E&J Group Inc. Privacy Policy

GrooveThis Woodshop and GrooveThis Intelligence

E&J Group Inc., doing business as GrooveThis Woodshop (“we,” “us,” or “our”), operates:

• GrooveThis Woodshop, our online store at groovethiswoodshop.com.
• GrooveThis Intelligence, our private business reporting application at intelligence.groovethiswoodshop.com.

This policy explains how we collect, use, retain and disclose information in connection with these services. Section 1 applies to the storefront, Section 2 applies to GrooveThis Intelligence, and Section 3 applies to both.

1. GrooveThis Woodshop Storefront

Information we collect

Customer and order information. When you place or attempt to place an order, contact us or otherwise provide information, we receive details such as your name, email address, telephone number, billing and shipping addresses, purchased products, order history and communications.

Personalization information. If you request a personalized product, we receive the text, images or instructions you submit to fulfill that request.

Payment information. Payments are processed through the payment services available at checkout. Those providers receive the payment credentials necessary to process your transaction. We receive transaction information and, depending on the payment method, limited payment details such as the card brand, masked card number and payment-verification results. Shopify does not make your full payment-card number or card security code available to us through its ordinary merchant order information.

Website activity. Our website and its service providers collect information such as your IP address, browser and device characteristics, pages and products viewed, referring websites, shopping activity and cookie identifiers. Collection depends on the services you use, your settings and applicable privacy choices.

Technologies used include cookies and similar identifiers, server logs, and pixels or tags that record website activity.

How we use information

We use information to:

• Process payments, fulfill and deliver orders, and handle returns or refunds.
• Produce personalized products according to your instructions.
• Respond to inquiries and provide customer service.
• Maintain accounting, tax and other business records.
• Detect fraud, protect our systems and resolve disputes.
• Understand sales and website performance and improve our products and services.
• Send marketing communications and measure or improve advertising, subject to applicable law and your choices.

We also use selected business information in GrooveThis Intelligence for internal reporting, as described in Section 2.

Shopify and other service providers

Shopify provides our ecommerce platform. Other providers support functions such as payments, shipping, communications, hosting, analytics and advertising.

These providers receive information relevant to the services they perform. Depending on the service, providers may process information on our behalf or for purposes described in their own privacy notices.

Shopify also offers consumer services, including Shop and Shop Pay, which have separate account features and privacy practices. See Shopify’s Privacy Policy.

Google Analytics

We use Google Analytics to understand website activity and measure performance. Information about Google’s processing is available in Google’s Privacy Policy. Google also offers a Google Analytics browser opt-out tool.

Meta advertising tools

We use Meta Pixel and Meta’s Conversions API through Shopify’s Facebook and Instagram integration, with the Maximum data-sharing setting.

These tools share website interactions and purchase events with Meta to measure advertising performance and improve advertising relevance. Depending on the event and information available, this sharing can include contact information such as name, email address, telephone number and location, together with device, browser and transaction information. Meta can use this information to match activity with accounts on its services.

Information may be transmitted through browser-based technologies and directly between Shopify and Meta’s servers. Blocking browser cookies alone may not prevent server-to-server disclosures.

See Meta’s Privacy Policy for information about its processing and privacy choices.

This description concerns our storefront integration; it does not describe advertising tracking within the private GrooveThis Intelligence application.

Cookies and marketing choices

Cookies and related technologies support checkout, security, preferences, analytics and advertising.

You can manage cookies through your browser settings. Disabling necessary cookies may affect checkout or other functionality. Platform advertising preferences may allow you to adjust how advertisements are personalized, but do not necessarily stop all information collection.

Marketing emails include an unsubscribe option. We may continue sending nonmarketing communications concerning orders, service requests or other transactions.

Some advertising-related disclosures may constitute “sale,” “sharing” or “targeted advertising” under applicable privacy laws, even when no money is exchanged. Available rights and choices depend on applicable law.

Storefront retention

Retention depends on the purpose of the record, our relationship with you and applicable legal requirements. Order and transaction records may need to be retained for accounting, tax, fraud prevention, disputes or other legitimate business purposes.

A deletion request does not necessarily require removal of every transaction record. Where appropriate, identifying information may be removed while permitted business records remain. Shopify and other providers may also retain information under their own applicable obligations.

2. GrooveThis Intelligence

Purpose and scope

GrooveThis Intelligence is a private business reporting application for explicitly authorized personnel. It supports internal analysis of marketplace, product, sales, financial and website-performance information.

The application is not a public customer-account or shopping service.

Information processed

Authorized-user information. Google/Firebase authentication supports sign-in and access control. The application processes account identifiers, verified email information and session information to identify authorized users and restrict access.

Connected business information. Depending on the integration and account permissions, the application processes account and store identifiers, product identifiers and SKUs, catalog and inventory information, order identifiers, transaction dates, sales and financial amounts, and sales or traffic measurements.

The integrations covered by this notice include Shopify, Etsy, Amazon Seller and Google Analytics. Available information varies by provider and authorized account.

Amazon Advertising. An Amazon Ads integration is being prepared. It is not yet active in the implementation covered by this notice. Before activation, this notice will be updated to identify the implemented data categories and uses. Its intended purpose is internal advertising-performance reporting for GrooveThis’s authorized advertising accounts.

Technical information. Authentication and hosting services may process IP addresses, request information and other technical metadata. Application diagnostics record operational outcomes and correlation identifiers used to investigate errors and maintain the service.

Data minimization

The application’s analytics mappings exclude buyer names, email addresses, shipping and billing addresses, payment-card credentials and customer personalization text.

Some provider responses can contain additional fields during processing. The application selects the fields needed for its supported functions before storing normalized analytics. Retained order and account identifiers are treated as restricted information; removing direct contact details does not necessarily make a record anonymous.

The application also applies validation intended to reject sensitive values in imported analytics dimensions. These controls reduce unnecessary collection but do not guarantee detection of every possible sensitive value.

How information is used

We use information to:

• Report on business, product, sales, financial and website performance.
• Check data completeness, freshness and consistency.
• Investigate synchronization failures and discrepancies.
• Authenticate authorized personnel and protect access.
• Maintain the application and support internal business decisions.

Application information is not publicly available.

Access and service providers

Access is restricted to explicitly authorized users. Google Cloud and Firebase provide infrastructure and authentication services. Connected platforms process information according to their services, account settings and privacy terms.

Credentials and authorization tokens are handled through backend and credential-management services. They are not intended to appear in analytics screens or application logs. Operational access may be necessary to maintain the service or investigate incidents.

The application uses session cookies and authentication mechanisms necessary for sign-in and access control.

Retention

The application retains normalized business records, historical versions, provenance and operational records to support reporting and investigation.

There is currently no application-wide automatic deletion schedule. Historical records do not expire simply because an account is disconnected or synchronization stops. Authentication and hosting providers have separate retention settings and practices.

Retention and deletion requests require review of the relevant records, dependencies and applicable legal or contractual obligations. We do not promise immediate or automatic deletion of every historical copy.

Authorization, disconnection and deletion requests

Only an authorized account holder or administrator should authorize a connected account.

To request that access be disabled or retained information be reviewed for deletion, contact us using the details in Section 3. Where available, account holders can also revoke authorization through the connected provider.

Revoking authorization prevents future authorized access once effective; it does not automatically erase previously collected information. Disconnecting an account and deleting stored records are separate processes.

3. General Privacy Information

Legal disclosures

We may disclose information when required by applicable law or valid legal process, or when reasonably necessary to investigate fraud, resolve disputes or protect rights and security.

International processing

Our business is based in the United States. Our providers may process information in other countries. Processing locations and applicable transfer arrangements depend on the services involved.

[Before publication: confirm whether EU, UK or Swiss customers are served and complete any applicable additional disclosures concerning legal bases, international transfers or representatives.]

Your privacy rights

Depending on your location and applicable law, you may have rights to request access, correction, deletion or a copy of your personal information; withdraw consent; object to or restrict certain processing; or opt out of certain advertising-related uses.

Contact us using the details below. We may need to verify your identity and authority before responding. Requests are subject to applicable exceptions.

Where applicable, you may appeal a decision by contacting us or complain to your relevant privacy regulator.

Requests concerning a separate Shop or Shop Pay account may also need to be submitted to Shopify’s privacy portal.

Security

We use safeguards appropriate to the information and services involved. No transmission or storage system is completely secure.

GrooveThis Intelligence uses restricted server-side data access and validation controls intended to limit unauthorized access and unnecessary sensitive-data processing. Hosting services may maintain technical request logs separately from application diagnostics.

Changes to this policy

We may update this policy to reflect changes in our services, information-handling practices or legal requirements. The effective date identifies the current version. We will provide additional notice where required by applicable law.

Contact us

For privacy questions or requests, contact:

E&J Group Inc., 
Email: info@groovethiswoodshop.com
Mail: Privacy Inquiries
887 NE 30th Court, Unit A
Oakland Park, FL 33334
United States