Privacy Notice

Last updated: August 2026

This policy explains what information Bison Commerce collects through this website, how we use it, who we share it with, and the choices you have. We have written it in plain language on purpose. If anything is unclear, or you want to exercise any of the rights described below, reach us through our contact form.

Who we are

Bison Commerce is a marketplace commerce partner for brands, with offices at 330 W Chestnut St, STE 2W, Hinsdale, IL 60521, United States, and Veiverių g. 90, Kaunas, LT-46271, Lithuania. For the information collected through this website, Bison Commerce decides how and why it is processed, which makes us the data controller.

Information you give us

• Contact form. When you submit our contact form, we collect your name, email address, and message, plus your company and phone number if you choose to provide them.
• Newsletter. When you sign up for our newsletter, we collect your email address. We use double opt-in: you are only added to the list after you confirm your subscription through the email we send you.

Job applicants

If you apply for a role with us, we collect the information you send with your application: your CV, your contact details, and anything else you choose to share. We use it to run the recruitment process for that role. Applications go through our hiring platform, Breezy HR, which stores them on our behalf. How we process candidate data, how long we keep it, and the rights you have as an applicant are set out in full in our Privacy Notice for Job Candidates.

Information collected automatically

Like most websites, we collect some information automatically when you visit:

• Usage analytics. Pages you visit, links and buttons you click, how long you stay, the site that referred you, your browser and device type, and your approximate location based on your IP address (country and city level, not your street address).
• Session replays. Our analytics tool can replay how a visit moved through the site (scrolling, clicks, navigation) so we can find and fix confusing pages. Anything you type into a form is masked in these replays; we cannot see it.
• Performance and error data. Page load speed and technical errors, so we can keep the site fast and working.
• Spam protection. Our forms use Cloudflare Turnstile, which checks that you are a real person and not an automated bot. It analyzes technical signals from your browser to do this.

How we use your information

• To respond to your enquiry and discuss a potential partnership.
• To send you the newsletter you signed up for.
• To understand how the site is used and improve it.
• To keep the site secure and block spam and abuse.

We do not sell your personal information, we do not share it with advertising networks, and we do not use it to build advertising profiles of you.

Our legal grounds

If you are visiting from the European Economic Area or the United Kingdom, the law requires us to name a legal basis for each use of your information. Ours are: your consent (the newsletter, which you can withdraw at any time by unsubscribing), steps taken at your request before entering a contract (responding to a partnership enquiry), and our legitimate interest in running, improving, and protecting this website (analytics and spam protection).

Who we share it with

We share information only with the service providers that run this website for us, and only so they can perform those services:

• Vercel hosts the website and provides basic, aggregated visitor analytics.
• SendGrid (Twilio) delivers your contact form message to our team's inbox.
• Mailchimp (Intuit) stores our newsletter list and sends the newsletter.
• PostHog provides the usage analytics and session replays described above.
• Cloudflare provides the Turnstile spam protection on our forms.
• Mux streams the videos on this site and receives standard technical data (such as your IP address) when a video plays.

Each of these providers is bound by its own contractual and legal obligations to protect your data. Beyond service providers, we would disclose information only if the law required it, or as part of a sale or restructuring of our business.

Cookies

We use cookies and similar browser storage for the analytics described above and to remember small preferences, such as that you have seen our cookie notice. We do not use advertising or cross-site tracking cookies. You can block or delete cookies in your browser settings at any time; the site will still work.

How long we keep it

• Contact enquiries: for as long as needed to handle your enquiry and any business relationship that follows.
• Newsletter: until you unsubscribe. Every email we send includes an unsubscribe link that works immediately.
• Analytics data: according to our analytics providers' standard retention periods, after which it is deleted or aggregated.

Where your data is stored

Our service providers store data primarily in the United States. If you are visiting from the European Economic Area or the United Kingdom, this means your information is transferred outside your region. Our providers rely on recognized safeguards for these transfers, such as the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.

Your rights and choices

You can ask us at any time to:

• Tell you what information we hold about you.
• Correct information that is wrong.
• Delete your information.
• Stop using your information for a particular purpose.
• Give you a copy of the information you provided to us.

To exercise any of these, use our contact form and tell us what you would like us to do. We will respond within the time the applicable law requires (30 to 45 days in most places). We will never treat you differently for exercising a privacy right.

If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority. In Lithuania, that is the State Data Protection Inspectorate (VDAI).

Security

The site is served over an encrypted connection (HTTPS), access to the systems holding your information is limited to the people who need it, and we use reputable providers with their own security programs. No website can promise perfect security, but we work to protect the information you share with us.

Changes to this policy

When we change this policy, we will update it on this page and revise the date at the top. Significant changes will be noted clearly here.

How to reach us

For any question about this policy or your information, use our contact form and our team will get back to you.