Privacy policy

Last updated: March 14, 2026

GrifGlo operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). GrifGlo is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

Contact details, including your name, address, billing address, shipping address, phone number, and email address.
Financial information, including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation, and other payment details.
Account information, including your username, password, preferences, and settings.
Transaction information, including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange, or cancel, and your past transactions.
Communications with us, including the information you include in communications with us, for example, when sending a customer support inquiry.
Device information, including information about your device, browser, or network connection, your IP address, and other unique identifiers.
Usage information, including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

Directly from you, including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information.
Automatically through the Services, including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies.
From our service providers, including when we engage them to enable certain technology and when they collect or process your personal information on our behalf.
From our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

Provide, tailor, and improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfill your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges, or other transactions, to create, maintain, and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customized shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.
Marketing and advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising, and promotional communications by email, text message, or postal mail, and to show you online advertisements for products or services on the Services or other websites, including based on items you previously have purchased or added to your cart and other activity on the Services.
Security and fraud prevention. We use your personal information to authenticate your account, to provide a secure payment and shopping experience, detect, investigate, or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and secure our Services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We strongly recommend that you do not share your username, password, or other access details with anyone else.
Communicating with you. We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you, and to maintain our business relationship with you.
Legal reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

With Shopify, vendors, and other third parties who perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping.
With business and marketing partners to provide marketing services and advertise to you. For example, we may use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites.
When you direct, request, or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
With our affiliates or otherwise within our corporate group.
In connection with a business transaction such as a merger, acquisition, financing, restructuring, sale of assets, or bankruptcy, to comply with any applicable legal obligations, to enforce any applicable terms or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we may use certain Shopify features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. In these circumstances, Shopify may be responsible for the processing of certain personal information collected for those purposes, including responding to certain requests to exercise your rights over the use of your personal information for those purposes.

To learn more about how Shopify uses your personal information and any rights you may have, you can visit Shopify's consumer privacy resources and privacy portal.

Third-Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy, security, accuracy, completeness, or reliability of information found on those third-party sites.

Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and-or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply endorsement of the content on such platforms or of their owners or operators, except as expressly disclosed on the Services.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with personal information, you may contact us using the contact details set out below to request that it be deleted.

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee perfect security. In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, provide you with Services, comply with legal obligations, resolve disputes, investigate fraud, or enforce applicable contracts and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances, and, in certain cases, we may decline your request as permitted by law.

Right to access or know. You may have a right to request access to personal information that we hold about you.
Right to delete. You may have a right to request that we delete personal information we maintain about you.
Right to correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
Right of portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
Managing communication preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. We may need to verify your identity before we can process your request, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we may require proof that the agent has been authorized to act on your behalf, and we may need you to verify your identity directly with us.

Additional GrifGlo Privacy Disclosures

The following supplemental disclosures are incorporated into and form part of this Privacy Policy. They apply to our collection, use, disclosure, storage, retention, transfer, and other processing of personal information in connection with our Services. In the event of any inconsistency between these supplemental disclosures and any other statement in this Privacy Policy, these supplemental disclosures will govern to the extent permitted by applicable law.

Privacy Contact

We have designated a person responsible for privacy compliance and the protection of personal information.

Privacy questions, access requests, correction requests, deletion requests, portability requests, consent withdrawals, complaints, and other privacy-related inquiries should be directed to:

GrifGlo
A brand of Griffin Global Commerce Ltd.
Email: info@grifglo.com
Mailing Address: 419-2030 Marine Dr, North Vancouver, BC V7P 1V7, Canada
Subject line: Privacy Request

We may request information reasonably necessary to verify your identity, authority, and the scope of your request before responding. Where permitted by law, we may decline, limit, or defer a request if we are unable to verify your identity or if an exception or restriction applies.

Additional Categories of Personal Information We May Collect or Generate

In addition to the categories listed above, we may collect, receive, create, infer, or maintain the following categories of personal information, to the extent permitted by applicable law:

Records relating to your privacy choices, cookie preferences, marketing preferences, consents, withdrawals of consent, and unsubscribe or suppression status.
Fraud, security, verification, and risk-management information, such as transaction review results, payment status, order validation records, shipping and billing consistency checks, chargeback-related information, device or browser characteristics, network information, IP-derived approximate location, log data, and other signals used to help detect unauthorized, fraudulent, abusive, or malicious activity.
Customer service and account support records, including emails, messages, chat transcripts, complaint records, resolution records, and follow-up communications.
Business, wholesale, or bulk-order information, including business name, business contact details, title or role, purchasing history, tax-related information, shipping instructions, payment arrangements, due diligence records, and business relationship records.
Information received from service providers, payment processors, fraud-prevention providers, fulfillment partners, delivery carriers, analytics providers, advertising partners, marketplaces, social media platforms, identity or verification providers, and other third parties, where permitted by law.
Public or semi-public content that you choose to submit, post, tag, or otherwise make available through reviews, testimonials, social media interactions, contests, promotions, or other user-generated content features.

Cookies, Pixels, Similar Technologies, and Consent Tools

We and our service providers, partners, and third-party technologies may use cookies, pixels, tags, local storage, SDKs, scripts, APIs, log files, and similar technologies to operate the Services, remember preferences, maintain security, detect fraud, understand usage patterns, improve performance, measure campaign effectiveness, personalize content, and support analytics, advertising, retargeting, and related business purposes.

Depending on where you are located and applicable law, some of these technologies may be used only after you have provided the required consent. You may be able to manage certain preferences through our cookie banner, privacy preference center, browser settings, device settings, or other tools made available through the Services. Disabling certain technologies may affect the availability, performance, or functionality of some features of the Services.

Additional Sources of Personal Information

Without limiting the Personal Information Sources section above, we may collect personal information from or through the following additional sources, where permitted by law:

Shopify and related Shopify features, tools, products, checkout functionality, and merchant services.
Payment gateways, payment processors, financial institutions, fraud-screening vendors, and chargeback or transaction review service providers.
Shipping, fulfillment, logistics, returns, and delivery service providers.
Analytics, advertising, customer support, marketing automation, CRM, email, messaging, and website technology providers.
Public databases, sanctions screening tools, identity verification providers, and business information sources.
Social media platforms, advertising networks, or other third parties when you interact with our content, advertisements, social accounts, or embedded features.

Additional Purposes for Which We May Use Personal Information

In addition to the purposes described above, we may use personal information for the following business and operational purposes, to the extent permitted by applicable law:

To administer, maintain, troubleshoot, audit, secure, monitor, and improve our Services, systems, stores, websites, operations, records, and business processes.
To verify identity, assess transaction risk, prevent fraud, reduce chargebacks, investigate suspicious activity, enforce our policies, and protect our business, customers, users, personnel, and third parties.
To maintain records of privacy preferences, consents, withdrawals of consent, and marketing suppression or opt-out lists.
To carry out accounting, bookkeeping, auditing, tax, insurance, reimbursement, internal reporting, recordkeeping, and other internal administrative functions.
To establish, exercise, or defend legal claims, respond to disputes, collect amounts owed, enforce contractual rights, and protect or defend our rights, property, systems, and operations.
To conduct due diligence, evaluations, and planning in connection with a financing, restructuring, sale, merger, acquisition, reorganization, insolvency event, or other business transaction.
To create aggregated, de-identified, anonymized, or statistical information and use or disclose such information for lawful business purposes, including analytics, product improvement, market analysis, forecasting, and operational planning.
To train personnel, maintain service quality, and improve customer support processes, where such use is lawful and appropriate.
To comply with applicable law, legal process, regulatory requests, industry standards, or lawful requirements of public authorities.

Additional Disclosures of Personal Information

In addition to the disclosures described above, we may disclose personal information, where permitted by law, to:

Service providers, subcontractors, and advisors that help us operate our business or provide the Services, including providers of website hosting, cloud storage, checkout, payment processing, fraud prevention, analytics, advertising, CRM, email delivery, customer support, shipping, returns, logistics, recordkeeping, security, IT, and professional services.
Our lawyers, accountants, auditors, consultants, insurers, financing sources, payment service providers, debt collection service providers, and other professional advisors.
Prospective or actual buyers, lenders, investors, merger partners, successors, or other participants in a corporate transaction, and their professional advisors.
Law enforcement, regulators, courts, administrative bodies, or other parties where required or permitted by law, including to protect our legal rights or to prevent harm, fraud, or misuse.
Affiliated entities or entities within our corporate group, where applicable, for internal administration, lawful business operations, compliance, security, and service delivery purposes.
Other parties at your direction, with your consent, or where you choose to use social media widgets, login integrations, embedded tools, referral tools, or third-party services.

International and Interprovincial Transfers

Your personal information may be stored, accessed, processed, or transferred outside your province, territory, or country of residence, including in jurisdictions in which we or our service providers operate. As a result, your personal information may be subject to the laws of those jurisdictions and may be accessible to courts, regulators, law enforcement, or national security authorities in accordance with applicable law.

Retention, Destruction, De-Identification, and Backup Copies

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services and support your relationship with us; maintain transaction records and business records; comply with legal, tax, accounting, audit, regulatory, insurance, and contractual requirements; investigate fraud, chargebacks, disputes, complaints, and security incidents; establish, exercise, or defend legal claims; maintain records of consents, preferences, requests, complaints, and opt-out or suppression records; and enforce our agreements, policies, and rights.

When personal information is no longer reasonably required, we may delete it, destroy it, anonymize it, or de-identify it, subject to legal retention requirements, backup processes, dispute preservation needs, fraud-prevention requirements, and technical limitations. Residual copies may remain in backup systems, archives, logs, disaster recovery environments, or legal hold systems for a limited period.

Privacy Requests, Complaints, Verification, and Authorized Agents

Depending on where you live and subject to applicable law, you may have rights to request access to, correction of, deletion of, portability of, or additional information about your personal information, and to withdraw consent to certain collection, use, or disclosure activities.

To submit a request, complaint, or inquiry, please contact us using the contact details above. We may require you to submit sufficient information for us to verify your identity and understand your request, request clarification if your request is not sufficiently precise, limit or deny a request where permitted by law, ask for proof of authority if a request is made by an authorized agent or representative, and retain request-related information for recordkeeping, compliance, dispute resolution, fraud prevention, and security purposes.

Withdrawal of Consent and Consequences

Where our processing is based on consent, you may withdraw that consent, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

If you withdraw consent, decline to provide certain information, or disable certain technologies, some Services, features, transactions, personalization, communications, fraud review processes, or support functions may be limited, unavailable, or less effective.

Automated Processing, Risk Review, and Personalization

We may use automated tools, rules-based systems, models, or similar processes to help us detect and prevent fraud, abuse, unauthorized transactions, or security threats; prioritize, route, or manage customer support and operational workflows; personalize content, product recommendations, and marketing; assess transaction integrity, payment risk, or fulfillment risk; and improve the performance, usability, and relevance of the Services.

Reviews, Testimonials, and User-Submitted Content

If you submit a review, testimonial, comment, image, video, tag, mention, or other content to us or through the Services, that content may be displayed publicly or semi-publicly, used in connection with the Services, or associated with your first name, initials, general location, or other limited identifying information, as permitted by law and consistent with the context in which the content was submitted.

Please do not submit sensitive personal information, financial information, government identification numbers, health information, or other highly confidential information in public review fields, open text boxes, or unsolicited communications unless we specifically request it and provide an appropriate secure method for doing so.

Business Contact Information and B2B Interactions

Where you interact with us in a business, wholesale, resale, supplier, partnership, or other commercial capacity, we may collect and use business contact information, transactional records, verification information, communications, and related data for account setup, due diligence, relationship management, payment processing, logistics, compliance, order administration, and other lawful business purposes.

Security Incident Management

We maintain policies, procedures, and safeguards that are designed to help detect, assess, contain, investigate, document, and respond to actual or suspected privacy, confidentiality, or security incidents involving personal information. Where required by applicable law, we may notify affected individuals, regulators, or other persons or bodies.

No Waiver of Legal Rights

Nothing in this Privacy Policy limits any rights we may have to collect, use, retain, disclose, or otherwise process personal information where permitted or required by applicable law, court order, legal process, regulatory request, or other lawful authority, or where necessary to protect the Services, our business, our rights, or the rights, safety, and security of others.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided above. Depending on where you live, you may also have the right to raise your complaint with a privacy or data protection regulator.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the last updated date, and provide notice as required by applicable law.