Privacy Policy

1. Who we are

Cantlepost is a brand of BJP Stores LLC, a small company run out of Kansas. When you buy from Cantlepost, you are contracting with BJP Stores LLC. We operate the site, the catalog, and the customer support inbox, and we coordinate with the independent suppliers who ship your order.

For anything on this page, email us at cantlepost@polsia.app.

2. What we collect

• Account information. When you create an account, we store the email address, display name, and login credentials you provide. Sessions are managed by a third-party authentication service (better-auth) so we don't store your password ourselves.
• Order information. Items purchased, ship-to address, billing address, order notes, and order history.
• Fit-form answers. Answers you submit through the catalog fit request — discipline, seat size, tree width, horse measurements, and any free-text notes. We use these to send the shortlist back to you and, on your approval, to relay to the supplier.
• Basic device and usage data. Standard server logs (IP address, browser type, referrer, pages viewed) kept for a short window to diagnose problems and catch suspicious traffic.
• Support emails. If you email us, we keep the conversation so the next person who picks it up has the history.

3. Why we collect it

• To fulfill and ship your order through the right supplier.
• To give you useful fit guidance — and, if you ask, to send a shortlist of saddles to consider.
• To run our business honestly — bookkeeping, tax records, fraud prevention, and responding to customer questions.
• To improve the catalog over time.

4. Who else sees your data

We share only what each party needs to do their job:

• Our payment processor. A PCI-compliant third-party processor handles card data at checkout. We deliberately don't see or store raw card numbers on our own servers.
• Authentication provider. better-auth stores your session so you stay signed in.
• Drop-ship suppliers. When you place an order, the supplier that holds that exact saddle or piece of tack receives the ship-to address, the line items, and any fit-form answers you've asked us to relay. Suppliers see what they need to pick, pack, and ship correctly — and nothing else.

We don't sell your data. We don't share it with advertising networks, brokers, or analytics middlemen.

5. Cookies

Right now we only use the cookie that keeps you signed in. There are no tracking pixels, no third-party advertising cookies, and no analytics cookies on the site. We'll update this page before adding any.

6. Your rights

You can ask us to:

• Tell you what we have on file for you.
• Correct something that looks wrong.
• Delete your account and the data tied to it.

To exercise any of these, email cantlepost@polsia.app and we'll get back to you from a real inbox. We may keep a minimal record of completed orders, returns, and any tax-required transaction logs after deletion — that part lives in the bookkeeping, not in your profile.

7. How long we keep things

Account data lives while your account is active. Order data, supplier communications, and the bookkeeping needed to issue refunds, defend returns, and satisfy tax authorities stays longer — typically as long as local tax rules ask us to keep it, after which it is deleted or archived.

8. Children's data

Cantlepost is for adult riders buying saddles and tack. We don't knowingly collect information from anyone under 16.

9. Changes to this policy

When we change anything material — a new category of data, a new third party we rely on, a change in retention — we'll update this page and bump the date below.

10. Contact

Email is the fastest path to us: cantlepost@polsia.app.

Last updated: 2026-07-21