to measure your interactions with that content. We might use these cookies to advertise our products to you when you visit other websites.
| Cookie Name | Provider | Duration |
|---|---|---|
| __kla_id | Klaviyo | 1 Year 1 Month 4 Days |
| _fbp | Facebook Ads | 2 Months 28 Days |
| _gcl_au | Google Ads | 2 Months 28 Days |
| _pin_unauth | Pinterest Ads | 1 Year |
| _pinterest_ct_ua | Pinterest Ads | 1 Year |
| _uetsid | Microsoft Ads | 1 Day |
| _uetvid | Microsoft Ads | 1 Year 25 Days |
| ANONCHK | Microsoft Clarity | 11 Mins |
| ar_debug | Pinterest Ads | 1 Year |
| audit | Magnite | 1 Year |
| audit_p | Magnite | 1 Year |
| IDE | Google Ads | 1 Year 1 Month 4 Days |
| khaos | Magnite | 1 Year |
| khaos_p | Magnite | 1 Year |
| MR | Microsoft Ads | 7 Days |
| MR | Microsoft Ads | 7 Days |
| MUID | Microsoft Ads | 1 Year 25 Days |
| MUID | Microsoft Clarity | 1 Year 25 Days |
| receive-cookie-deprecation | Shopify | Session |
Lawful Bases and Legitimate Interests
We process personal data on the following lawful bases:
- Complying with legal obligations
- Fulfilling contracts
- Consent
- Legitimate interests
Where we process personal data on the basis of our legitimate interests, we pursue the following interests: Fulfilling Customer Orders, Marketing Our Products & Services, Delivering Targeted Ads, Conducting Surveys, Creating Customer Profiles, Improving Our Products & Services, Processing Payments, Providing Cybersecurity, Providing Customer Support, Sending Promotional Communications, Tracking Purchases & Customer Data, Analyzing Data, Storing and Managing Data, Preventing Fraud, Operating Our Website or Mobile Apps, Meeting Compliance & Legal Requirements, and Internal Business Operations.
International Data Transfers
We may send the personal data of individuals in the EEA/UK to third countries, including the United States, where it may be stored or processed, for example on our service providers’ cloud servers. When we transfer personal data, we rely either on Adequacy Decisions as adopted by the European Commission (EC) or the UK Information Commissioner's Office (ICO) on the basis of Article 45 of Regulation (EU) 2016/679 (GDPR), the EU-US Data Privacy Framework and UK-US Data Bridge agreements, Standard Contractual Clauses (SCCs) issued by the EC or International Data Transfer Agreements (IDTAs) approved by the ICO. Data protection authorities have determined that the SCCs and IDTAs provide sufficient safeguards to protect personal data transferred outside the EEA/UK. You may read more about international data transfer mechanisms at the following links:
- https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en
- https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/international-data-transfer-agreement-and-guidance/
Privacy Rights
Individuals in the EEA/UK have the following rights regarding their personal data. Make a Privacy Request by clicking here. Once you submit a request, we will verify your identity and process your request in most cases within 30 days.
Right to access. You have the right to request a copy of the personal data we hold about you.
Right of portability. You have the right to ask us to transfer your data to another party.
Right to rectification. You have the right to request that we rectify any incorrect information we have about you.
Right of erasure. You have the right to request that we erase (delete) any personal information we hold about you.
Right to lodge a complaint with a supervisory authority. You have a right to lodge a complaint with a supervisory authority. For more information, you can visit the Information Commissioner’s Office website at https://ico.org.uk/, or see a list of EU Data Protection Authorities at https://www.gdprregister.eu/gdpr/dpa-gdpr/.
Inquiries
Controller contact information
BHFO
CCPA (California Privacy Rights)
This section provides additional information for California residents under the California Consumer Privacy Act (CCPA). The terms used in this section have the same meaning as in the CCPA. This section does not apply to information that is not considered "personal information," such as anonymous, deidentified, or aggregated information, nor does it apply to publicly available information as defined in the CCPA.
To the extent we process deidentified personal information, we will make no attempt to reidentify such data.
Information we collect from you
We collect the personal information you provide to us when you purchase our products or visit our website. The categories of information we may collect include:
- Personal Identifiers, including name, email address, postal address, telephone number, and online Identifiers
- Internet Activity
- Commercial Information, including purchases
- Financial Information, including credit or debit card number
- Location Information, including general location data
- Physical and Audio Data, including physical characteristics or descriptions
- Protected Classifications and Other Personal Characteristics, including age and sex, gender, or gender identity
- Consumer Communications, including direct communications with your consumers
- Inferences from Other Data, including inferences created from other personal information collected
To the extent we process deidentified personal information, we will make no attempt to reidentify such data.
Information from other sources
We may collect personal information about you from third-party sources, including Retail Partners.
The categories of information we may collect include:
Retail Partners
- Personal Identifiers, including Name, Email address, Postal address, and Telephone number
- Commercial Information, including Purchases
How long we keep your data
We do not retain data for any longer than is necessary for the purposes described in this Policy.
We generally retain data according to the guidelines below.
| Type of Data | Retention Period |
|---|---|
| Cookies and online data we collect while you use our website, including Online Identifiers, Internet Activity, General location data | We delete or anonymize data concerning your use of our website within 2 years of collecting it. |
| Data we collect in order to process and ship orders you place with us, including Name, Email address, Postal address, Telephone number, Purchases, Credit or debit card number | We keep personal information related to products and services you purchase for as long as the personal data is required for us to fulfill our contract with you, and for 7 years from your last purchase with us. We may keep data beyond this period in anonymized form. |
| Data we collect when you contact us for customer support and other inquiries, including Name, Email address, Telephone number, Purchases, Direct communications with your consumers | We keep customer feedback and correspondence with our customer service for up to 7 years to help us respond to any questions or complaints. We may keep data beyond this period in anonymized form. |
| Data we collect when you sign up for promotional and marketing communications, including Name, Email address, Postal address, Telephone number, Online Identifiers, Internet Activity, Purchases, General location data, Physical characteristics or descriptions, Age, Sex, gender, or gender identity, Direct communications with your consumers, Inferences created from other personal information collected | Where you have signed up to receive promotional and marketing communications from us, we will retain any data collected until you opt out or request its deletion. We may keep data beyond this period in anonymized form. We will further retain a record of any opt-outs in order to prevent sending you future communications. |
| Data we collect when you review our products, answer surveys, or send feedback, including Name, Email address, Purchases, Direct communications with your consumers | We retain review, survey, and feedback data for up to 7 years following your last contact with us. We may keep data beyond this period in anonymized form to help improve our products and services. |
| Data we collect in connection with privacy requests, including Name, Email address, Online Identifiers | We retain records related to privacy requests as long as necessary to comply with our legal obligations. |
| Data we collect for security purposes, including Name, Email address, Online Identifiers | We retain security-related data as long as necessary to comply with our legal obligations and to maintain and improve our information security measures. |
Why we process your information
We process personal information for the following business and commercial purposes:
- Analyzing Data
- Conducting Surveys
- Creating Customer Profiles
- Delivering Targeted Ads
- Fulfilling Customer Orders
- Improving Our Products & Services
- Internal Business Operations
- Marketing Our Products & Services
- Meeting Compliance & Legal Requirements
- Operating Our Website or Mobile Apps
- Preventing Fraud
- Processing Payments
- Providing Customer Support
- Providing Cybersecurity
- Sending Promotional Communications
- Storing and Managing Data
- Tracking Purchases & Customer Data
How we disclose your information
We may disclose personal information about you for business and commercial purposes when you purchase our products or visit our website:
| Personal Information Category | Categories of Service Providers | Categories of Third Parties |
|---|---|---|
| Personal Identifiers | Business Operations Tool, Collaboration & Productivity Tools, Commerce Software Tools, Data Analytics Providers, Engineering Contractors, Governance, Risk & Compliance Software, Retail Partners, Sales & Marketing Contractors, Sales & Marketing Tools, and Shipping Services | Ad Networks, Commerce Software Tools, Data Analytics Providers, Fraud Prevention Tools, Payment Processors, and Shipping Services |
| Internet Activity | Commerce Software Tools, Engineering Contractors, Sales & Marketing Contractors, and Sales & Marketing Tools | Ad Networks, Commerce Software Tools, and Data Analytics Providers |
| Commercial Information | Business Operations Tool, Commerce Software Tools, Data Analytics Providers, Retail Partners, and Sales & Marketing Tools | Ad Networks, Commerce Software Tools, Data Analytics Providers, Fraud Prevention Tools, and Payment Processors |
| Financial Information | Commerce Software Tools | Fraud Prevention Tools and Payment Processors |
| Location Information | Business Operations Tool, Commerce Software Tools, Data Analytics Providers, Engineering Contractors, Governance, Risk & Compliance Software, Retail Partners, Sales & Marketing Contractors, Sales & Marketing Tools, and Shipping Services | Ad Networks, Commerce Software Tools, Data Analytics Providers, Fraud Prevention Tools, Payment Processors, and Shipping Services |
| Consumer Communications | Commerce Software Tools and Sales & Marketing Tools | None |
Information “sharing” and “selling”
We “share” certain personal information with third party ad networks for purposes of behavioral advertising, including: Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
We "sell" certain personal data to third parties, as that term is defined in the CCPA, including Personal Identifiers, Internet Activity, Commercial Information, and Location Information.
You may opt-out of these data practices here.
We do not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age.
Opt-out preference signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such signal, we place a U.S. Privacy String setting in your browser so that any third party who respects that signal will not track your activity on our website. Your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Your CCPA rights
Your privacy rights under the CCPA are described below. Make a Privacy Request by clicking here or by emailing us at moc.ofhb@ycavirp.
Right to Access
You have the right to access the specific pieces of personal information we have collected about you.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal information about you that you have provided to us. Subject to certain limitations, we will delete your personal information from our records and notify our service providers, contractors, and third parties that you have requested deletion of your personal information.
Right to Non-Discrimination
If you exercise your CCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
You have the right to opt-out of any selling and sharing of your personal information.
You may exercise your right to opt-out here.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to Limit the Use of Sensitive Personal Information
The Right to Limit does not apply because we do not use your sensitive personal information to infer characteristics about you.
Request Verification
Before we can respond to a privacy request, we will verify that you are the consumer who is the subject of the CCPA request. Requests to Opt-Out or Limit the Use of Sensitive Data (if applicable) do not require verification.
Typically, identity verification will require you to confirm certain information about yourself based on information we have already collected. For example, we will ask you to verify that you have access to the email address we have on file for you. If we cannot verify your identity based on our records, we cannot fulfill your CCPA request.
Authorized Agent
A California resident's authorized agent may submit a rights request under the CCPA by emailing us at moc.ofhb@ycavirp. Requests submitted by an authorized agent will still require verification of the consumer who is the subject of the request in accordance with the process described above. We will also ask for proof that the consumer who is the subject of the request authorized an agent to submit a privacy request on their behalf by either verifying their own identity with us directly or directly confirming with us that they provided the authorized agent permission to submit the request. An authorized agent that has power of attorney pursuant to California Probate Code section 4121 to 4130 may also submit proof of statutory power of attorney, which does not require separate consumer verification.
If you have trouble accessing this notice, please contact us at privacy@bhfo.com.
Contact Us
If you have any privacy-related questions or have trouble accessing this notice, please email moc.ofhb@ycavirp.
Notice of Financial Incentive
Consumers who sign up for our marketing emails/SMS texts receive a 10% discount on their first purchase. To opt in, a consumer must enter their email address/phone number into the form and consent to receive emails in exchange for a discount provided via coupon code. A consumer may unsubscribe from our marketing emails by using the unsubscribe link in the email footer/replying STOP via text at any time. We calculate the value of the offer and financial incentive by using the expense related to the offer.
For more information click here.