Privacy Policy — Buddha Beauty & More

The short version

We collect what you type into our two forms and what you send us by email — business contact and resale details — plus the basic connection data any website receives.
We use it to answer you, verify resale status, run your account and ship your orders.
We share it only with the services that make that work — UPS, payment processors, our accountants — and with authorities when the law requires.
No analytics, no advertising cookies, no sale of data.
Email info@buddha-beauty.org to see, correct or delete what we hold.

§ 01 Who we are

Buddha Beauty & More is a wholesale distributor of niche fragrance at 200 Ruby Drive, Elizabethtown, Kentucky 42701, United States. We sell to trade accounts only, and we are responsible for the personal information described in this policy.

The policy covers buddha-beauty.org, the forms on it and the email you exchange with our trade desk. It doesn’t cover the websites of the houses we distribute, or other sites we link to — those run under their own policies.

§ 02 What we collect

Almost everything we hold, you gave us directly. It falls into four groups.

Pricelist request (Form PL-01)

Business name, contact name, work email, phone, ZIP code, business type, monthly budget range, the houses you’re interested in and your message.

Trade account application (Form TA-02)

Your first and last name, the buyer’s phone, legal business name, business type, website, EIN if you give one, resale certificate or permit number, ship-to address, business email, any notes you add and your acceptance of our terms. After you apply, we ask you to email a signed copy of your resale certificate. Later on, you may tell us who else at your business is authorized to order.

The application asks you to choose a password, but that field is never sent: the site’s script leaves password fields out of what a form submits, and this static site stores no passwords.

Email, orders and claims

Whatever you write to us, plus what running an account produces — orders, pro forma invoices, invoices, payment confirmations, ship-to addresses and the photos you send with a damage claim. Card details are entered with our payment processor, not on this site.

Technical data

Loading any web page sends your IP address, browser type and the address of the page requested to the servers involved — here, our host and the two services in § 07. We don’t run analytics, so we don’t build visitor profiles from it.

§ 03 How the forms work

buddha-beauty.org is a static site: plain pages with no database, customer login or shopping cart. When you submit a form, its contents — together with the form’s name and the address of the page you sent it from — go to a form-processing service, which delivers them to our trade desk by email and may keep a copy under its own privacy terms. We’ll tell you which service we use if you ask.

From there, your request lives in our email and business records. If you’d rather not use the forms at all, send the same details to info@buddha-beauty.org.

§ 04 How we use it

To answer pricelist requests and questions — the trade desk replies within four business hours, Mon–Fri, 9:00 AM–5:00 PM ET.
To verify that you are a business buying for resale. Under Kentucky’s sales-tax rules (KRS 139.270 and 103 KAR 31:111), a seller without a completed resale certificate from the buyer carries the burden of proving the sale was for resale — so we check yours before we approve an account.
To open and run your account: pro formas, invoices, payments and Net 30 reviews.
To pack and ship orders by UPS Ground and handle damage or shortage claims.
To send operational email — order confirmations, tracking numbers, pricelist updates you asked for and changes to our terms.

We don’t use your details for advertising, and we don’t add you to a mailing list you didn’t ask for.

§ 05 Records we must keep

Tax and accounting rules require us to keep some records after an account closes. Kentucky requires sellers to keep sales-tax records — resale certificates included — until the period for assessing additional tax has expired (103 KAR 31:020). That period is generally four years from the date the return was filed, and it can be extended by agreement with the state (KRS 139.620).

We keep resale certificates, invoices and payment records for at least that long, and longer while an audit, extension or dispute is open. Closing your account or asking us to delete your details doesn’t remove these records; we keep them for that purpose only.

We share personal information only with:

UPS, to deliver your orders — the ship-to name, address, phone and package details;
payment processors and our bank, to take and reconcile ACH, wire and card payments;
our accountants and tax advisors, for bookkeeping, tax filings and audits;
the form-processing and email providers that carry your messages to us;
government agencies, courts or law enforcement, when the law requires it or to protect our rights in a dispute;
a buyer of our business, if we ever sell it, on terms that keep this policy in force for your information.

We don’t sell or rent personal information, and we don’t share it with advertisers or data brokers.

§ 07 Third-party services

Two outside services load content when you view this site, and our host serves every page:

Google Fonts. Our typefaces — Gloock, Albert Sans and Courier Prime — load from fonts.googleapis.com and fonts.gstatic.com. Your browser sends Google your IP address, the file requested and standard headers — your browser and operating system versions, and our site’s address. Google states that the Fonts API doesn’t set cookies and that it doesn’t use this data to build user profiles or target ads. See Google’s Fonts privacy FAQ.
OpenStreetMap. The map in the contact section of our homepage is embedded from openstreetmap.org. Your browser loads it only when you scroll near it, then requests map data from the OpenStreetMap Foundation, which receives your IP address and browser details under its own privacy policy. We tell your browser not to send OpenStreetMap the address of our page.
Cloudflare Pages hosts the site. Like any web host, Cloudflare processes connection data — IP address, request and time — to deliver pages and filter abusive traffic, under its privacy policy.

§ 08 Cookies and tracking

This site sets no analytics or advertising cookies, uses no tracking pixels, and its own script stores nothing in your browser. Every page works with cookies switched off.

Our host is the one party that may set a cookie on this domain. If Cloudflare needs to check that traffic isn’t automated, it may set a short-lived security cookie such as __cf_bm or cf_clearance. Cloudflare classes these as strictly necessary and says it doesn’t use them to follow visitors from site to site — see Cloudflare’s cookie list. The other services in § 07 follow their own rules on their own domains.

§ 09 How long we keep it

Pricelist requests that don’t lead to an account — up to two years after our last exchange, then deleted.
Declined account applications — one year after our decision, then deleted.
Open accounts — for as long as the account is open.
Resale certificates, invoices and payment records — until Kentucky’s period to assess sales tax on the sales they support has expired, generally four years from the return’s filing date (§ 05).

These are our own limits. We may keep something longer when a claim, dispute or legal hold requires it.

§ 10 Security

Pages are served over HTTPS only, and the site’s security headers stop browsers from running scripts from any other domain on our pages. Access to account records is limited to the people who handle orders, accounts and tax.

Don’t send full card numbers or bank passwords by email — we never ask for either that way. No system is perfectly secure; if we learn of a breach that affects your information, we’ll notify you as the law requires.

§ 11 Your choices and rights

You can ask us at any time to:

tell you what personal information we hold about you;
correct anything inaccurate;
delete it, apart from the records we must keep under § 05;
stop sending you pricelist updates or any other email that isn’t about an open order.

Write to info@buddha-beauty.org from the address we have on file, or tell us how to confirm it’s you. We reply within 45 days, don’t charge for requests and won’t treat your business differently for making one.

Depending on the state where you live, privacy laws may give you further rights — for example, to appeal a decision we make on your request. Tell us which law you’re relying on and we’ll answer under it.

§ 12 Children

This is a trade site for businesses. It isn’t directed to children under 13, and we don’t knowingly collect information from them. If you believe a child has sent us information, email us and we’ll delete it.

§ 13 Changes to this policy

When we change this policy, we post the new version here with a new effective date at the top. If a change affects how we use information you’ve already given us, we email active trade accounts before it takes effect.

§ 14 Contact

Privacy questions and requests go to the trade desk by email — we don’t take them by phone, so there’s a written record on both sides.

Buddha Beauty & More
200 Ruby Drive
Elizabethtown, KY 42701
United States
info@buddha-beauty.org

Terms of sale → Back to top ↑