Privacy policy

Privacy Policy

Last updated: September 22, 2026

This Privacy Policy describes how BUA Inc. (“BUA,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when you visit, use, or make a purchase from justinbua.com (the “Site”), including when you interact with our products, services, communications, advertisements, or other features made available through the Site.

By using the Site, you acknowledge the practices described in this Privacy Policy.

In addition, you agree to our Messaging Terms and Messaging Privacy Policy, which apply to our messaging services:

Messaging Terms: https://terms.pscr.pt/legal/shop/bua-inc/terms_of_service

Messaging Privacy Policy: https://terms.pscr.pt/legal/shop/bua-inc/privacy_policy

1. Personal Information We Collect

“Personal Information” means information that identifies, relates to, describes, or could reasonably be linked with an identifiable individual, as defined by applicable privacy laws.

The information we collect depends on how you interact with us.

Information You Provide Directly

We may collect information that you voluntarily provide, including:

  • Your name.

  • Billing address.

  • Shipping address.

  • Email address.

  • Telephone number.

  • Account login information, if you create an account.

  • Payment and transaction information necessary to process purchases.

  • Products purchased, returned, exchanged, or considered for purchase.

  • Communications you send to us, including customer-service inquiries.

  • Information you provide when entering a promotion, giveaway, survey, or other Site feature.

  • Information you provide when subscribing to marketing or other communications.

  • Any other information you voluntarily provide to us.

Payment card information is generally processed by our payment processors rather than stored directly by us. The payment information that we receive or retain depends on the payment methods and services enabled on our Shopify store.

Information Collected Automatically

When you visit or interact with the Site, we may automatically collect information about your device and your interaction with the Site, including:

  • Internet Protocol (“IP”) address.

  • Browser type and version.

  • Operating system.

  • Device type and identifiers.

  • General geographic information derived from your IP address.

  • Time zone.

  • Referring and exit pages.

  • Pages, products, and content viewed.

  • Search terms.

  • Links and buttons clicked.

  • Date and time of Site visits.

  • Shopping-cart activity.

  • Purchase and browsing activity.

  • Information concerning how you interact with emails, advertisements, and other communications.

  • Cookie identifiers and similar technologies.

We collect this information through cookies, pixels, tags, web beacons, log files, Shopify Pixels, and similar technologies, where applicable.

Information From Third Parties

We may receive information from third parties, including Shopify, payment processors, shipping and fulfillment providers, advertising and marketing partners, analytics providers, fraud-prevention services, social-media platforms, and other service providers, depending on which services are connected to our Site.

We may combine information received from third parties with information we collect directly or automatically.

2. How We Use Personal Information

We may use Personal Information for the following purposes:

  • To operate, maintain, and improve the Site.

  • To provide and fulfill orders, purchases, returns, exchanges, and other transactions.

  • To process payments.

  • To arrange shipping and delivery.

  • To provide invoices, receipts, order confirmations, and other transaction communications.

  • To communicate with you about your orders, account, or requests.

  • To provide customer service and support.

  • To create and manage customer accounts.

  • To personalize your experience.

  • To remember your preferences and shopping-cart activity.

  • To analyze Site usage, performance, traffic, and trends.

  • To improve our products, services, content, and marketing.

  • To detect, investigate, and prevent fraud, abuse, unauthorized activity, security incidents, and other harmful or unlawful activity.

  • To protect the security and integrity of our Site, systems, business, customers, and users.

  • To comply with applicable laws, regulations, legal processes, and governmental requests.

  • To establish, exercise, or defend legal claims and rights.

  • To send marketing communications where permitted by law and consistent with your preferences.

  • To deliver, measure, and improve advertising and promotional campaigns where applicable.

  • To perform other purposes disclosed to you at or before the time information is collected or with your consent where required.

3. Legal Bases for Processing

Where applicable law requires a legal basis for processing Personal Information, including the General Data Protection Regulation (“GDPR”), we may process Personal Information on the following bases:

  • Performance of a contract: when processing is necessary to fulfill an order, provide a requested service, or otherwise perform our agreement with you.

  • Consent: when you have provided consent, including where consent is required for certain cookies, marketing communications, or other processing.

  • Legitimate interests: when processing is reasonably necessary for our legitimate business interests, such as operating and improving our Site, preventing fraud, securing our systems, and communicating with customers, provided those interests are not overridden by applicable rights.

  • Legal obligations: when processing is necessary to comply with applicable law, regulation, court order, subpoena, or other legal obligation.

  • Protection of vital interests: where necessary to protect someone's vital interests.

  • Public interest: where applicable law permits processing on this basis.

Where processing is based on consent, you may withdraw your consent where permitted by applicable law. Withdrawal does not affect processing that occurred before withdrawal.

4. Sharing Personal Information

We may disclose Personal Information to third parties when reasonably necessary to operate our business, provide our products and services, fulfill transactions, or comply with law.

These parties may include:

  • Shopify, which provides the ecommerce platform supporting our online store.

  • Payment processors and payment service providers.

  • Shipping carriers and fulfillment providers.

  • Customer-service and communications providers.

  • Email, SMS, and messaging providers.

  • Analytics and measurement providers.

  • Advertising and marketing providers.

  • Fraud prevention, security, and identity-verification providers.

  • Technology, hosting, cloud-storage, and infrastructure providers.

  • Professional advisers, including attorneys, accountants, insurers, auditors, and consultants.

  • Government authorities, regulators, courts, law enforcement, or other parties when legally required or reasonably necessary to protect rights or safety.

  • A buyer, successor, investor, or other party involved in an actual or proposed merger, acquisition, financing, restructuring, sale, transfer, or other business transaction.

  • Other service providers acting on our behalf and subject to contractual or other appropriate privacy obligations.

We do not authorize service providers to use Personal Information for purposes inconsistent with the services they provide to us, except as otherwise permitted by applicable law.

Shopify's privacy practices are described in its privacy policy:

https://www.shopify.com/legal/privacy

5. Payment Information

Payments made through the Site may be processed by Shopify and/or third-party payment processors.

We generally do not need to receive or store your complete payment-card number. Payment processors may collect and process payment information according to their own privacy policies and applicable security requirements.

6. Behavioral Advertising and Marketing

Where applicable, we may use Personal Information and information about your interactions with our Site to provide, measure, personalize, or improve advertising and marketing.

This may include using cookies, pixels, advertising identifiers, or similar technologies to understand whether you have viewed products, visited our Site, made a purchase, interacted with an advertisement, or otherwise interacted with our marketing.

Depending on the services enabled on the Site, we may work with advertising, analytics, and marketing partners that receive information about your activity.

You may be able to control certain advertising and tracking practices through our cookie controls, browser settings, device settings, advertising-platform settings, or other opt-out mechanisms made available to you.

If you have enabled or use Shopify's applicable privacy and data-sharing controls, you may also be able to exercise certain choices through Shopify's privacy tools.

Shopify's privacy controls are available at:

https://privacy.shopify.com/

7. Cookies and Similar Technologies

A cookie is a small text file placed on your computer or device when you visit a website.

We may use cookies and similar technologies for purposes including:

  • Keeping the Site functioning.

  • Maintaining shopping carts and checkout sessions.

  • Remembering customer preferences.

  • Maintaining customer accounts.

  • Understanding how visitors use the Site.

  • Measuring Site performance.

  • Detecting fraud and security threats.

  • Measuring advertising performance.

  • Delivering or personalizing advertising where applicable.

  • Providing social-media, content, or other third-party functionality.

Cookies may be classified as necessary, functional, analytics/performance, advertising, or similar categories depending on their purpose.

Shopify Cookies

Shopify and the Site may use cookies and similar technologies necessary to operate the storefront, cart, checkout, customer accounts, analytics, and other Shopify functionality.

Examples may include cookies or identifiers associated with:

  • Storefront navigation.

  • Shopping carts.

  • Checkout.

  • Customer authentication.

  • Customer preferences.

  • Analytics.

  • Marketing attribution.

  • Consent and tracking preferences.

The precise cookies used on the Site may change as Shopify, our theme, applications, integrations, or other Site functionality changes.

Managing Cookies

You may control cookies through your browser or device settings and, where available, through the cookie-consent or privacy controls provided on the Site.

Disabling certain cookies may cause portions of the Site, shopping cart, checkout, customer accounts, or other functionality to operate incorrectly or become unavailable.

For information about managing cookies generally, you may consult your browser's help documentation or other reputable privacy resources.

8. Do Not Track

Because there is currently no universally accepted standard for responding to browser “Do Not Track” signals, the Site may not respond to such signals unless required by applicable law.

Where required by applicable law, we will honor legally recognized privacy preference signals, including applicable Global Privacy Control (“GPC”) signals.

9. Sale or Sharing of Personal Information

We do not sell Personal Information for money in the ordinary sense of that term.

However, certain privacy laws define “sale” or “sharing” broadly enough to include certain disclosures to advertising or analytics partners, even when no money is exchanged.

Where applicable law treats our use of advertising, analytics, or similar technologies as a “sale,” “sharing,” or targeted-advertising activity, you may have the right to opt out.

Where required, we will provide an applicable “Do Not Sell or Share My Personal Information” or similar privacy control and will honor applicable opt-out requests.

10. Data Retention

We retain Personal Information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • Provide products and services.

  • Complete and document transactions.

  • Maintain business and financial records.

  • Resolve disputes.

  • Prevent fraud and abuse.

  • Enforce agreements.

  • Comply with legal, tax, accounting, regulatory, and other obligations.

  • Protect our rights and the rights of others.

Retention periods vary depending on the type of information, the purpose for which it was collected, legal requirements, and our legitimate business needs.

When Personal Information is no longer reasonably necessary, we may delete it, anonymize it, or securely dispose of it, subject to applicable legal and operational requirements.

11. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect Personal Information against unauthorized access, disclosure, alteration, destruction, or misuse.

However, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of any account credentials and for notifying us if you believe your account has been compromised.

12. International Data Transfers

Because we use service providers and technology infrastructure that may operate in different countries, Personal Information may be processed, stored, or transferred outside the state or country in which you live.

Where required by applicable law, we use appropriate safeguards for international transfers of Personal Information.

For individuals in the European Economic Area (“EEA”), United Kingdom, or Switzerland, this may include applicable contractual safeguards, adequacy decisions, or other lawful transfer mechanisms.

13. Children's Privacy

The Site is not directed to children under 13 years of age.

We do not knowingly collect Personal Information from children under 13. If you believe a child under 13 has provided us with Personal Information, please contact us using the contact information in this Privacy Policy so that we can evaluate and, where appropriate, delete the information.

Where applicable law establishes a higher age or additional protections for children's information, we will comply with those requirements.

14. Your Privacy Rights

Depending on where you live and subject to applicable law, you may have rights concerning your Personal Information.

These rights may include:

  • The right to know whether we process Personal Information about you.

  • The right to access Personal Information we maintain about you.

  • The right to obtain information about how we collect, use, and disclose Personal Information.

  • The right to correct inaccurate Personal Information.

  • The right to delete Personal Information, subject to legal exceptions.

  • The right to obtain a portable copy of certain Personal Information.

  • The right to opt out of certain targeted advertising, sales, or sharing of Personal Information.

  • The right to withdraw consent where processing is based on consent.

  • The right to appeal certain decisions concerning a privacy request.

  • The right to exercise applicable rights without unlawful discrimination or retaliation.

These rights are not absolute and may be subject to exceptions under applicable law.

How to Submit a Privacy Request

To submit a request concerning your Personal Information, contact us using the mailing address listed in the “Contact Us” section below.

Please identify the nature of your request and provide enough information for us to reasonably verify your identity and locate the applicable information.

We may request additional information reasonably necessary to verify your identity and protect against fraudulent requests.

We will respond within the period required by applicable law.

If we deny a request and applicable law provides a right to appeal, you may request an appeal by responding to our decision or contacting us using the same information provided above.

15. California Privacy Rights

If you are a California resident, California privacy law may provide you with additional rights.

Depending on the circumstances and applicable law, these may include rights to:

  • Know and access certain Personal Information collected about you.

  • Correct inaccurate Personal Information.

  • Delete certain Personal Information.

  • Obtain certain information in a portable format.

  • Opt out of the sale or sharing of Personal Information.

  • Opt out of certain targeted advertising.

  • Limit certain uses or disclosures of sensitive Personal Information where applicable.

  • Not receive discriminatory treatment for exercising applicable privacy rights.

We do not knowingly sell or share the Personal Information of consumers under 16 years of age without the consent or authorization required by applicable law.

We do not offer financial incentives for the collection, sale, or sharing of Personal Information unless we separately disclose the material terms of such a program as required by law.

California residents may use the contact information in this Privacy Policy to submit applicable privacy requests.

16. Texas Privacy Rights

If you are a Texas resident and applicable Texas privacy law applies to our processing of your Personal Information, you may have rights provided by the Texas Data Privacy and Security Act and other applicable law.

Depending on the circumstances, these rights may include:

  • Confirming whether we process your Personal Data.

  • Accessing your Personal Data.

  • Correcting inaccuracies in your Personal Data.

  • Deleting Personal Data provided by or obtained about you.

  • Obtaining a portable copy of certain Personal Data.

  • Opting out of the processing of Personal Data for targeted advertising.

  • Opting out of certain sales of Personal Data.

  • Opting out of certain profiling in furtherance of decisions that produce legal or similarly significant effects.

Requests are subject to applicable verification procedures, exceptions, and other limitations provided by law.

If applicable law provides a right to appeal our decision concerning your request, you may appeal by contacting us using the contact information below.

17. European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, United Kingdom, or Switzerland, applicable privacy law may provide additional rights concerning your Personal Information.

These may include rights to:

  • Access your Personal Information.

  • Correct inaccurate Personal Information.

  • Delete Personal Information in certain circumstances.

  • Restrict certain processing.

  • Object to certain processing.

  • Receive certain Personal Information in a portable format.

  • Withdraw consent where processing is based on consent.

  • Lodge a complaint with a competent data protection authority.

Where we process Personal Information based on legitimate interests, you may have the right to object to that processing depending on the circumstances.

Where we process Personal Information for direct marketing, you generally have the right to object to such processing.

Data Protection Authority

If you are located in the EEA, UK, or Switzerland, you may contact the data protection authority or supervisory authority in your country or jurisdiction if you believe your privacy rights have been violated.

18. Automated Decision-Making and Profiling

We may use automated tools to help detect fraud, security threats, abuse, or potentially unauthorized transactions.

Where applicable, Shopify and other service providers may use automated systems for fraud prevention and security purposes.

We do not knowingly make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals unless permitted by applicable law and subject to any rights or safeguards required by law.

Where applicable law provides a right to obtain information about or challenge qualifying automated decisions, you may exercise that right using the contact information below.

19. Third-Party Websites and Services

The Site may contain links to websites, applications, social-media platforms, or other services operated by third parties.

This Privacy Policy does not govern the privacy practices of those third parties.

We encourage you to review the privacy policies of third-party websites and services before providing them with Personal Information.

20. SMS and Other Electronic Communications

If you choose to receive SMS, email, or other electronic marketing communications from us, we may use your contact information to send those communications in accordance with your preferences and applicable law.

You may unsubscribe from marketing communications by using the unsubscribe mechanism included in the communication or by contacting us.

Additional terms may apply to messaging services. Please review our Messaging Terms and Messaging Privacy Policy.

21. Intellectual Property and Trademark Notice

All content and materials appearing on or made available through the Site are protected by applicable intellectual-property laws and are owned by BUA Inc., its licensors, or other applicable rights holders, except where otherwise expressly stated.

This includes, without limitation:

  • Trademarks.

  • Service marks.

  • Trade names.

  • Logos.

  • Brand names.

  • Product names.

  • Product designs.

  • Artwork.

  • Graphics.

  • Photographs.

  • Images.

  • Videos.

  • Audio.

  • Written content.

  • Product descriptions.

  • Website copy.

  • Designs and layouts.

  • Packaging and creative materials.

  • Trade dress.

  • Software and technology.

  • Source code and other technical materials.

  • Original concepts, materials, and other proprietary content.

Nothing in this Privacy Policy grants you any ownership interest, license, right, or permission to use, reproduce, modify, distribute, publish, display, transmit, sell, create derivative works from, or otherwise exploit any BUA Inc. trademark, copyright, design, trade dress, proprietary content, or other intellectual property except as expressly permitted by us in writing or by applicable law.

The names, marks, logos, designs, and other identifiers associated with BUA Inc. and its products and services may constitute trademarks or trade dress of BUA Inc. or their respective owners.

Unauthorized use, reproduction, copying, scraping, distribution, modification, framing, mirroring, extraction, or commercial exploitation of Site content or intellectual property is prohibited to the fullest extent permitted by law.

Nothing in this Privacy Policy limits any rights or remedies available to BUA Inc. under applicable trademark, copyright, trade-secret, unfair-competition, or other intellectual-property laws.

For complete terms governing use of the Site and our intellectual property, please refer to our Terms of Service.

22. No Sale or License of Customer Information

Except as described in this Privacy Policy or otherwise permitted by law, we do not grant third parties a right to use Personal Information for their own independent purposes.

Nothing in this Privacy Policy prevents us from using aggregated, deidentified, or anonymized information that cannot reasonably be used to identify an individual, to the extent permitted by applicable law.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, technology, services, applicable laws, regulations, or other operational requirements.

When we make changes, we will update the “Last updated” date at the top of this Privacy Policy.

Where required by law, we will provide additional notice or obtain consent for material changes.

Your continued use of the Site after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy to the extent permitted by applicable law.

24. Contact Us

If you have questions about this Privacy Policy, our privacy practices, your Personal Information, or a privacy request, you may contact us by mail at:

BUA Inc.
215 West Bandera Road
Boerne, TX 78006
United States

When submitting a privacy request, please clearly identify the request as a Privacy Request and provide sufficient information for us to understand and process your request.

Last updated: September 22, 2026