Privacy Policy

This policy explains what personal data BNB Tools collects on go.bnbtools.com and in our emails, why, who we share it with, how long we keep it and your rights. See also our Cookies & Tracking notice.

Who is responsible for your data

The data controller is Taylor'd Computer Networks, doing business as BNB Tools, 28 Medical Dr., Amarillo, TX 79106, USA. Contact for anything privacy-related: info@bnbtools.com (subject "Privacy"). We have not appointed a data protection officer, as we're not required to.

What we collect and why

What	When	Why (and legal basis under the GDPR)
Email address, languages and products you choose, your order, prices, discounts, and whether you ticked the immediate-delivery and marketing boxes	When you start checkout	To create your order, deliver it and prove what you agreed to (contract; legal obligation)
Name, billing country and payment status from Link (Stripe), plus Stripe reference numbers	After you pay	To confirm payment, fulfil and support your order, handle refunds and disputes, keep tax and accounting records (contract; legal obligation)
Library activity: sign-in links sent and used, which template links you open and e-books you download (with date, time and a hashed version of your IP address)	When you use your library	To deliver the products, keep your account secure and show proof of delivery in a dispute (contract; legitimate interests)
IP address and browser type	With checkout, sign-ups, reviews and downloads	Security, fraud and abuse prevention (for example one welcome code per person), and evidence of consent (legitimate interests)
Email subscriptions: your address, the lists you joined, and a record of each consent (date, time, IP address, browser, the form and its wording)	When you sign up and confirm by email (double opt-in)	To send the newsletter you asked for and prove your consent (consent)
Email engagement: whether marketing emails were delivered, opened (see below) or clicked, bounces, complaints and unsubscribes	When we email you	To send less to people who don't read, keep our sending reputation, stop mail to people who unsubscribed or bounced (legitimate interests; consent for open tracking where required)
Welcome code requests: your email, whether you ticked the tips box, and a one-way hashed (scrambled) version of your IP address	When you ask for a $5 code	To issue one code per person and send up to two reminders (legitimate interests; you asked for the code)
Reviews: rating, text, title, photos, display name, the languages you use, your order and IP address	When you leave a review	To publish your review (with your consent) and check it comes from a real buyer (legitimate interests)
Messages you send us	When you email us	To answer you (contract; legitimate interests)
Server and security logs: IP address, pages requested, date and time, browser	Every visit	To keep the Site secure and working (legitimate interests)

We don't collect card numbers (Link/Stripe does), dates of birth, or any sensitive data such as health information. You don't have to give us any data, but we can't sell to you or deliver without an email address.

If you were a customer or subscriber of our previous Shopify store (bnbtools.com): we moved our customer and subscriber records (email address, country, language, subscription status and consent history, and whether you had opened or clicked our emails) from our previous email provider, Klaviyo, to our own system in September 2026. People who had unsubscribed or whose email bounced were carried over as "do not email". People who were added to that list without confirming their subscription are not sent marketing emails; at most we may send them one email asking whether they want to subscribe (never to contacts in the EU/UK).

Emails we send

• Order and account emails (your library link and order confirmation, sign-in links, a getting-started tip, a request to review your purchase about 10 days after it, and replies to your questions) are part of the service you asked for. Your payment receipt is sent separately by Link.
• Marketing emails (hosting tips, new products, offers) only if you opted in and confirmed. Every marketing email has a one-click unsubscribe link; you can also reply or email us. We act on unsubscribes immediately and at the latest within 10 business days.
• Tracking in marketing emails. Links in our marketing emails go through our own server first so we can count clicks. Unless you're in the EU, EEA, UK or Switzerland (where we don't use it), marketing emails also contain a tiny image that tells us if the email was opened. You can block this by turning off images in your email app. We use this only to measure our own emails; nothing is shared with advertisers.

Who we share data with

We don't sell your personal data for money. The only third-party advertising tool on the Site is the Meta Pixel (see Cookies & Tracking); some US state laws call this "sharing" for cross-context behavioural advertising, and you can opt out with the Ad choices (do not sell or share) link in the footer or your browser's Global Privacy Control signal. We share data only with:

• Link / Stripe (Sold through Link, LLC and Stripe, Inc., USA). Link is the merchant of record for your payment: it processes your payment, calculates tax, issues your receipt and handles payment disputes and some refunds. Link acts as an independent controller for the payment data it collects under its own privacy policy. You can also ask Link directly to delete the payment data it holds; if you do, Stripe deletes the related records in our Stripe account too.
• Meta (Meta Platforms Ireland Ltd / Meta Platforms, Inc.), when the Meta Pixel is on and allowed: pages viewed and checkout steps on the Site, and for purchases the order number, amount and items with your email, phone and billing city/postcode/country hashed, your IP address and browser, to measure and improve our ads (legitimate interests; your consent in the EU/EEA/UK/CH). Meta is an independent controller for how it uses this in its ads systems.
• Our hosting: the Site, database and email server run on servers in the United States that are operated by Taylor'd Computer Networks itself, not a third-party cloud or email marketing service.
• Cloudflare (USA), if we switch on its Turnstile bot check on a form: it receives your IP address and browser signals to tell humans from bots, under Cloudflare's privacy policy.
• Canva and Google: when you open a template link from your library, you use Canva or Google under your own account and their own privacy policies. We don't send them your order details.
• Email providers such as Gmail or Outlook, which deliver our messages to you.
• Professional advisers (accountants, lawyers) and authorities when the law requires it, and a buyer of our business if it is ever sold (you'd be told).

Where your data is processed

BNB Tools is based in the United States and your data is stored and processed in the United States. If you're in the EU, EEA, UK or Switzerland, US law may not give the same protection as your own. We apply the safeguards described in this policy to all customers. Stripe and Cloudflare participate in the EU-U.S. Data Privacy Framework and use standard contractual clauses for their own processing.

How long we keep it

• Orders and payment records: 7 years after the purchase, for tax and accounting.
• Your library and account: for as long as we run the service, unless you ask us to delete it (we then keep only the order records above).
• Unpaid (abandoned) checkouts: deleted after 90 days.
• Email subscription and consent records: while you're subscribed, then as long as we need to be able to prove your consent. After you unsubscribe or an address bounces, we keep the address on a "do not email" list so we never mail it again.
• Detailed email open/click records: 24 months.
• Unused, expired welcome codes: deleted 12 months after expiry.
• Reviews: while they're shown on the Site, or until you ask us to remove them.
• Support emails: as long as needed to handle your request and any follow-up.
• Database backups: encrypted, and deleted after 14 days.

Your rights

Wherever you live, you can ask us to see the data we hold about you, correct it, delete it, or give you a copy of it, and you can unsubscribe from marketing at any time. If you're in the EU, EEA or UK you also have the right to restrict or object to our processing (including an absolute right to object to direct marketing), to withdraw consent at any time (without affecting what we did before), to data portability, and to complain to your data protection authority (in the UK, the ICO at ico.org.uk; in the EU, your national authority, listed at edpb.europa.eu). We'd appreciate the chance to help first.

To make a request, email info@bnbtools.com from the address you use with us. We may ask you to confirm your identity. We reply within one month (45 days where US state law applies) and don't charge a fee. If we refuse a request, we'll explain why, and you can ask us to reconsider by replying to that email.

US state privacy laws. We're a small business and don't sell personal data for money or process sensitive data, so we're outside most US state privacy laws (including Texas, where we're based, and California). We still honour the rights above for everyone.

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

Security

We use HTTPS everywhere, encrypted and access-controlled servers, two-factor authentication for staff accounts, one-time sign-in links instead of passwords for customers, and we strip location data from review photos. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

Children

The Site and our products are for adults running rental businesses. You must be 18 or older to buy. We don't knowingly collect personal data from anyone under 16; if you believe a child has given us data, email us and we'll delete it.

Changes

We'll update this policy when our practices change and show the date at the top. If a change is significant, we'll tell customers and subscribers by email before it applies.

Contact

info@bnbtools.com · Taylor'd Computer Networks (BNB Tools), 28 Medical Dr., Amarillo, TX 79106, USA.