Draft skeleton — review with counsel. Reflects Beckes' current data practices.
1. What we collect
- Account: business name, contact name, email, phone, delivery address, Utah TC-721 tax certificate.
- Ordering: the items you request, the prices you agree to, delivery lot numbers, and payment status.
- Usage: login timestamps, IP addresses (for rate-limit + abuse detection), device type via the PWA install prompt.
2. How we use it
- To fulfill orders, deliver product, apply your resale-exemption status, and maintain FDA lot traceability.
- To communicate order status, priced quotes, recall notices, and platform updates.
- To improve pricing, catalog accuracy, and delivery routing based on aggregate history.
3. Who we share it with
We share your data only with vendors necessary to operate the platform:
- Stripe (payments, once card processing goes live)
- Utah State Tax Commission (tax exemption verification, if requested)
- FDA / Utah DHHS (in the event of a food-safety recall investigation)
- Our cloud hosting and email delivery providers under a data-processing agreement
We do not sell your data or share it with advertisers.
4. How we protect it
- All traffic is TLS-encrypted. Passwords are hashed with bcrypt.
- Session cookies are HTTP-only, Secure, and SameSite-None.
- Access to the admin console is restricted to Beckes staff and logged.
5. Retention
Account and order records are retained for 7 years to satisfy Utah tax audit and FDA traceability rules. Password reset tokens expire after 60 minutes. Delivery photos captured at receiving are retained for 90 days.
6. Your rights
You may:
- Request a copy of your personal data.
- Correct account information at any time via Profile → Account.
- Delete non-essential data (e.g. saved retail-planning prices) any time. Records required for tax / traceability compliance cannot be deleted before their retention period ends.
7. Children
Beckes Unlimited is B2B only. We do not knowingly collect data from anyone under 18.
8. Contact
Privacy questions: admin@beckesunlimited.com.