Privacy Policy

Bee-Transformed LLC ("we", "us") runs https://bee-transformed.com. This policy describes what we collect when you shop, contact us, or use the site, and who helps us run it.

What we collect

• Name, email, phone, and shipping or billing address you give us
• Order details needed to fulfill a purchase, including items, totals, tax, and delivery notes
• Messages you send by form, email, or phone
• Files you attach to an email you send the shop, limited to the types we accept
• A short record of your browser address when we need it to slow down abusive requests. We do not build an advertising profile from it.

How we use it

We use this information to take and ship orders, answer questions, keep a record of the conversation, and send receipts, shipping updates, and other messages about an order you placed. Marketing email, when we send it, includes a way to unsubscribe. We do not sell your personal information.

Payments

Card payments are processed by Authorize.net on their hosted payment page inside checkout. We do not collect or store full card numbers, CVV codes, or full payment account numbers on our servers. Authorize.net receives the billing details it needs to process the charge. An order stays unpaid until Authorize.net confirms the payment.

Where information lives

The public site is a Next.js application hosted on Vercel. Orders, customer records, form messages, and the staff inbox are stored in Supabase. Personal fields we keep there, such as name, email, phone, address, and message text, are encrypted at rest when our encryption key is configured. In production, a write of those fields is refused if that key is missing.

Staff review orders and messages in a private tool called the Hive. That tool is not a customer account. Shoppers do not sign in to see the catalog.

Email and staff alerts

Receipts, shipping notes, and replies are sent with Resend from a Bee-Transformed address. Inbound email to the shop is filed in the Hive so staff can read it and reply.

Staff phones or computers that opt in can receive a web push alert when a customer message arrives. The lock-screen text is a short subject or a generic notice. It does not include the message body. These alerts go to staff devices only, not to customers.

Files you send us

Attachments on mail to the shop are checked before staff can open them. We accept PDF, PNG, JPEG, GIF, WebP, plain text, and CSV files, up to 5 MB each. Executables, scripts, archives, and files whose contents do not match the name are blocked or quarantined. If a malware scanner is configured, those files are also sent to that scanner. A file that fails a check is not offered as a normal download. This screening reduces risk. It is not a promise that every harmful file will be caught.

Cookies and on-device storage

• Your cart is saved in this browser's local storage under the name bt-cart-v1 so it is still there if you leave and come back. It is not sent to us until you check out.
• After checkout we may set an httpOnly cookie named for that order. It holds a signed snapshot so the confirmation page can load for about 48 hours. It cannot mark an order paid.
• Staff sign-in uses a separate httpOnly cookie. Ordinary shoppers do not receive it.

We do not run a third-party advertising or analytics tag on the shop.

Who else sees it

We share only what a provider needs to do its job: Authorize.net for card charges, Resend for email, Supabase for stored records, Vercel for hosting the site, and the carrier that ships a package. They may process that information in the United States. We do not authorize them to sell it.

Contact

Privacy questions: hello@bee-transformed.com or (417) 869-0233. You can also use the contact form.

307 West Glenwood Street, Springfield, MO 65807

Shipping, returns, and payment are also described in our store policies and terms of service.