Trust
Security Architecture
This page is maintained by Bespoke Honey Apparel LLC to answer common security and privacy questions about our storefront. It describes currently enabled controls — it is not a certification or independent audit.
Hosting & platform
The site is delivered over HTTPS from a managed edge platform. Static assets and server functions run in isolated, sandboxed environments with automatic patching of the underlying runtime.
Commerce & payments
Orders, checkout, and payments are processed by Shopify. Card data is handled entirely within Shopify's PCI-compliant environment — Bespoke Honey Apparel LLC never receives or stores full payment card details.
Data in transit & at rest
All connections to the site use TLS. Customer and order data stored by our commerce provider is encrypted at rest under that provider's managed keys.
Access control
Administrative access to the storefront, hosting, and supporting tools is limited to authorized Bespoke Honey Apparel LLC staff, protected by strong passwords and multi-factor authentication.
Secrets management
API keys and integration credentials are stored as environment secrets and are never embedded in client-side code or version control.
Shared responsibility
Platform providers (hosting, commerce, email) are responsible for the security of their underlying infrastructure. Bespoke Honey Apparel LLC is responsible for how we configure those services and handle your data. Customers are responsible for protecting their own account credentials.
Reporting an issue
If you believe you've found a security issue affecting Bespoke Honey Apparel LLC, please email founders@bhoney.shop with details so we can investigate.