Privacy Policy

How BN C-CORPT Inc Collects, Uses, Protects, and Respects Your Personal Information

At BN C-CORPT Inc, privacy is not a legal formality. It is a reflection of how we do business. When you visit bncco.store, browse our solid wood furniture collections, request a custom size for a shelf board, place an order, contact our support team, or sign up for updates, you are sharing information with us. That information belongs to you, and we treat it with the care and respect it deserves. This Privacy Policy explains what information we collect, why we collect it, how we use it, how we protect it, when we share it, how long we keep it, and what rights you have over it.

We are a Houston-based company located at 1230 Kress St, Suite 1, Houston, Texas 77020, and we sell through our website at bncco.store. We are the entity responsible for the personal information described in this policy. If you have a question, concern, or request related to privacy, you can contact us directly by email at huy.duc.399@gmail.com or by phone at +84828585866. We read every message and respond to privacy inquiries as promptly and thoroughly as we can.

This policy applies to personal information collected through our website, through email and phone communications, through order processing and fulfillment, through payment processing with Stripe, and through any other interaction you have with BN C-CORPT Inc. It does not apply to third-party websites or services that we do not control, even if we link to them from our website. We encourage you to read the privacy policies of any third-party website or service you visit.

We have written this policy to be as clear and complete as possible because we believe that privacy notices should be readable, not buried in legal language that nobody understands. Where we use technical terms, we explain them. Where we describe a practice, we explain why we do it. Where the law gives you rights, we explain how to exercise them. If any part of this policy is unclear, please contact us, and we will explain it.

Our Privacy Principles

Transparency

We tell you what we collect, why we collect it, and who we share it with. We do not collect information secretly, and we do not use information in ways that we have not described. If we change our practices in a material way, we will update this policy and, where appropriate, notify you.

Minimization

We collect only the information we need to operate our business, fulfill your orders, provide support, and meet our legal obligations. We do not collect information simply because it is available or because it might be useful someday. Every category of information described in this policy serves a specific purpose.

Security

We protect personal information with appropriate technical and organizational measures. We use secure payment processing through Stripe, we limit access to personal information to team members who need it, and we review our practices regularly. No system is perfectly secure, but we take our responsibility seriously and work to reduce risk.

Respect for Your Choices

You have choices about how your information is used. You can opt out of marketing communications, you can request access to or deletion of your information where the law provides those rights, and you can contact us with questions or concerns. We honor these choices to the extent required by applicable law and consistent with our legitimate business needs and legal obligations.

Accountability

We are accountable for how we handle personal information. If you believe we have mishandled your information, we want to know. We will investigate, respond, and take corrective action where appropriate. Privacy is a trust issue, and trust is earned through consistent, honest behavior.

Information We Collect

Information You Provide Directly

We collect information you provide directly to us when you interact with our website, place an order, contact us, or request information. This may include:

  • Contact information, such as your name, email address, phone number, and mailing address

  • Shipping information, such as the recipient name, street address, apartment or suite number, city, state, ZIP code, and delivery instructions

  • Billing information, such as the billing address associated with your payment method

  • Order information, such as the products you order, the dimensions or options you select, the quantity, the price, and the order date

  • Custom order information, such as measurements, wood species preferences, finish selections, and any diagrams or photos you provide

  • Communication information, such as the content of emails, phone messages, and other communications you send to us

  • Feedback and reviews, such as comments, suggestions, or reviews you submit to us or post on our website

  • Business information, such as your company name, business address, resale certificate information, and other details you provide when inquiring about trade or wholesale relationships

We collect this information when you provide it voluntarily. You are not required to provide all of it, but some information is necessary to process an order or respond to a request.

Payment Information

We use Stripe to process payments. When you pay by credit card, debit card, Apple Pay, or Google Pay, your payment information is handled by Stripe. We do not store full credit card numbers on our systems. Stripe may provide us with limited information about a transaction, such as the last four digits of the card, the card brand, the billing ZIP code, and the transaction status. This information is used to confirm payment, process refunds, and respond to billing inquiries.

We do not ask customers to send full card numbers by email. If you receive a request that appears to come from us asking for full card details by email, do not respond. Contact us directly using the contact information in this policy to verify the request.

Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies, pixels, and similar technologies. This may include:

  • Device information, such as the type of device, operating system, browser type, and version

  • Usage information, such as the pages you visit, the products you view, the links you click, and the time and date of your visit

  • IP address, which may be used to approximate your general location and to help detect fraud

  • Referring information, such as the website or search engine that referred you to our site

  • Cookie and similar identifiers, which are described in more detail in the Cookies section below

We use this information to operate and improve our website, to understand how customers use our site, to detect and prevent fraud, and to measure the effectiveness of our marketing. We do not use this information to identify you personally unless you have provided personal information through an order, account, or communication.

Information from Third Parties

We may receive information about you from third parties in limited circumstances, such as:

  • Payment processors, such as Stripe, which may provide transaction status and fraud signals

  • Shipping carriers, which may provide delivery confirmation, address correction information, and tracking updates

  • Fraud prevention and analytics providers, which may provide information about suspicious activity

  • Service providers that help us operate our website, such as hosting providers and email service providers

We use this information for the purposes described in this policy, including order fulfillment, fraud prevention, customer support, and website improvement.

Information We Do Not Intentionally Collect

We do not intentionally collect sensitive personal information such as Social Security numbers, government-issued identification numbers, health information, biometric information, or precise geolocation data, except where necessary for a specific purpose such as fraud prevention or legal compliance. If you believe we have collected sensitive information unintentionally, please contact us so that we can address the situation.

We do not knowingly collect personal information from children under the age of thirteen. Our website and products are intended for adults. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete the information.

How We Use Personal Information

Order Processing and Fulfillment

We use personal information to process and fulfill your orders. This includes confirming your order, processing payment through Stripe, coordinating production for custom items, packaging and shipping products, providing tracking information, and communicating with you about the status of your order. We also use information to handle returns, exchanges, refunds, and warranty claims.

Customer Support

We use personal information to respond to your questions, requests, and complaints. This includes responding to emails, returning phone calls, providing product information, assisting with assembly or installation questions, and resolving issues. We may keep records of these communications to help us provide consistent support and to improve our service.

Custom Orders and Quotes

If you request a custom order or quote, we use the information you provide—such as dimensions, wood species preferences, finish selections, and delivery location—to evaluate feasibility, prepare a quote, and coordinate production. We may share limited information with suppliers or workshops for the purpose of producing your custom item.

Payment Processing and Fraud Prevention

We use payment information and related details to process payments, issue refunds, and respond to billing inquiries. We also use information to detect and prevent fraud, unauthorized transactions, and other illegal activity. This may include sharing information with Stripe and other fraud prevention providers.

Communication

We use contact information to communicate with you about your orders, respond to your inquiries, and provide customer support. With your consent where required, we may also send you marketing communications about new products, promotions, and company news. You can opt out of marketing communications at any time as described in the Marketing Communications section below.

Website Operation and Improvement

We use automatically collected information to operate and improve our website. This includes analyzing how customers use the site, identifying popular products and pages, diagnosing technical issues, and improving the user experience. We may use analytics tools that collect information about your visit.

Legal Compliance and Protection

We may use personal information to comply with applicable laws, regulations, and legal processes, to respond to lawful requests from authorities, to enforce our Terms and Conditions, to protect our rights and property, and to protect the safety of our customers, employees, and others.

Business Operations

We may use personal information for internal business purposes, such as accounting, auditing, recordkeeping, and business planning. We may also use information to evaluate and improve our products, services, and business processes.

Legal Bases for Processing

If you are located in a jurisdiction that requires a legal basis for processing personal information—such as the European Economic Area, the United Kingdom, or certain U.S. states with comprehensive privacy laws—we rely on the following legal bases:

  • Contractual necessity: Processing is necessary to perform a contract with you, such as processing and fulfilling an order.

  • Legitimate interests: Processing is necessary for our legitimate interests, such as improving our website, preventing fraud, and communicating with customers, provided those interests are not overridden by your rights and interests.

  • Consent: Processing is based on your consent, such as when you opt in to marketing communications. You can withdraw consent at any time.

  • Legal obligation: Processing is necessary to comply with applicable laws and regulations.

  • Vital interests: Processing is necessary to protect someone’s life or safety, which is unlikely to apply in most cases but may apply in emergencies.

If you have questions about the legal basis for a particular processing activity, contact us.

Cookies and Similar Technologies

What Cookies Are

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work, to remember your preferences, and to provide information to website owners. Cookies can be session cookies, which expire when you close your browser, or persistent cookies, which remain on your device for a period of time.

How We Use Cookies

We use cookies and similar technologies for several purposes:

  • Essential cookies: These cookies are necessary for the website to function properly, such as remembering items in your cart or maintaining your session during checkout.

  • Preference cookies: These cookies remember your preferences, such as language or display settings, to improve your experience.

  • Analytics cookies: These cookies help us understand how customers use our website, which pages are visited, and how users navigate the site. This information helps us improve the website.

  • Marketing cookies: These cookies may be used to measure the effectiveness of our marketing and to show relevant content or ads on other websites, where applicable and permitted by law.

Managing Cookies

You can manage cookies through your browser settings. Most browsers allow you to block or delete cookies, and some allow you to be notified when a cookie is set. If you disable cookies, some parts of our website may not function properly. For example, essential cookies are required for checkout to work.

Some browsers offer a “Do Not Track” feature that sends a signal to websites indicating that you do not want to be tracked. There is no universally accepted standard for how websites should respond to Do Not Track signals, and our website may not respond to them. If you have questions about how we use cookies, contact us.

Third-Party Cookies

Some cookies may be set by third parties, such as analytics providers or payment processors, when you use our website. These third parties have their own privacy policies, and we encourage you to review them. We do not control third-party cookies.

How We Share Personal Information

Service Providers

We share personal information with service providers who help us operate our business. These providers are contractually or otherwise obligated to protect the information and to use it only for the purposes for which it was shared. Service providers may include:

  • Payment processors, such as Stripe, for payment processing, fraud prevention, and refunds

  • Shipping carriers, for order fulfillment, delivery, and tracking

  • Suppliers and workshops, for production of custom and made-to-order items

  • Technology providers, such as website hosting, email delivery, and analytics services

  • Professional advisors, such as accountants and lawyers, where necessary for business operations

Business Transfers

If BN C-CORPT Inc is involved in a merger, acquisition, reorganization, sale of assets, or similar transaction, personal information may be transferred as part of that transaction. We will take reasonable steps to ensure that the recipient continues to protect personal information in a manner consistent with this policy, and we will notify you where required by law.

Legal Requirements

We may disclose personal information if required to do so by law or in response to lawful requests from public authorities, including to meet national security or law enforcement requirements. We may also disclose information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Protection of Rights

We may disclose personal information to enforce our Terms and Conditions, to protect our rights and property, to prevent fraud or abuse, or to protect the safety of our customers, employees, or others.

With Your Consent

We may share personal information with third parties when you have given us consent to do so. For example, if you ask us to share information with a contractor or designer, we may do so with your consent.

Aggregated or De-Identified Information

We may share aggregated or de-identified information that does not identify you personally. For example, we may share statistics about website traffic or product popularity. This information is not personal information and is not subject to the restrictions in this policy.

What We Do Not Do

We do not sell personal information to unrelated third parties for their own marketing purposes. We do not share your personal information with third parties for their own marketing purposes unless you have given us consent. We do not rent or trade personal information.

Data Retention

How Long We Keep Information

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our agreements. The specific retention period depends on the type of information and the purpose for which it was collected.

For example:

  • Order information may be retained for several years to comply with tax and accounting requirements, to handle warranty claims, and to resolve disputes.

  • Communication records may be retained for a period of time to provide consistent customer support and to document interactions.

  • Marketing information may be retained until you opt out or until it is no longer needed for marketing purposes.

  • Website analytics information may be retained for a limited period, depending on the analytics provider’s settings.

When information is no longer needed, we take reasonable steps to delete, anonymize, or securely dispose of it. If you request deletion of your information, we will comply to the extent required by law and subject to our legitimate business needs and legal obligations.

Legal Holds

In some cases, we may be required to retain information for legal reasons, such as a litigation hold, a regulatory requirement, or a law enforcement request. In those cases, we will retain the information as required and limit access to it.

Data Security

Measures We Take

We take reasonable technical and organizational measures to protect personal information from unauthorized access, use, disclosure, alteration, and destruction. These measures include:

  • Using secure payment processing through Stripe, a PCI Level 1 service provider

  • Encrypting data in transit using industry-standard protocols

  • Limiting access to personal information to team members who need it to perform their duties

  • Using authentication and access controls to protect systems

  • Reviewing and updating our security practices periodically

  • Training team members on privacy and security responsibilities where appropriate

Limitations

No method of transmission over the internet or method of electronic storage is completely secure. While we work to protect personal information, we cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure—for example, if you suspect that your account or payment information has been compromised—contact us immediately.

Breach Notification

If we become aware of a security incident that compromises personal information, we will investigate, take appropriate steps to mitigate the incident, and notify affected individuals and authorities as required by applicable law. We will provide information about the incident and the steps we are taking in a timely manner.

Your Role in Security

You also play a role in protecting your information. Choose strong, unique passwords for any accounts you create, keep your devices and software up to date, avoid entering sensitive information on public computers or unsecured networks, and monitor your statements for unauthorized activity. If you receive a suspicious message that appears to come from us, contact us to verify it before responding.

Your Privacy Rights

Rights Under U.S. State Privacy Laws

If you reside in a U.S. state with a comprehensive privacy law—such as California, Colorado, Connecticut, Virginia, Utah, or other states that have enacted similar laws—you may have certain rights regarding your personal information. These rights may include:

  • Right to know: The right to know what personal information we collect, how we use it, and with whom we share it

  • Right to access: The right to request a copy of the personal information we hold about you

  • Right to correct: The right to request correction of inaccurate personal information

  • Right to delete: The right to request deletion of your personal information, subject to certain exceptions

  • Right to opt out of sale or sharing: The right to opt out of the sale or sharing of personal information for targeted advertising, if applicable

  • Right to limit use of sensitive information: The right to limit the use of sensitive personal information, if applicable

  • Right to non-discrimination: The right not to be discriminated against for exercising your privacy rights

We do not sell personal information as defined by these laws, and we do not share personal information for cross-context behavioral advertising in a manner that would trigger an opt-out right under current interpretations, except where we may use marketing cookies as described in this policy. If you have questions about whether a specific practice applies to you, contact us.

Rights Under Other Laws

If you reside outside the United States—for example, in the European Economic Area, the United Kingdom, Canada, or another jurisdiction with privacy laws—you may have additional rights under those laws. These may include the right to object to processing, the right to restrict processing, the right to data portability, and the right to withdraw consent. We will honor these rights to the extent required by applicable law.

How to Exercise Your Rights

To exercise a privacy right, contact us by email at huy.duc.399@gmail.com with a clear subject line such as “Privacy Request.” Please describe the right you wish to exercise and provide enough information for us to verify your identity and locate your information. We may need to verify your identity before acting on a request, particularly for requests involving sensitive information or account access.

We will respond to verified requests within the timeframe required by applicable law. If we cannot fulfill a request in whole or in part, we will explain why, subject to any legal limitations on what we can disclose.

Authorized Agents

In some jurisdictions, you may designate an authorized agent to submit a privacy request on your behalf. We may require proof that the agent is authorized to act on your behalf and may require you to verify your identity directly. Contact us for more information.

Appeals

If you are located in a jurisdiction that provides an appeal process for denied privacy requests, you may appeal our decision by contacting us with the subject line “Privacy Appeal.” We will review the appeal and respond in accordance with applicable law.

Marketing Communications and Your Choices

Opt-In and Opt-Out

We may send marketing communications about new products, promotions, and company news if you have consented to receive them or if we are otherwise permitted to do so. You can opt out of marketing communications at any time by:

  • Clicking the unsubscribe link in a marketing email

  • Contacting us at huy.duc.399@gmail.com and requesting to be removed from marketing communications

  • Calling us at +84828585866

Please note that even if you opt out of marketing communications, we may still send you transactional or relationship messages, such as order confirmations, shipping updates, and responses to your inquiries. These messages are necessary to fulfill our obligations and provide customer support.

Processing Time for Opt-Outs

We will process opt-out requests as soon as practicable. You may continue to receive marketing communications for a short period while our systems update. If you continue to receive marketing communications after a reasonable period, contact us so that we can investigate.

Do Not Track and Global Privacy Control

Some browsers and browser extensions send “Do Not Track” or “Global Privacy Control” signals. There is no universally accepted standard for how websites should respond to these signals. Where required by applicable law, we will honor opt-out preference signals as required. If you have questions about how we respond to these signals, contact us.

Third-Party Links and Services

Our website may contain links to third-party websites or services that are not owned or controlled by BN C-CORPT Inc. These may include payment processors, shipping carriers, social media platforms, or other service providers. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party website or service you visit.

Some third-party services may collect information about you when you interact with them, even if you do not leave our website. For example, if we embed a video from a third-party platform or use a third-party analytics tool, that third party may collect information about your visit. We do not control these third-party collection practices.

International Data Transfers

BN C-CORPT Inc is based in the United States. If you are located outside the United States, your personal information may be transferred to, stored in, and processed in the United States or other countries where we or our service providers operate. Privacy laws in those countries may differ from the laws in your country.

Where required by applicable law, we take steps to ensure that international transfers of personal information are subject to appropriate safeguards. If you have questions about international data transfers, contact us.

Children’s Privacy

Our website and products are intended for adults. We do not knowingly collect personal information from children under the age of thirteen. If we learn that we have collected personal information from a child under thirteen, we will take reasonable steps to delete the information. If you believe a child has provided personal information to us, contact us at huy.duc.399@gmail.com so that we can address the situation.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. When we make material changes, we will update the effective date at the top of this page and, where appropriate, provide notice on our website or by email. We encourage you to review this policy periodically to stay informed about how we handle personal information.

Your continued use of our website or services after a change to this policy constitutes your acceptance of the updated policy to the extent permitted by applicable law. If you do not agree with a change, you should stop using our website and contact us if you have questions.

Contact Us About Privacy

If you have a question, concern, or request related to privacy, please contact BN C-CORPT Inc directly. We take privacy inquiries seriously and will respond as promptly and thoroughly as we can.

You can reach us by email at huy.duc.399@gmail.com. Please use a clear subject line such as “Privacy Question,” “Privacy Request,” or “Privacy Appeal” so that your message is routed efficiently.

You can reach us by phone at +84828585866. If we are unavailable, please leave a voicemail with your name, phone number, and a brief description of your question, and we will return your call as soon as possible.

Our business address is BN C-CORPT Inc, 1230 Kress St, Suite 1, Houston, Texas 77020. Our website is bncco.store.

We are committed to protecting your privacy, respecting your choices, and handling your personal information with the care and honesty that you deserve. Thank you for trusting BN C-CORPT Inc with your information and your business.