Privacy Policy
Last updated September 2026.
1. Information We Collect
We collect personal information you provide directly, including your name, email address, shipping and billing address, phone number, account details, order information, and messages you send us. When you pay, payment-card information is submitted directly to Stripe for processing. We also collect technical and usage data such as IP address, browser type, device information, referring URLs, pages visited, and interactions with the site through cookies and similar technologies.
2. How We Use Your Information
We use your information to: process and fulfil your orders; send order confirmations, shipping updates, and receipts; respond to your enquiries and support requests; improve our website, products, and customer experience; send marketing communications where you have opted in; detect and prevent fraud; and comply with our legal obligations.
3. Sharing With Trusted Providers
We do not sell or rent personal information. We disclose only the information reasonably needed by service providers that help us operate the store, including Stripe for payment processing; Easyship and shipping carriers for rates, labels, fulfilment, tracking, and delivery; email or marketing providers when those services are used; analytics providers for site measurement; and cloud hosting and security providers. These providers process information for their contracted services and are subject to their own privacy terms. We may also disclose information when required by law, to protect legal rights or safety, or in connection with a business transfer.
4. Payment Information
Payments are processed securely through Stripe. Full payment-card numbers and card security codes are handled by Stripe and are not stored directly on BOSSBYA's servers. We receive limited transaction information, such as payment status, amount, card brand, and the last four digits where available, to complete orders, provide support, prevent fraud, and maintain business records.
5. Cookies, Analytics & Similar Technologies
Our site uses essential cookies and local storage to keep the site secure, maintain sessions, remember choices, and operate account and shopping features. We also use analytics technology, including Replit-hosted analytics where enabled, to understand page visits and interactions and improve the store. Analytics data is not intended to include payment-card information, addresses, email addresses, or free-form customer text. A notice is shown on a visitor's first visit. Browser controls can block or delete cookies, although disabling essential storage may affect site functionality.
6. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described here, including fulfilling orders, resolving disputes, preventing fraud, and meeting legal, accounting, and tax requirements. Retention periods vary by record type. You may request deletion, subject to legal exceptions, by emailing support@bossbya.com.
7. Your Privacy Rights
Depending on your location, you may have rights to access, correct, or delete personal information; receive a portable copy; restrict or object to certain processing; and withdraw consent where processing relies on consent. To submit a request, email support@bossbya.com with the subject “Privacy Request” and describe the right you wish to exercise. We may need to verify your identity before completing the request and will respond within the period required by applicable law.
8. California Privacy Rights
California residents may have the right to know the categories and specific pieces of personal information we collect, the sources and purposes of collection, and the categories of parties to whom information is disclosed; to request correction or deletion, subject to legal exceptions; to receive information in a portable format; to opt out of the sale or sharing of personal information for cross-context behavioural advertising; and to receive equal service without discrimination for exercising these rights. BOSSBYA does not currently sell personal information or share it for cross-context behavioural advertising. To make a request or opt out if our practices change, email support@bossbya.com with the subject “California Privacy Request.” We may verify your identity, and an authorised agent may submit a request where permitted by law.
9. Security
We use reasonable technical and organisational safeguards designed to protect personal information against unauthorised access, loss, misuse, or destruction. Payment information is handled in Stripe's PCI-compliant environment and is not stored directly on BOSSBYA's servers. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their content or privacy practices and encourage you to review their privacy policies before providing personal information.
11. Changes to This Policy
We may update this Privacy Policy as our practices or legal obligations change. Material changes will be posted on this page, and the updated policy applies from the date it is posted.
12. Contact Us
For privacy questions or to exercise a privacy right, email support@bossbya.com. Please use “Privacy Request” in the subject line and do not send payment-card details by email.