Privacy Policy

The wholesale portal is a business-to-business ordering system for approved wholesale accounts. There is no public checkout and no consumer shopping on this site. Accounts are opened by businesses, reviewed by us, and approved manually before any pricing or ordering becomes available.

Most of what we hold is business information — a company name, a business email address, a resale certificate. Some of it also identifies a person, such as the name and phone number of your business contact. We treat all of it with the same care, and this policy applies to the whole of it.

When you request portal access

The account request form asks for:

• Business name
• Contact name
• Email address
• Phone number
• A short description of your business
• The sales channels you sell through, and their web addresses — for example a website, eBay, Whatnot, Etsy, Instagram, Facebook, or a brick-and-mortar shop
• A password, which is stored only as a salted hash and is never visible to us

To verify your account

After you confirm your email address, we ask for your federal Employer Identification Number (EIN) and a copy of your resale certificate, uploaded as a PDF, JPG, or PNG. We use these to confirm you are a legitimate reseller and to support tax-exempt wholesale purchasing. Your certificate file is stored in private, access-restricted storage — it is not published anywhere on the site and is readable only by you and by Beehive Glass administrators.

When you place an order

• Shipping details: recipient name, street address, city, state, and ZIP code
• Order contents: products, colors, SKUs, quantities, the wholesale prices applied, shipping cost, and order total
• Order status over time, plus the carrier and tracking number once your order ships
• A payment reference identifier returned by Stripe, which lets us match an order to its payment

Your preferences

Whether you have opted in to our wholesale mailing list. This is a single on/off setting you control yourself, and it is off unless you turn it on.

Website analytics

Our hosting platform collects visitor analytics across the portal automatically. This is built into the platform the site runs on rather than something our own code adds, and it applies to every page. It records:

• How many visitors arrive, how many page views they generate, and how many pages they view per visit
• How long a visit lasts, and the bounce rate
• Which individual pages were viewed, by their web address — including the pages of specific products
• Where the visit came from, such as a referring site or link
• The type of device used
• The country the visit came from

We want to be plain about the third item, because it is the one that goes past a simple visit counter: the analytics record the individual page addresses viewed, not only aggregate totals. That means the reporting can show that a particular product page was looked at, which is closer to behavioral analytics than to a headcount, and we would rather say so than let the word “analytics” imply something smaller than it is.

What it is not, equally plainly: there is no advertising network involved, nothing follows you across other websites, and nothing in it identifies you personally beyond the categories listed above. We do not combine it with your account or order records. We use it to understand which products draw interest and whether the portal is working properly.

Cookies and local storage

When you sign in, your browser stores a session token in local storage so that you stay logged in. The portal sets that itself, and clearing it signs you out.

Our hosting platform also sets a cookie of its own, for security and to distinguish real visitors from automated traffic. It is set by the platform at the network level rather than by our code, it cannot be read by scripts running on the page, and it is not used for advertising or to follow you across other sites.

The visitor analytics described above store one further item in your browser, an identifier named session-id. It marks a single visit, so that the pages viewed during that visit are counted as one session rather than as separate visitors. Like the analytics themselves it comes from our hosting platform rather than from our own code, and it is not used for advertising or to follow you across other sites.

Those three items — the sign-in token, the platform cookie, and the analytics session identifier — are the only things this portal stores in your browser. It sets no advertising, profiling, or cross-site tracking storage of any kind.

Our hosting and database providers also keep standard operational logs, which may include IP addresses and request timestamps, for security and reliability purposes.

The visitor analytics our hosting platform collects are described in Section 2, and that is the full extent of the measurement on this portal. Beyond it, we do not:

• Run advertising, or let any advertising network collect anything through this portal
• Track you across other websites, or use cookies to build a profile of you
• Combine the analytics in Section 2 with your account, cart, or order records
• Sell, rent, or trade your information to anyone, for any purpose
• Buy contact lists or add anyone to our mailing list without their action

• To review your account request and decide whether to approve it
• To verify your reseller status and apply tax-exempt treatment where it applies
• To show you wholesale pricing and let you place orders
• To take payment, and to issue a refund in the circumstances described in our Terms of Service
• To pick, pack, and ship your order, and to tell you when it has shipped
• To send you order-related email: order confirmations and shipping notifications
• To send you wholesale marketing email, but only if you have opted in
• To answer your questions and provide account support
• To keep required business, tax, and accounting records
• To understand which products draw interest and whether the portal is working, using the analytics described in Section 2
• To secure the portal and investigate misuse

We do not use your information for automated decision-making. Account approval is a manual review by a person at Beehive Glass.

We use a small number of established providers to run the portal. Each one only receives what it needs to do its job, and none of them are permitted to use your information for their own marketing.

• Supabase — hosts our database, account authentication, and the private file storage where resale certificates are kept.
• Stripe — processes all payments and refunds. Stripe collects your card details directly and is the sole holder of them. Stripe also receives the order amount and a reference to the order.
• Resend — delivers our email. This covers order confirmations and shipping notifications, and, if you have opted in, our wholesale mailing list. Resend receives your email address and the contents of the messages we send you.
• Our hosting provider — hosts and serves the portal, provides network security and protection against automated traffic, and supplies the built-in visitor analytics described in Section 2.
• Google Fonts — serves the typefaces the portal is set in. Your browser requests them from Google, which means Google receives your IP address when a page loads.

Beyond these providers, we share information only when we are legally required to — for example in response to a valid legal request — or where it is necessary to establish or defend a legal claim. If Beehive Glass is ever sold or merged, account and order records may transfer to the new owner, who would remain bound by this policy until it is properly replaced.

Our wholesale mailing list is strictly opt-in. New accounts start unsubscribed. Nothing you do during signup, approval, or checkout adds you to it.

You opt in by turning on the mailing list switch on your Dashboard or Account Settings page. Turning it on adds your email address to our wholesale mailing audience at Resend.

You can opt out at any time, in either of two ways, and both are immediate. Turn the same switch off, and your address is removed from our wholesale mailing audience. Or use the unsubscribe link included in every marketing email we send.

Opting out of marketing does not stop order confirmations and shipping notifications. Those are transactional messages about business you have transacted with us, they are not promotional, and they are sent regardless of your mailing list setting. If you no longer want any email from us at all, ask us to close your account.

• Account records — for as long as your account is open, and afterwards for as long as we need them for tax, accounting, and legal purposes.
• Order records — retained as business records. We do not delete order history on request, because we are required to keep records of completed sales.
• EIN and resale certificates — for as long as your account is active and for the period tax authorities require exemption documentation to be kept.
• Mailing list membership — until you opt out, at which point your address is removed from the mailing audience.
• Visitor analytics — retained by our hosting platform on its own schedule, as reporting rather than as records tied to your account.

Access to the portal requires an account, and every account must be approved by us before it can see pricing or place an order. Access rules are enforced in the database itself, not only in the website, so one wholesale account cannot read another’s orders, cart, or account details. Resale certificates are held in private storage that only their owner and our administrators can read. Traffic to and from the portal is encrypted in transit.

Keeping your password confidential is your responsibility, and you should tell us promptly if you believe your account has been accessed by someone else. No system is perfectly secure, and we cannot guarantee absolute security — but if a breach affects your information, we will notify you as required by law.

You can view your business details and change your mailing list preference at any time on your Account Settings page, and reset your password from there or from the login page.

For anything else, write to us at contact@beehiveglasscompany.com. We will answer questions about this policy, tell you what we hold about your account, and correct anything that is wrong or out of date.

We do not delete accounts or erase the information behind them, and the portal has no tool that does so. Your account details, order history, and the EIN and resale certificate you supplied are kept as business and tax records for the periods described in Section 7. Closing an account ends access to the portal; it does not remove those records.

Our providers operate in the United States and may process and store data in facilities there and in other countries. By using the portal you understand that your information may be handled outside the country you are located in.

The portal is for businesses. It is not directed at anyone under 18, and we do not knowingly collect information from children. If we learn we have, we will delete it.

We may update this policy as the portal changes or as the law requires. The effective date at the top always reflects the current version. If a change materially affects how we handle your information, we will let account holders know by email before it takes effect.

Questions about this policy, or about information we hold, go to contact@beehiveglasscompany.com.

See also our Terms of Service, which cover ordering, payment, shipping, and our refund and return policy.