Privacy Policy

Burlybucks Effective Date: October 30th, 2025 Last Updated: november 2nd, 2025

We at BurlyBucks respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit Burlybucks.cafe or purchase our products.

By using the Site, you consent to the practices described herein.

1. Information We Collect

A. Information You Provide Directly

  • Age Verification Data: Date of birth, government-issued ID scans (if required), or third-party verification results.

  • Account Information: Name, email, shipping address, phone number, payment details.

  • Communications: Messages, support tickets, or feedback.

B. Automatically Collected Information

  • Usage Data: IP address, browser type, device IDs, pages viewed, time spent, referring URLs.

  • Cookies & Tracking: Session cookies, analytics (e.g., Google Analytics), advertising IDs.

  • Age Gate Interactions: Timestamp and result of verification attempts.

C. Third-Party Sources

  • Payment processors (Square)

  • Age verification services (Elfsight)

  • Shipping carriers (USPS, FEDEX)

2. How We Use Your Information

Purpose Legal Basis (GDPR): Verify you are 18+ before granting access. Legal Obligation/Contract: Process orders, payments, and shipping. Contract: Prevent fraud and enforce Terms of Service. Legitimate Interests: Send order confirmations, shipping updates. Contract Respond to support inquiries Contract / Legitimate Interests Improve Site functionality and user experienceLegitimate Interests Comply with 18 U.S.C. § 2257 record-keeping Legal Obligation Send marketing (only with consent) Consent

3. Data Sharing & Disclosure

We do not sell your personal data. We share only as required:

Recipient Purpose Payment Processors (Square) Secure transaction processing. Elfsight Confirm eligibility. Shipping Carriers (USPS, FEDEX) Fulfill orders. SquareSpace Site operation and security. Legal Authorities When required by law (e.g., subpoena, 2257 inspection) Successors in Business In case of merger, sale, or bankruptcy

4. Data Retention

Data Type Retention Period Age verification records (2257 compliance ) 7 years after last depiction or as required by lawOrder & payment records 7 years (tax/audit purposes). Account data Until account deletion + 30 daysCookies

Deleted data is anonymized or securely destroyed.

5. Your Privacy Rights

CCPA (California Residents)

  • Right to know what data we collect

  • Right to delete your data

  • Right to opt-out of sale (we do not sell data)

  • Non-discrimination for exercising rights

➡️ Submit requests via [burlybuckscafe@gmail.com]

GDPR (EU/UK Residents)

  • Right to access, rectify, or erase data

  • Right to restrict or object to processing

  • Right to data portability

  • Right to withdraw consent

➡️ Contact our EU Representative: [burlybuckscafe@gmail.com].

6. Cookies & Tracking

We use cookies for functionality, analytics, and marketing (with consent).

Cookie Table

CookieTypePurposeDurationage_verifiedEssentialRemembers successful age check 30 days session_idEssentialMaintains login state Session_ga, _gidAnalytics (Google)Tracks usage2 years / 24 hrsmarketing_optinMarketingStores consent1 year

➡️ Manage preferences via the cookie banner or browser settings.

7. Security Measures

  • Encryption: SSL/TLS for data in transit; encrypted storage.

  • Access Controls: Limited employee access; 2FA where possible.

  • Age Verification Data: Stored separately; auto-deleted after retention period.

  • Breach Response: We will notify you and regulators as required by law.

8. Children’s Privacy (COPPA)

The Site is not intended for anyone under 18. We do not knowingly collect data from children under 13 (or 16 in some jurisdictions). Any such data will be deleted immediately.

9. International Data Transfers

Data may be processed in the United States or other countries. We use Standard Contractual Clauses (SCCs) or equivalent safeguards for transfers from the EU/UK.

10. Third-Party Links

The Site may link to external sites (e.g., payment gateways). Their privacy practices are not covered by this policy.

11. Changes to This Policy

We may update this Policy. Changes will be posted here with a new “Last Updated” date. Material changes will be notified via email or Site banner.

12. Contact Us

Data Protection Officer BurlyBucks Email: burlybuckscafe@gmail.com