Privacy Policy

Effective date: October 19, 2026.

Who we are

Grand Open is a Busy Industries Incorporated product. The operator is Busy Industries Incorporated, 4250 N Drinkwater Blvd, Suite 300, Scottsdale, AZ 85251, United States.

Grand Open builds and hosts landing pages for online brands, runs their Google Ads, and measures the results. Merchants connect their Shopify store to Grand Open.

What we collect (merchants and their Shopify stores; merchants' customers via Shopify; visitors to pages we host)

From a connected Shopify store, we read:

• Store details: store name, domain, and currency.
• Catalog and inventory data: products, variants (including titles, prices, SKUs, barcodes, and product costs where the merchant has set them), images and other media, collections, and inventory.
• Order data: orders with line items, discounts, and refunds.
• Where Shopify makes it available to us on orders: buyer email address and a customer identifier.

We receive this data through Shopify APIs and webhooks.

When a shopper clicks to buy on a landing page we host, we create a cart in the merchant's Shopify store and attach identifiers for the visit and page, and any campaign and ad click identifiers present in the visit URL, so the resulting order can be tied back to the page and ad.

The shopper checks out on the merchant's Shopify checkout. Payments and taxes are handled by Shopify and the merchant.

The shopper's IP address is passed to Shopify to place the cart and is not stored by us.

On pages Grand Open hosts, we record first-party visit events (such as page views and clicks) with a visitor identifier that is a daily hash, not a cookie, unless the merchant's policy enables a first-party cookie. We keep only a shortened IP address.

If a merchant connects Calendly, we receive scheduled meeting details: time, event type, invitee name, email, and answers.

Why we use it

We use store, catalog, inventory, order, and event data to provide Grand Open, including hosting landing pages, creating carts in Shopify, running ads, and measuring results.

We attach visit, page, campaign, and ad click identifiers to carts so resulting orders can be attributed to the page and ad.

Merchants are responsible for their own customers' data and legal bases. Grand Open processes merchants' customer data on the merchant's behalf to provide the service.

How long we keep it and deletion

Raw visit events are deleted after 395 days.

When a merchant uninstalls Grand Open, we stop accessing the store and remove its access tokens.

We delete the store's data (catalog copy, orders, order line items, refunds, and carts) when Shopify sends its shop data erasure request, which Shopify sends 48 hours after uninstall.

When Shopify sends a customer data erasure request, we remove that customer's personal data (email, name, and customer identifier) from the merchant's orders.

We respond to customer data requests that Shopify sends us.

Merchants and individuals can also request access or deletion by emailing support@busyincorporated.com.

Who we share it with

We use the following service providers in the United States:

• Render (application servers)
• Cloudflare (page delivery and storage)
• Google Cloud (analytics warehouse)

Google Ads and Google Analytics are connected by the merchant to run ads and measure results.

Security

Store access tokens are stored encrypted.

If a merchant connects Calendly, scheduled meeting details are stored encrypted.

We do not change the merchant's storefront or theme.

International transfers

Grand Open hosting and related infrastructure listed in this policy are in the United States.

Your rights (GDPR/CCPA)

Depending on where you live (for example, in the EU/UK under GDPR, or in California under CCPA/CPRA), you may have rights to access, correct, delete, restrict, object to, or port your data, and to withdraw consent.

If your data came from a merchant's Shopify store, you should first contact that merchant.

You may also contact us at support@busyincorporated.com.

You may complain to your data protection authority.

Cookies and visitor identifiers

On pages Grand Open hosts, the visitor identifier is a daily hash and not a cookie, unless the merchant's policy enables a first-party cookie.

Children

Grand Open is not directed to children under 16.

Changes

We post updates on this page and change the effective date.

Contact

Privacy contact and support: support@busyincorporated.com.

Busy Industries Incorporated, 4250 N Drinkwater Blvd, Suite 300, Scottsdale, AZ 85251, United States.