Privacy Policy

Effective date: to be set at launch. Last updated: June 2026.

The honest summary: we collect the minimum needed to sell you dog gear and run a small store well. We don't sell your data and we don't rent your email. To understand our traffic we use our own first-party beacon plus Google Analytics (which, like most analytics, uses cookies), and we run no ad-retargeting pixels. Here's the whole thing in plain English.

Who we are

Best Friend Supply is operated by Best Friend Supply LLC, a Florida limited liability company with a single owner. When this policy says "we," it means that company. Our mailing address is 400 N Tampa St Ste 1550, PMB 949601, Tampa, FL 33602-4719, and you can reach us anytime at hello@bestfriendsupply.com.

What we collect, and why

  • Order information: your name, shipping address, email, and what you bought, because we can't ship a dog bed to "resident, somewhere." Used for fulfillment, delivery updates, and customer service.
  • Payment: handled entirely by Stripe, our payment processor. Your card number goes directly to Stripe over an encrypted connection; it never touches our servers and we never see or store it. We receive only confirmation that payment succeeded and the last digits needed for receipts and refunds. Stripe's own privacy policy applies to their processing.
  • Email address (marketing): only if you give it to us, through the subscribe box, a checklist download, or an opt-in at checkout. We record when and where you consented.
  • Personalization details: if you order from the Studio, we store the name and design choices you entered, because they're literally on the product.
  • Pet Portrait Studio photos: if you use the Pet Portrait Studio, the photo you upload is sent to our AI art provider (Google, via its Gemini API) to generate your custom artwork, and the photo plus the generated art are stored on our infrastructure (Cloudflare R2) so we can show a preview and print your order. We delete the original uploaded photo right after the art is made; the generated art is kept to fulfill (and re-print if needed) your order. We don't use your photo to train any model, and we don't share it beyond creating and printing your art.
  • Support emails: if you email us, we keep the conversation so we have context next time.

Analytics: how we measure traffic

We measure traffic two ways. First, our own lightweight first-party beacon: each page view sends exactly three things to our own server, the page path you are on, the domain that referred you (just the domain, never the full address), and a random id kept in your browser's localStorage (named bfs_sid). That beacon uses no cookies, stores no IP address, and does no fingerprinting.

Second, we use Google Analytics 4, a third-party analytics service from Google, to understand things like which pages people visit and where visitors arrive from. Google Analytics sets its own cookies (for example _ga), assigns a random identifier to your browser, and processes your approximate location and device or browser type. That information is sent to Google, which handles it as our analytics provider under Google's own privacy terms. We use it for measurement, not to serve you ads, and we run no ad-retargeting pixels on the site. You can opt out with Google's opt-out browser add-on or by blocking cookies in your browser. If we ever add or drop an analytics or advertising tool, we update this policy when we do.

Stored in your browser

Three site features keep data in your own browser: your shopping cart, your Pup Profile (your dog's name, size, age, chew style, and adventure style from the quiz), and the random analytics device id described above (bfs_sid). The cart and Pup Profile stay on your device and never leave your browser unless you place an order containing those items; the device id is sent only with our own first-party page-view beacon. Clearing your browser data clears all three. Separately, Google Analytics sets its own cookies in your browser, as described under Analytics above; clearing cookies or using Google's opt-out removes those.

Email: consent in, one click out

  • We send marketing email only with your consent, and we log when you gave it.
  • Every marketing email includes a one-click unsubscribe that works immediately. No login, no "are you sure," no 10-business-day processing window.
  • Transactional email (order confirmations, shipping updates, and one post-delivery review request) is sent to customers as part of fulfilling your order and doesn't require a marketing opt-in.
  • We never sell, rent, or trade your email address. Full stop.

Who we share data with (the short list)

  • Fulfillment partners: the US warehouses and US print partners that pack and ship your order get your name, shipping address, and order contents, because they need them to ship it. Nothing more.
  • Stripe: payment processing, as described above.
  • Shipping carriers: your address, on the label.
  • Email delivery provider: your email address, to deliver the emails described above.
  • Google Analytics (Google): aggregate, pseudonymous usage data, pages viewed, approximate location, device and browser type, and a random analytics id, so we can understand site traffic. Google processes it as our analytics provider.
  • AI art provider (Google, Gemini API): only if you use the Pet Portrait Studio, the photo you upload, so it can generate your custom artwork. It is processed in the United States and not used to train models.
  • Legal requirements: if the law genuinely compels us, we comply, and that's the only "etc." in this list.

That's the list. No data brokers, no reselling your data, and no advertising or retargeting pixels.

How long we keep things

Order records are kept as long as tax and accounting rules require. Marketing email data is kept until you unsubscribe, after which you go on a suppression list (so we remember NOT to email you). Analytics events are anonymous and kept in aggregate.

Your choices and rights

  • Unsubscribe: one click, in any marketing email.
  • Access, correction, deletion: email hello@bestfriendsupply.com and we'll show you what we have, fix it, or delete what we're not legally required to keep, within 30 days.
  • Local data: clear your browser storage to remove your cart and Pup Profile from your device.

Depending on where you live, you may have specific statutory privacy rights. We honor the requests above for everyone, regardless of jurisdiction, because it's simpler and fairer.

Children

This store is for adults (the dogs can't enter their own card numbers anyway). We don't knowingly collect personal information from children under 13. If you believe a child has given us personal information, email us and we'll delete it.

Security

Connections to this site are encrypted (HTTPS). Payments are handled by Stripe and never stored here. We keep what we store minimal on purpose: the best way to protect data is to not collect it in the first place.

Changes to this policy

If we change this policy in any way that matters, we'll update the date at the top and, for significant changes affecting subscribers or customers, say so by email. We won't quietly slip in an ad network on a Tuesday.

Questions about any of this? hello@bestfriendsupply.com. A person answers.