Privacy Policy

Last Updated: September 15, 2026

bgrateful LLC ("we," "us," "our," or "bgrateful"), a Minnesota limited liability company, respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website at www.bgratefulco.com (the "Site"), create an account, place an order, or otherwise interact with us.

By using the Site, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Site.

1. Information We Collect

We collect information in three main ways: (a) information you provide directly, (b) information collected automatically, and (c) information from third parties.

Information You Provide: Contact & account data (name, email, phone, shipping/billing address, password (encrypted)); order & payment data (credit card, processed securely by Squarespace Payments; we never store full card numbers), order history; communications sent via contact forms, emails, or reviews.

Automatically Collected Information: Device & usage data (IP address, browser type, operating system, referring URLs, pages viewed, time spent, clickstream data); cookies & tracking technologies (essential cookies that enable checkout and login, analytics cookies such as Google Analytics, and marketing cookies such as Meta Pixel and ad retargeting); approximate location from IP address, used for tax and shipping purposes.

Third-Party Sources: Squarespace provides account and transaction data; payment providers supply fraud detection signals; marketing partners provide data if you click on our ads (e.g., Facebook, Google); shipping carriers provide delivery confirmation.

2. How We Use Your Information: Purpose & Legal Basis

We use your information to fulfill orders, including processing payment, shipping, and tracking (legal basis: contract); create and manage your account (contract); send transactional emails such as order confirmations and shipping updates (contract); provide customer support (legitimate interest); send marketing such as newsletters and promotions (consent); improve the Site and our products through analytics and testing (legitimate interest); prevent fraud and secure the Site (legitimate interest / legal obligation); and comply with laws such as tax requirements, audits, and recalls (legal obligation).

You can opt out of marketing anytime via unsubscribe links or by emailing info@bgratefulco.com.

3. How We Share Your Information

We do not sell your personal data. We share information only with the following: our ecommerce platform, to host the Site and process checkout, under a data processing agreement and SOC 2 safeguards; payment processors such as Square Payments, to process payments, under PCI-DSS compliance; shipping carriers such as USPS, UPS, and FedEx, to deliver orders, receiving only name and address; analytics providers such as Google and Meta, to measure performance, anonymized where possible; our email provider, to send emails, on a consent basis; legal authorities, to comply with law or a court order, only when required; and successors, in the event of a merger or sale of assets, with notice to you.

4. Cookies & Tracking

Essential cookies support the cart and login and cannot be disabled. Analytics cookies track traffic and behavior and can be managed through the Google Analytics Opt-Out. Marketing cookies support retargeting ads and can be declined by selecting "Reject All" in our cookie banner.

We use a cookie consent banner on first visit. You can change your preferences anytime via the cookie icon in the footer.

5. Data Security

We implement reasonable technical and organizational measures, including encryption (SSL/TLS in transit, encrypted storage), access controls limiting employee access, PCI-DSS compliance via our payment processor, and regular security audits.

No system is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We keep your data only as long as necessary. Order and payment records are retained for 7 years for IRS/tax compliance. Account data is retained until the account is deleted, plus 30 days. Marketing subscriber data is retained until you unsubscribe. Logs and analytics data are retained for up to 26 months.

You may request deletion. See Section 9.

7. Your Privacy Rights (CCPA / GDPR / Minnesota Residents)

Depending on your location, you may have the right to access your data (email us), correct inaccurate data (edit in your account or email us), delete your data (email us, subject to legal retention requirements), opt out of the sale of your data (we do not sell data), opt out of marketing (use the unsubscribe link), and non-discrimination (we won't penalize you for exercising these rights).

Minnesota Residents: You have rights under the Minnesota Consumer Data Privacy Act (MCDPA) when effective. We will update this policy accordingly.

California Residents: See Section 11 below.

International Visitors: We do not target or ship Internationally. If you access from there, standard protections apply.

8. Children's Privacy

The Site is not intended for children under 16. We do not knowingly collect data from children. If we learn we have, we will delete it.

9. How to Contact Us / Exercise Rights

Email: info@bgratefulco.com Subject: "Privacy Request" Include: Full name, email used, order number (if applicable), and specific request.

We respond within 30 days (45 for complex requests).

10. Changes to This Policy

We may update this Privacy Policy. Changes are posted here with a new "Last Updated" date. Material changes will be notified via email or Site banner.

11. California Residents (CCPA / CPRA)

Categories of personal information we collect include identifiers, commercial information, internet activity, geolocation, and inferences drawn from that data. We share these categories with service providers, including our ecommerce platform and shipping carriers. We do not sell your data. We do not collect sensitive data such as Social Security numbers or precise geolocation.

Do Not Sell or Share My Personal Information: Since we don't sell or share data for cross-context behavioral advertising, no action is needed. You can still limit cookies through the cookie banner.

12. Contact Information

bgrateful LLC Email: info@bgratefulco.com