Bullpen Supps operates this website and online shop from 30 Forest Drive, Hegins, PA 17938.

This policy explains how we collect, use, store, and share information when you browse the site, buy products, create an account, submit a contact form, join a mailing list, or communicate with us.

Account and checkout information can include your name, email address, optional phone number, password credentials handled through the store account system, shipping or pickup details, order items, discounts, payment status, fulfillment status, and order history.

Contact and message information can include your name, email address, optional phone number, topic or product interest, message text, status notes, and whether you asked to receive marketing emails.

Marketing information can include mailing list emails, contacts imported or manually added by the admin team, customer emails from previous orders, campaign audience selections, campaign send history, and unsubscribe status.

Payments are processed through Stripe and the Medusa payment system. Bullpen Supps does not store full card numbers on this website.

We receive and store order-related payment status information, such as whether a payment was authorized, captured, refunded, canceled, or disputed, so we can complete orders and handle support.

The site uses browser storage to keep checkout usable, including a cart identifier and customer login token if you sign in. Clearing browser storage may sign you out or reset the cart.

Our hosting, ecommerce, security, payment, and email providers may process technical data such as IP address, browser type, device information, request logs, error logs, timestamps, page URLs, and fraud or security signals.

We use information to run checkout, create accounts, process payments, calculate pickup or shipping, send receipts and order updates, answer messages, manage contact records, send admin replies, prevent fraud, debug errors, keep records, improve the site, and send marketing emails where allowed.

If analytics or advertising tools are enabled after the domain/indexing work, we may use them to measure traffic, conversions, campaign performance, and advertising results.

Transactional emails, such as receipts, order updates, contact-form confirmations, and direct replies, may be sent when needed to provide the service you requested.

Marketing emails are sent through our email provider when you sign up, are imported into a campaign list, or are included in an eligible customer/contact audience. Every marketing campaign should include an unsubscribe option and our physical mailing address.

You can unsubscribe from marketing emails at any time. We may still send transactional or legally required messages after you unsubscribe.

We share information with vendors and systems that help operate the business, including Medusa ecommerce services, Stripe payments, Resend email delivery, Supabase Storage for product/admin media, hosting and database providers, shipping or pickup support providers, analytics or advertising providers if enabled, and professional or legal advisors when needed.

We do not sell personal information for money. If analytics or advertising tools are configured in a way that counts as a sale, sharing, or targeted advertising under a state privacy law, we will provide the required notice and opt-out controls.

Depending on where you live, you may have rights to request access, correction, deletion, portability, or to opt out of certain uses such as sale, sharing, targeted advertising, or profiling.

To make a privacy request, email support@bullpensupps.com. We may need enough information to verify the request and may keep records when needed for orders, taxes, accounting, fraud prevention, chargebacks, disputes, security, or legal obligations.

We keep information for as long as needed to operate the store, maintain accounts, complete orders, support customers, honor unsubscribe requests, comply with legal obligations, and resolve disputes.

We use reasonable administrative, technical, and organizational safeguards, but no website or internet transmission can be guaranteed completely secure.

The site is not directed to children under 13, and we do not knowingly collect personal information from children under 13.