Last updated: June 2026
Who we are
Grnwave Workshop (“we”, “us”, “our”) operates the website grnwave.com, an online shop selling electronics and lighting parts for droid builds. We are based in Calgary, Alberta, Canada. If you have any questions about this policy or the personal information we hold about you, email us at grnwaveworkshop@gmail.com.
What personal data we collect and why
When you place an order
To process and ship your order we collect your name, billing and shipping address, email address, phone number (if you provide one), and the details of the items you order. We use this to take payment, fulfil and deliver your order, send order confirmations and updates, answer your questions, and keep the records we need for tax and accounting.
Payments
We accept payment through PayPal. Your payment details are entered into and processed by PayPal on its own secure systems — we never see or store your full card number. PayPal handles that information under its own privacy policy. We receive only confirmation of payment and the limited transaction details we need to fulfil your order.
Comments
If you leave a comment on the site, we collect the information shown in the comment form, along with your IP address and browser user-agent string to help us detect spam.
Contacting us
If you contact us through the site or by email, we keep your message and contact details so we can reply and for our records.
Cookies
Our site and the WooCommerce shopping system use cookies to keep your cart working, remember your preferences, and — if you leave a comment — optionally save your name and email for next time. You can set your browser to refuse cookies, though parts of the shop may not work properly if you do.
Embedded content from other websites
Some pages may include embedded content (for example videos or social media posts). Embedded content from other websites behaves exactly as if you had visited that website, and those sites may collect data about you, use cookies, and track your interaction with that content.
Analytics
We may use standard website analytics (such as Google Analytics) to understand how visitors use the site so we can improve it. Where used, this collects aggregated, non-identifying information such as pages viewed, approximate location, and device type. We do not run third-party advertising trackers and we do not sell your data.
Who we share your data with
We share personal information only as needed to run the shop: with PayPal to process payments, with shipping carriers to deliver your order, and with the service providers who host our website and email. We do not sell your personal information to anyone. We may disclose information if we are legally required to do so.
What third parties we receive data from
When you pay through PayPal, we receive confirmation of payment and limited details from PayPal — such as your name, shipping address, and the status of the transaction — so we can complete your order. We do not otherwise buy or receive personal information about you from third parties.
How long we retain your data
We keep order records for as long as we need them to fulfil the order and to meet our legal, tax, and accounting obligations. If you leave a comment, the comment and its metadata are kept so we can recognise and approve any follow-up comments. If you create an account, we store the profile details you provide, and you can view, edit, or ask us to delete that information at any time (you cannot change your username).
Your contact information
The contact details you give us — email, phone, and address — are used only to communicate with you about your orders and enquiries. To reach us about your personal data, email grnwaveworkshop@gmail.com.
What rights you have over your data
If you have placed an order or hold an account with us, you can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to erase it — except for information we must keep for legal, tax, or security reasons. As a Canadian business we handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA); depending on where you live, you may have additional rights. To make a request, just contact us.
How we protect your data
Our website is served over an encrypted HTTPS connection. Payment card details are handled entirely by PayPal and are never stored on our servers. We limit access to personal information to those who need it to operate the shop, and we use reputable hosting with standard security measures.
What data breach procedures we have in place
If we become aware of a security breach affecting your personal information, we will act promptly to investigate and contain it, and we will notify affected customers and the appropriate authorities where the law requires.
What automated decision making and/or profiling we do with user data
We do not use your personal information for automated decision-making or profiling. PayPal may carry out automated fraud and risk checks on transactions as part of processing your payment, under its own policies.
Industry regulatory disclosure requirements
We are a small retailer of hobby electronics and are not subject to additional industry-specific privacy regulations. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
Changes to this policy
We may update this policy from time to time. The current version will always be posted on this page.