Privacy and Cookie Policy
Last Updated: June 30, 2026
Bag Barn, operated by Online Services Inc. ("we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website bagbarn.com and make purchases from us.
Information We Collect
We collect information you provide directly to us, including:
- Account Information: name, email address, password, and phone number when you create an account
- Order Information: billing and shipping address, payment information, and purchase history
- Communications: any information you provide when you contact us for support or inquiries
- Newsletter: your email address if you subscribe to our mailing list
We also automatically collect certain information when you visit our website, including:
- IP address, browser type, and operating system
- Pages viewed, links clicked, and time spent on our site
- Referring website or source
How We Use Your Information
We use the information we collect to:
- Process and fulfill your orders, including shipping and payment processing
- Communicate with you about your orders, account, or customer service requests
- Send promotional emails if you have opted in (you may unsubscribe at any time)
- Improve our website, products, and services
- Detect and prevent fraud or unauthorized activity
- Comply with legal obligations
Third-Party Service Providers
We share your information with trusted third parties who assist us in operating our business. These providers are contractually obligated to use your information only for the purposes we specify:
- Payment Processing: Braintree (a PayPal company) processes credit card and PayPal payments on our behalf. Your payment information is transmitted directly to Braintree and is not stored on our servers. See Braintree's Privacy Policy.
- Shipping: UPS receives your shipping address and contact information to deliver your orders. See UPS's Privacy Notice.
- Website Hosting: Our website is hosted by JetRails, which may process data on our behalf in the course of providing hosting services.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
Data Security
We implement reasonable administrative, technical, and physical security measures to protect your personal information. All payment transactions are encrypted using SSL/TLS technology. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements. Order records are retained for accounting and tax purposes as required by law.
Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you, free of charge
- Correction: Request that we correct inaccurate or incomplete information
- Deletion: Request that we delete your personal information, subject to legal retention requirements
- Opt-Out: Unsubscribe from marketing communications at any time using the link in our emails or by contacting us
California Residents (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, contact us using the information below.
How We Use Cookies
Cookies are small files stored on your device that help us provide a better shopping experience. We use cookies that are essential to the operation of our website, such as maintaining your shopping cart and session. Most web browsers allow you to control cookies through their settings. Disabling cookies may affect your ability to use certain features of our site.
Cookies We Use
| Cookie Name | Purpose |
|---|---|
| FORM_KEY | Security — prevents forged form submissions |
| PHPSESSID | Session — identifies your browsing session |
| GUEST-VIEW | Allows guests to view and edit their orders |
| PERSISTENT_SHOPPING_CART | Remembers your cart and browsing history if requested |
| STORE | Remembers your selected store view or language |
| USER_ALLOWED_SAVE_COOKIE | Records whether you have consented to cookies |
| MAGE-CACHE-SESSID | Facilitates browser caching for faster page loads |
| MAGE-CACHE-STORAGE | Facilitates browser caching for faster page loads |
| MAGE-CACHE-STORAGE-SECTION-INVALIDATION | Facilitates browser caching for faster page loads |
| MAGE-CACHE-TIMEOUT | Facilitates browser caching for faster page loads |
| SECTION-DATA-IDS | Facilitates browser caching for faster page loads |
| PRIVATE_CONTENT_VERSION | Facilitates browser caching for faster page loads |
| X-MAGENTO-VARY | Facilitates server-side caching for faster page loads |
| MAGE-TRANSLATION-FILE-VERSION | Facilitates translation of content |
| MAGE-TRANSLATION-STORAGE | Facilitates translation of content |
Links to Other Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any website you visit.
Children's Privacy
Our website is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
- Phone: (800) 720-1215
- Address: Online Services Inc., 975 Industrial Dr #11, Madison, IN 47250
- Online: Contact Us