Who We Are & Scope

Controller: BKB STORES LLC (DBA Bison Supply), 30 N Gould St, STE R, Sheridan, WY 82801, USA.

This Policy applies to information collected through our website, checkout, customer support channels, email/SMS marketing (with your consent), and analytics tools used on the Site.

Collecting Personal Information

We collect information that identifies, relates to, describes, or could reasonably be linked with you (“Personal Information”). Categories we may collect include:

Device Information Automatically Collected

• Examples: IP address, browser type/version, time zone, cookie identifiers, pages viewed, links clicked, referring/exit pages, device identifiers, and interaction data.
• Purpose: to load the Site, maintain security, prevent fraud, perform analytics, and improve the user experience.
• Source: collected automatically via cookies, pixels, tags, web beacons, SDKs, and server logs.
• Disclosure: shared with our ecommerce/analytics providers (e.g., Shopify) to operate the store.

Order & Account Information Provided by You

• Examples: name, email, billing/shipping address, phone, order history, payment details (tokenized by payment processors), support communications.
• Purpose: to process orders, take payment, ship items, provide invoices/confirmations, communicate about your order, handle returns/warranty, and prevent fraud.
• Source: collected directly from you at checkout or when contacting support.
• Disclosure: shared with Shopify and payment processors to complete transactions.

Marketing Preferences

• Examples: newsletter opt-in, SMS consent, cookie/advertising preferences.
• Purpose: to send communications you choose to receive and honor your consent choices.
• Source: provided by you (e.g., checkbox, form) or via our consent banner.

How We Use Personal Information

• Provide & deliver products and services you request (orders, shipments, returns).
• Customer support and account services.
• Security & fraud prevention (device signals, risk scoring).
• Site performance & analytics to understand usage and improve our store.
• Marketing & promotions with your consent (email/SMS) and interest-based ads where permitted.
• Legal compliance and to enforce our Terms.

Lawful Bases (GDPR)

• Contract: order processing, customer support, warranty.
• Consent: email/SMS marketing, non-essential cookies, certain ad tracking.
• Legitimate Interests: security, fraud prevention, store analytics, improving our services.
• Legal Obligation: tax, accounting, regulatory requirements.

How We Share Personal Information

We share Personal Information with trusted service providers who help us operate our store, fulfill orders, and run our business. These providers may only use your data as instructed and must protect it.

• Shopify (store platform/hosting): Privacy
• Payment processors (e.g., Shop Pay/Stripe, PayPal): to securely process payments.
• Carriers & logistics partners (e.g., LTL freight): to deliver your order and coordinate appointments.
• Fraud prevention & security tools.
• Advertising & analytics partners (see “Analytics, Advertising & Your Choices”).
• Legal/Compliance: if required by law, subpoena, or to protect our rights, users, or property.

We do not sell your Personal Information for money. We may share limited identifiers and device data with advertising partners for interest-based ads; under some laws this can be considered a “sale” or “sharing” for targeted advertising. See Your Rights (US – CCPA/CPRA) to opt out.

Cookies & Similar Technologies

We use cookies, pixels, and similar technologies to run our store, keep it secure, remember preferences, and measure performance. Non-essential cookies run with your consent where required.

Managing cookies: You can set preferences in our cookie banner (where available) or through your browser settings. Blocking cookies may impact site functionality. Learn more at allaboutcookies.org.

Examples of Cookies We Use

Analytics, Advertising & Your Choices

We use analytics to understand site performance, and advertising tools to show relevant offers. Examples include Google Analytics and advertising platforms like Google Ads and Meta Ads.

• Google Privacy: policies.google.com/privacy · Opt out: GA Opt-out
• Meta (Facebook) Ads Preferences: facebook.com/settings/?tab=ads
• Google Ads Settings: google.com/settings/ads/anonymous
• DAA Opt-Out: optout.aboutads.info

You can opt out of marketing emails via the unsubscribe link and opt out of SMS by replying STOP. See also Your Rights (US – CCPA/CPRA) for “Do Not Sell or Share” options.

Children’s Privacy

Our Site is not intended for children under 13 years of age, and we do not knowingly collect Personal Information from children. If you are a parent/guardian and believe a child has provided Personal Information, contact us and we will delete it.

Data Security

We implement administrative, technical, and physical safeguards designed to protect Personal Information (e.g., HTTPS, access controls, tokenized payments). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Data Retention

We keep Personal Information for as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Typical periods:

• Order records: up to 7 years (tax/accounting).
• Support tickets: up to 3 years after closure.
• Marketing preferences: until you withdraw consent or opt out.

You may request deletion subject to legal/operational requirements (see rights below).

International Data Transfers

We are US-based and use US and other service providers (including Shopify). If you are in the EEA/UK, your data may be transferred to countries that may not offer the same level of protection. We rely on appropriate safeguards (e.g., Standard Contractual Clauses) where applicable.

Your Rights (GDPR)

If you are in the EEA/UK, you may have the right to:

• Access, correct, or delete your Personal Information;
• Object to or restrict certain processing;
• Data portability;
• Withdraw consent at any time (does not affect prior processing);
• Lodge a complaint with your local supervisory authority.

To exercise rights, email support@bisonsupplypro.com. We may verify your identity before fulfilling requests.

Your Rights (US – CCPA/CPRA)

If you are a California resident, you may have the right to:

• Know/Access: request details about categories and specific pieces of Personal Information collected, used, disclosed, “sold” or “shared”.
• Delete: request deletion of Personal Information, subject to exceptions.
• Correct: request correction of inaccurate Personal Information.
• Opt-Out of Sale/Sharing: opt out of “sale” or “sharing” (for targeted ads) of Personal Information.
• Limit Use of Sensitive PI: where applicable.
• Non-Discrimination: we will not discriminate for exercising rights.

Do Not Sell or Share My Personal Information: To opt out of sale/sharing for targeted advertising, contact us at support@bisonsupplypro.com with the subject “Privacy Request – Do Not Sell or Share”. Where available, also use our cookie banner to adjust ad/analytics settings.

We will verify, confirm receipt within 10 business days, and respond within applicable timelines.

Do Not Track

Because there is no industry consensus on how to respond to browser “Do Not Track” signals, we do not currently alter our data practices when such signals are detected. You can manage cookies and advertising choices as described above.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, regulatory, or operational reasons. Updates take effect when posted on this page with an updated date below.

Contact Us

If you have questions about this Policy or would like to exercise your privacy rights, contact us: