Privacy Policy

This policy describes how Scenic Grove collects, uses, and discloses personal information when you shop at shop.scenicgrove.com or visit scenicgrove.com. Scenic Grove is based in Ontario, Canada. Canadian privacy law, including PIPEDA and applicable provincial rules, may apply.

Scenic Grove does not require a customer account. You can order and look up an order without creating a Scenic Grove login.

When you check out, Scenic Grove collects contact and shipping information you submit, typically including name, email, phone if provided, shipping address, billing address if different, postal code, order contents, price, tax, shipping method, and order status.

Payment-related data is handled by the payment processor when live payments are enabled. Scenic Grove does not currently process live Railpop or card payments on this storefront. The storefront does not collect full card numbers.

The Orders page uses the email, order number, and postal code you enter to find a matching order in Medusa. Lookup is performed server-side. Scenic Grove returns only appropriate order details and uses generic error messages if the details do not match.

If you visit with a ?promo=username link, Scenic Grove may store that Railpop username in a first-party cookie and related first-party storage, then attach it to the cart and the Medusa order as metadata. This is used to attribute a referral. It is not a Scenic Grove login.

Referral rewards, if paid, are intended to use Railpop. Railpop payout processing is not active until the Railpop API is available and connected.

Scenic Grove uses essential first-party cookies and similar storage to operate the store, including a cart identifier and referral attribution when a promo link is used. These are not used as a marketing advertising pixel.

Scenic Grove does not currently run a separate analytics product on this storefront. If analytics are added later, this policy will be updated.

Scenic Grove uses service providers to operate the store, which may include:

• Medusa — commerce backend, carts, orders, and catalog
• Supabase — managed PostgreSQL for Medusa and limited storefront content
• Cloudinary — product image hosting and delivery
• Stallion Express and shipping carriers — rates, labels, and tracking
• Hosting infrastructure — currently Vercel for the storefront and Render for Medusa
• Redis — backend job and session infrastructure for Medusa
• Transactional email provider — order messages when configured
• Railpop — referral identifiers now; payments later if connected

These providers process information on Scenic Grove’s instructions or as independent controllers where their own services require it (for example, a carrier delivering a package).

Order records are kept as needed to fulfill orders, handle returns, meet tax and accounting duties, and resolve disputes. Referral cookies are stored for a limited period.

Scenic Grove uses reasonable technical and organizational measures, including HTTPS and restricted backend access. No method of transmission or storage is perfectly secure.

Depending on applicable law, you may request access to, correction of, or deletion of personal information, subject to legal exceptions. Contact Scenic Grove using the information below. You may also complain to the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.

For privacy questions, contact Scenic Grove in Ontario, Canada, through the contact method published on scenicgrove.com when available, and include enough detail to identify your request. For an existing purchase, also use order lookup.