Privacy Policy

Effective Date: March 6, 2026
Last Updated: March 6, 2026

OpenBXD (“we,” “us,” or “our”) operates the website openbxd.com and our retail store located at 322 E National Rd, Vandalia, OH 45377. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, make a purchase, or otherwise interact with us. Please read this policy carefully. By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

1.1 Information You Provide to Us

We collect information that you voluntarily provide when you interact with our website or services, including:

  • Account Information: Name, email address, mailing address, phone number, and password when you create an account.
  • Purchase Information: Billing address, shipping address, and payment method details when you make a purchase. Note: Full payment card details are processed and stored exclusively by our payment processor, Stripe, and are never stored on our servers.
  • Communication Data: Any information you provide when you contact us via our contact form, email (hey@openbxd.com), or phone (937-983-8150), including your name, email address, and the content of your message.
  • Review and Feedback: Product reviews, ratings, and other feedback you choose to submit.

1.2 Information Collected Automatically

When you visit our website, we and our service providers may automatically collect certain information, including:

  • Device and Browser Information: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
  • Usage Data: Pages viewed, time spent on pages, links clicked, referring URLs, and browsing patterns on our site.
  • Location Data: General geographic location derived from your IP address.
  • Cookies and Similar Technologies: Information collected through cookies, web beacons, pixels, and similar tracking technologies (see Section 5 below).

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

  • Payment Processors: Stripe provides us with transaction confirmation details (but not your full card number).
  • Analytics Providers: Services such as Google Analytics provide aggregated data about website traffic and usage patterns.
  • Shipping Partners: Delivery status and tracking information related to your orders.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Order Fulfillment: To process your purchases, arrange shipping, handle returns and refunds, and provide customer support related to your orders.
  • Account Management: To create and manage your account, verify your identity, and maintain your order history.
  • Communication: To respond to your inquiries, send order confirmations and shipping updates, and provide important service-related notices.
  • Improvement of Services: To analyze usage patterns, diagnose technical issues, improve our website functionality, and enhance your shopping experience.
  • Marketing (with consent): To send promotional emails about new products, special deals, and store events. You may opt out at any time (see Section 7).
  • Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities.
  • Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
  • SMS / Text Messaging
    openbxd.com offers SMS text notifications to customers who opt in — for example, notifications about an item you have reserved for in-store pickup. Message frequency varies. Message and data rates may apply. Reply STOP to opt out, HELP for help.
    No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors that provide support services, such as customer service, is permitted. Text messaging originator opt-in data and consent will not be shared with any third parties.

3. How We Share Your Information

We do not sell your personal information. We may share your information with the following categories of third parties only as necessary to operate our business:

  • Payment Processors: Stripe processes all payment transactions on our behalf. Stripe’s handling of your payment data is governed by Stripe’s Privacy Policy.
  • Shipping and Fulfillment Partners: We share your name, shipping address, and order details with carriers (e.g., USPS, UPS, FedEx) to deliver your purchases.
  • Website Hosting and Infrastructure: Our website is hosted by Hostinger and powered by WordPress and WooCommerce. These providers may process data as part of delivering their services.
  • Analytics Providers: We use analytics tools to understand website usage and improve our services. These providers receive anonymized or aggregated data.
  • Legal and Regulatory Authorities: We may disclose your information if required by law, subpoena, court order, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business Transfers: In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

4. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

  • Account Data: Retained for as long as your account is active. You may request account deletion at any time.
  • Order and Transaction Records: Retained for a minimum of six (6) years to comply with tax and accounting obligations.
  • Communication Records: Customer service inquiries are retained for up to two (2) years.
  • Analytics Data: Aggregated, non-identifiable analytics data may be retained indefinitely.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience. Cookies are small text files stored on your device when you visit our site.

5.1 Types of Cookies We Use

  • Essential Cookies: Required for the website to function properly, including session management, shopping cart functionality, and secure checkout. These cannot be disabled.
  • Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data (e.g., Google Analytics).
  • Functional Cookies: Remember your preferences, such as language and region settings, to provide a personalized experience.
  • Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness. These are only set with your consent.

5.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling essential cookies may impair website functionality, including the ability to add items to your cart or complete a purchase. For more information on managing cookies, visit www.allaboutcookies.org.

6. Data Security

We implement commercially reasonable technical, administrative, and organizational security measures to protect your personal information from unauthorized access, use, alteration, or disclosure. These measures include:

  • Encryption: All data transmitted between your browser and our website is encrypted using SSL/TLS (HTTPS) technology.
  • Secure Payment Processing: All payment transactions are processed through Stripe, which is PCI DSS Level 1 certified — the highest level of payment security certification.
  • Access Controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions.
  • Regular Monitoring: We regularly monitor our systems for vulnerabilities and potential security incidents.

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly notifying affected individuals and relevant authorities in the event of a data breach, as required by applicable law.

7. Your Rights and Choices

7.1 All Customers

Regardless of where you are located, you have the right to:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request that we correct inaccurate or incomplete personal information.
  • Deletion: Request that we delete your personal information, subject to certain legal exceptions.
  • Opt-Out of Marketing: Unsubscribe from promotional emails at any time by clicking the “unsubscribe” link in any marketing email or by contacting us directly.
  • Data Portability: Request your data in a structured, commonly used, machine-readable format.

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  • Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purposes for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: You may request the deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to Correct: You may request correction of inaccurate personal information.
  • Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising purposes.
  • Right to Limit Use of Sensitive Personal Information: You may limit how we use sensitive personal information, if applicable.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please contact us at hey@openbxd.com or call us at 937-983-8150. We will verify your identity before processing your request and respond within 45 days, as required by law.

7.3 Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals. If your browser or device sends a GPC signal, we will treat it as a valid opt-out request for the sale or sharing of your personal information.

8. Third-Party Links

Our website may contain links to third-party websites, services, or applications that are not operated by us (for example, links to Stripe, Google Maps, or social media platforms). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices or content of third-party websites.

9. Children’s Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child under 16, please contact us immediately at hey@openbxd.com.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you via email or a prominent notice on our website. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

OpenBXD
322 E National Rd
Vandalia, OH 45377
Email: hey@openbxd.com
Phone: 937-576-3600

We will respond to all privacy-related inquiries within 30 days.