Privacy Policy

Buff Chick LLC Privacy Policy

1. Introduction

Last updated: October 9, 2026

Buff Chick LLC ("Buff Chick", "we", "us" or "our") operates the Buff Chick Supps online store at www.buffchick.com and the Buff Chick mobile app (together, the "Site"). This Privacy Policy explains what personal information we collect when you visit the Site, buy from us, subscribe to our products or messages, or contact us. It also explains how we use and share that information, and the choices and rights you have.

Who we are. Buff Chick LLC, 1724 Lacy Drive, Suite 116, Fort Worth, TX 76177, United States. You can reach us at support@buffchick.com.

2. Information we collect

We collect the following categories of personal information.

Contact details. Name, email address, phone number, billing and shipping address. Source: you.
Order and subscription information. Products purchased, order history, subscription plan and delivery schedule, discount codes, returns and refunds. Source: you and our store systems.
Payment information. Payment method, card type, last four digits and billing address. Full card numbers are handled by our payment processors and are not stored by us. Source: you and our payment processors.
Account information. Login email and password for your customer account. Source: you.
Communications. Emails, messages sent through our contact form, text messages and survey responses. Source: you.
Product reviews. Your review, rating and the name you choose to display. Reviews are public. Source: you.
Marketing preferences. Email, text message and push notification opt-in status, and records of your consent and opt-outs. Source: you and our marketing providers.
Device and usage data. IP address, browser and device type, operating system, device identifiers, pages and app screens viewed, dates and times of visits, referring pages, cart contents and approximate location based on IP address. Source: collected automatically through cookies and similar technologies on the website and in the mobile app.
Ambassador program information. Name, social media handles and payout details, if you join our ambassador program. Source: you.

We also receive information from our advertising and analytics partners, such as whether you clicked one of our ads before visiting the Site. If you buy our products through TikTok Shop, TikTok sends us your name, shipping address and order details so we can fulfil your order. TikTok's own privacy policy applies to your use of its platform.

We do not ask you for information about your health, such as fitness goals, medical conditions or allergies.

3. Cookies and similar technologies

We and our providers use cookies, pixels, tags and similar technologies on the Site. Some are needed for the store to work. Others help us understand how the Site is used and show you relevant advertising.

Strictly necessary. Keeps items in your cart, runs checkout, keeps you signed in, prevents fraud and remembers your cookie choices. Provider: Shopify.
Functional. Remembers preferences such as your country, currency and saved details. Provider: Shopify.
Analytics. Measures visits, pages viewed and how visitors move through the Site. Providers: Shopify and Google Analytics.
Marketing and advertising. Recognizes you for email and text marketing, sends abandoned cart reminders, measures ad performance and shows you our ads on other sites. Providers: Klaviyo, Google Ads, Meta and Pinterest.

Your choices

Cookie banner. When you first visit, a banner lets you accept, decline or manage analytics, personalization and advertising cookies. We show this banner to all visitors, and we do not use cookies for those purposes unless you accept them.
Changing your mind. You can change your choices at any time using the "Your Privacy Choices" link in the Site footer.
Browser settings. You can set your browser to block or delete cookies. Parts of the Site, including the cart and checkout, may not work without strictly necessary cookies.
Global Privacy Control. Where required by law, we treat a Global Privacy Control signal from your browser as a request to opt out of the sale or sharing of your personal information.
Mobile app. Our mobile app also uses analytics and advertising technologies similar to cookies. You can limit ad tracking and turn off push notifications in your device settings.
Do Not Track. There is no consistent industry standard for responding to browser "Do Not Track" signals, so the Site does not respond to them. We do honor Global Privacy Control signals as described above.

If you are in the UK or Europe, we use non-essential cookies only with your consent. See section 10.

4. How we use your information

We use personal information to:

Process and deliver your orders and subscriptions, take payment, and handle returns and refunds.
Create and manage your customer account.
Answer your questions and provide customer support.
Send service messages, such as order confirmations, shipping updates and subscription renewal notices.
Contact you about a product safety issue or recall.
Send marketing emails and text messages where you have opted in or where the law otherwise allows. You can opt out at any time.
Send push notifications through our mobile app, if you have turned them on.
Remind you about items left in your cart, where you have opted in to marketing.
Collect and publish product reviews you choose to submit.
Measure and improve our advertising, and show you our ads on other websites and platforms.
Understand how the Site and our products are used so we can improve them.
Detect and prevent fraud, abuse and security incidents.
Comply with legal, tax and accounting obligations, and enforce our terms.

5. Who we share your information with

We share personal information with the following recipients, and only as needed for the purposes in section 4.

Store platform and hosting (Shopify). Runs the website, customer accounts, cart, checkout and order records.
Mobile app (Tapcart). Runs our mobile app and delivers push notifications.
Payment providers (Shopify Payments, Shop Pay, Apple Pay, Google Pay, PayPal and Sezzle). Take and secure payments, offer pay-later options and prevent fraud.
Subscription billing (Recharge). Manages subscriptions and recurring payments.
Email, text messages and reviews (Klaviyo). Sends marketing and service emails and texts you have opted in to, tracks engagement, and collects and displays product reviews.
Shipping carriers. The postal and courier services that deliver your order, which we pack and ship ourselves.
Analytics and advertising partners (Google Analytics, Google Ads, Meta and Pinterest). Measure Site use and ad performance, and show you our ads.
Professional advisers and authorities. Lawyers, accountants, courts, regulators and law enforcement, to meet legal obligations and protect our rights, our customers and the public.
A buyer or successor. Any party to a merger, financing, acquisition or sale of our business or assets. We will give notice before your information becomes subject to a different privacy policy.

Advertising and "sales" of data. We do not sell your personal information for money. Some US state laws treat the use of advertising cookies and pixels as a "sale", "sharing" or "targeted advertising". You can opt out as described in section 9.

Text message consent. We do not share your mobile opt-in data or consent with third parties for their own marketing. We share it only with messaging partners that operate our text program for us.

Product reviews. If you submit a review, it is published on the Site along with the name you choose to display. Anyone visiting the Site can see it.

Ambassador program. If you join our ambassador program, we collect your name, social media handles and payout details, and use them to run the program and pay you. Ambassadors can ask us how many orders were placed with their code so they can check their payout. We do not give ambassadors the names, addresses or contact details of customers.

6. How long we keep your information

We keep personal information only as long as we need it for the purposes in this policy, including to meet legal, tax and accounting requirements and to resolve disputes.

Order and subscription records: for as long as we operate the business. We keep these so we can contact you if a product you bought is recalled or has a safety issue, and to meet tax and accounting requirements.
Account information: while your customer account is open.
Marketing information: until you unsubscribe. We then keep a record of your opt-out so we can honor it.
Support messages and reviews: for as long as needed to handle your request and maintain our records. You can ask us to remove a review at any time.
Device and usage data: for the periods set by our analytics and advertising providers.

7. Security

We use technical and organizational measures designed to protect your personal information. These include encryption of data in transit and limiting access to people who need it to do their jobs. No website or method of transmission is completely secure, so we cannot guarantee absolute security.

If a security incident affects your personal information, we will notify you and the relevant authorities as the law requires.

8. International transfers

We are based in the United States. Your personal information is processed in the United States and in other countries where our service providers operate. Privacy laws in those countries may differ from the laws where you live.

When we transfer personal information from the UK or Europe to a country without an adequacy decision, we rely on safeguards recognized by data protection law, such as standard contractual clauses. You can ask us for more information about these safeguards.

9. US state privacy rights

Depending on the state you live in, you may have the rights below.

Your rights

Know and access. Ask what personal information we have collected about you, where it came from, why we use it and who we disclose it to, and get a copy.
Correct. Ask us to fix inaccurate personal information.
Delete. Ask us to delete personal information we collected from you, subject to legal exceptions.
Portability. Receive your information in a format you can take elsewhere.
Opt out. Opt out of the sale or sharing of your personal information and of targeted advertising.
No retaliation. We will not treat you differently for using these rights.
Appeal. If we decline your request, you can ask us to reconsider by replying to our decision.

How to use your rights

Email support@buffchick.com with the subject line "Privacy request".
Write to Buff Chick LLC, 1724 Lacy Drive, Suite 116, Fort Worth, TX 76177.
To opt out of sale, sharing and targeted advertising, use the "Your Privacy Choices" link in the Site footer or turn on Global Privacy Control in your browser.

We will verify your identity before acting, usually by matching details you give us with our order records. An authorized agent may make a request for you with your written permission. We respond within 45 days and will tell you if we need up to 45 more.

We do not sell sensitive personal data.

10. UK and European privacy rights

This section applies if you are in the United Kingdom, the European Economic Area or Switzerland.

Controller. Buff Chick LLC is the controller of your personal data. Our contact details are in section 15.

Why we are allowed to use your data

Performance of our contract with you: processing and delivering orders and subscriptions, taking payment, handling returns and customer support, and sending service messages about your order or subscription.
Your consent: marketing emails and text messages, analytics and advertising cookies, and showing you our ads on other platforms.
Our legitimate interests in running a safe and effective store: preventing fraud, securing the Site and improving our products and services.
Compliance with a legal obligation: tax, accounting and other legal record-keeping.

Your rights

Access your personal data and receive a copy.
Have inaccurate data corrected.
Have your data erased.
Restrict how we use your data.
Receive your data in a portable format.
Object to our use of your data based on legitimate interests, and object at any time to direct marketing.
Withdraw consent at any time. This does not affect what we did before you withdrew it.

To use these rights, email support@buffchick.com. We respond within one month.

Complaints. We would like the chance to resolve any concern first. You also have the right to complain to your data protection authority at any time. In the UK this is the Information Commissioner's Office. In the EEA it is the authority in the country where you live or work.

Transfers. Your data is transferred to the United States and other countries as described in section 8.

11. Children

The Site is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, email support@buffchick.com and we will delete it.

12. Text marketing and notifications

What we send. If you opt in, we send recurring text messages. These include order notifications, abandoned cart reminders, marketing offers and requests for reviews. Message frequency varies. Consent is not a condition of purchase. Message and data rates may apply, and your wireless provider's charges are your responsibility.

How you opt in. You opt in by giving consent at checkout or through the sign-up form near the bottom of our website.

Cart reminders. The Site uses cookies to keep track of items in your cart and to recognize when a checkout has been abandoned. We use this to decide when to send cart reminder texts.

How to opt out. Reply STOP to any text from us, or use the unsubscribe link in any message. You can also email support@buffchick.com. We will process your opt-out within 10 business days.

Help. Email support@buffchick.com.

Number changes. We may change the phone number or short code we use, and we will tell you if we do.

Push notifications. If you use our mobile app, we send push notifications only if you allow them. You can turn them off at any time in your device settings.

13. Links to other websites

The Site may link to websites we do not operate. We are not responsible for their content or privacy practices. Please read the privacy policy of any site you visit.

14. Changes to this policy

We review this policy at least once a year and update the "Last updated" date when we change it. If we make a material change, we will tell you by email or by a prominent notice on the Site before the change takes effect.