Privacy policy

Last updated: Oct 8, 2026

This Privacy Policy explains how Em & Audrey Enterprises Inc., doing business as Buffy Protein ("Buffy," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit buffyprotein.com (the "Site"), buy from us, sign up for emails or text messages, or otherwise interact with us (together, the "Services"). "You" means any customer, Site visitor, or other person whose information we collect.

Please read this policy carefully. If you do not agree with it, please do not use the Services.

Changes to This Privacy Policy

We review this policy at least once a year and may update it to reflect changes in our practices or in the law. When we do, we will post the revised policy here and change the "Last updated" date above. If we make material changes, we will provide additional notice where required by law, such as a banner on the Site or an email.

Information We Collect

We collect personal information directly from you, automatically when you use the Site, and from service providers that help us run our business. "Personal information" means information that identifies, relates to, or can reasonably be linked to you.

Information you give us

Contact details: name, email address, mailing and shipping address, and phone number.
Order information: items purchased, billing and shipping address, payment confirmation, and order history. Card numbers are handled by our payment processors; we do not store full card numbers.
Account information: login credentials and account preferences.
Marketing preferences: your email and text message opt-ins and opt-outs, including the date, time, and method of consent.
Communications: what you send us when you contact us, enter a promotion, join a waitlist, or leave a review.

Information collected automatically

When you visit the Site, we and our partners use cookies, pixels, and similar technologies to collect device and browser information, IP address, approximate location derived from IP address, pages viewed, referring URLs, and how you interact with our Site and emails. See Cookies and Tracking Technologies below.

Information from third parties

We receive information from companies that support our Services, such as Shopify (our e-commerce platform), payment processors, shipping carriers, and email and text messaging providers.

We do not knowingly collect sensitive personal information, such as government ID numbers, precise geolocation, health information, or biometric data.

How We Use Your Information

To provide the Services: process payments, fulfill and ship orders, manage your account, handle returns, and send order and account updates.
To communicate with you: respond to questions and provide customer support.
For marketing: send emails, text messages (only if you opt in), and mail about products, launches, and promotions, and show you relevant ads.
To improve the Services: understand how the Site is used and develop new products and features.
For security and legal purposes: prevent fraud, protect our rights and our customers, enforce our terms, and comply with law.

Text Messaging (SMS)

We will not share your mobile information or opt-in consent with third parties or affiliates for marketing or promotional purposes. All other categories, such as text messaging originator opt-in data and consent, will not be shared with third parties. This section controls over any other part of this Privacy Policy that could be read to allow such sharing.

If you opt in to text messages from Buffy, we collect your mobile number, your consent record (date, time, and how you opted in), and your message activity, such as replies and opt-outs. We use this information only to send the messages you signed up for, keep records of your consent, and honor your opt-out. Our text messaging service provider and wireless carriers process this information solely to deliver messages on our behalf and may not use it for their own purposes.

Consent is optional. Agreeing to receive marketing texts is not a condition of any purchase.
Frequency and cost. Message frequency varies. Message and data rates may apply.
Opting out. Reply STOP to any message to unsubscribe. You may also opt out by any other reasonable means, such as replying "cancel" or "unsubscribe" or emailing us. After you opt out, we will send one confirmation message and no further marketing texts.
Help. Reply HELP for help, or contact us using the details at the end of this policy.
Carriers are not liable for delayed or undelivered messages.

Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to run the Site, remember your cart and preferences, measure performance, and support advertising. For details on cookies used by our e-commerce platform, see Shopify's Cookie Policy. We may also allow advertising and analytics partners to place these technologies on our Site.

You can block or delete cookies in your browser settings, though some Site features may not work properly without them. You can also manage non-essential cookies through the cookie banner on our Site.

Global Privacy Control. If your browser sends a Global Privacy Control (GPC) or other recognized opt-out preference signal, we treat it as a request to opt out of the sale or sharing of your personal information and targeted advertising for that browser, and the Site will display that your opt-out has been honored.

Do Not Track. Apart from GPC, there is no common standard for browser "Do Not Track" signals, so we do not currently respond to them.

How We Disclose Personal Information

We disclose personal information only as described below, and never in a way that conflicts with the Text Messaging (SMS) section above.

Service providers that work on our behalf under contract, such as Shopify, payment processors, fulfillment and shipping partners, email and SMS platforms, customer support tools, analytics providers, and IT and cloud hosting.
Advertising and marketing partners, such as social media and ad platforms, which use cookies and pixels to measure and personalize ads. These partners use information under their own privacy policies.
At your direction, such as when you use a social login or share content.
Business transfers, such as a merger, acquisition, financing, or sale of assets.
Legal and safety reasons, such as responding to subpoenas or court orders, enforcing our terms, or protecting our rights, customers, or others.

We do not sell personal information for money. However, some state laws treat letting advertising partners collect information through cookies and pixels on our Site as a "sale," "sharing" for cross-context behavioral advertising, or "targeted advertising." In the past 12 months, we have disclosed the following categories of personal information:

Category of personal information	Disclosed to service providers for business purposes	"Sold" or "shared" for advertising
Identifiers (name, email, address, phone, IP address, device IDs)	Yes	Yes, limited to email and device or cookie IDs
Commercial information (purchases, browsing on our Site)	Yes	Yes
Internet activity (Site and email interactions)	Yes	Yes
Approximate location (derived from IP address)	Yes	Yes
Mobile number and SMS opt-in data	Yes, to our SMS provider only	No, never
Sensitive personal information	Not collected	No

You can opt out of these activities at any time using our Do Not Sell or Share My Personal Information page or by enabling Global Privacy Control in your browser. We do not knowingly sell or share the personal information of anyone under 18, or use it for targeted advertising.

Reviews and Other Content You Post

If you post a product review or other content in a public area of the Services, anyone can see it. Please do not include personal information you want to keep private.

Third-Party Websites

Our Site links to other websites and platforms, such as Instagram and TikTok. Their privacy practices are governed by their own policies, not this one.

Children and Teens

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. We do not knowingly sell, share, or use for targeted advertising the personal information of anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

Security and Retention

We use reasonable administrative, technical, and physical safeguards to protect personal information, but no method of transmission or storage is completely secure.

We keep personal information only as long as needed for the purposes in this policy. For example, we keep order records as long as required for tax and accounting purposes, marketing data until you unsubscribe or ask us to delete it, and SMS consent records as long as needed to show we had your permission. We then delete or de-identify the information.

Your Privacy Rights

Depending on where you live, you may have the rights below. Residents of states with comprehensive privacy laws, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, have some or all of these rights. We extend them to all US customers where reasonably possible.

Know and access: confirm whether we process your personal information and get a copy of it.
Correct: fix inaccurate personal information.
Delete: have us delete personal information we hold about you.
Portability: receive your information in a portable format.
Opt out of sale, sharing, and targeted advertising: see Sale, Sharing, and Targeted Advertising above.
Opt out of profiling: we do not use personal information for profiling or automated decisions that have legal or similarly significant effects.
List of third parties: in some states, request a list of the specific third parties, or categories of third parties, to which we disclosed your information.
Limit use of sensitive information: we do not collect sensitive personal information.
Withdraw consent: where we rely on consent, such as for marketing texts, you can withdraw it at any time.
Non-discrimination: we will not deny you goods, charge you different prices, or give you a lower quality of service for exercising your rights.

How to Exercise Your Rights

Email us at contact@buffyprotein.com with the subject "Privacy Request" and tell us which right you want to use. To opt out of sale, sharing, or targeted advertising, use our Do Not Sell or Share My Personal Information page or enable Global Privacy Control. To stop marketing emails, click "unsubscribe" in any email; to stop texts, reply STOP.

We will verify your identity, usually by matching information you give us to our records, before acting on most requests. You may use an authorized agent; we will ask for proof that you authorized the agent and may ask you to confirm your identity directly. We will respond within 45 days, or tell you if we need up to 45 more days as allowed by law.

Appeals. If we deny your request, you may appeal by replying to our decision or emailing contact@buffyprotein.com with the subject "Privacy Appeal." We will respond in writing within the time required by your state's law. If you disagree with the outcome, you may contact your state Attorney General.

Additional State Notices

California. California residents may request information once a year about personal information we disclosed to third parties for their own direct marketing purposes (California Civil Code Section 1798.83). We do not disclose personal information to third parties for their own direct marketing purposes.

Nevada. Nevada residents may submit a request to opt out of the sale of covered information by emailing contact@buffyprotein.com.

Users Outside the United States

Buffy products are sold in the United States, and the Services are operated from the United States. If you use them from elsewhere, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your country.

Contact Us

For questions about this policy or to exercise your privacy rights, contact us at:

Email us at contact@buffyprotein.com or use our contact page.