Privacy.

This Privacy Policy provides information on the collection, use, sharing and processing of Personal Information by 1368576 B.C. LTD., doing business as GRBX Systems, and its affiliates (“GRBX Systems”, “our”, “we”, or “us”). This includes: the Sites that link to this Privacy Policy; your interactions with us during in-person meetings or at our events; and in the context of our other offline sales and marketing activities. It also explains the choices you have in relation to these processing activities.

Definitions used in this policy

• Date — means 20 July 2026.
• Events — includes, but is not limited to: in-person meetings; promotional engagements; public relations engagements; conferences; workshops or gatherings; and other offline sales and/or marketing activities.
• Personal Information — information that relates to an identified individual or to an identifiable individual. For example, your name, address, email address, business contact details, or information gathered through your interactions with us via the Sites or at Events. See Section 04 for detail.
• Sites — includes, but is not limited to: GRBX Systems or affiliate websites; mobile applications; and social media pages.

This Privacy Policy was last updated on the Date defined above. It can change over time, for example to comply with legal requirements or to meet changing business needs. We may revise it at any time without notice to you, and the revised policy is effective when posted. Where there is an important change we want to highlight, we will also inform you in another appropriate way (for example a pop-up notice or statement of changes on the Sites).

We process both offline and online Personal Information, obtained from our interactions with you during Events, email or telephone correspondence, third-party data providers, or your interactions with the Sites. Personal Information may in some cases directly identify you, while in other cases it may only indirectly identify you.

If you believe your Personal Information has been used in a way that is not consistent with this Privacy Policy, please contact our Privacy Officer at admin@mygrbx.com.

This Privacy Policy applies to the processing of Personal Information of:

• visitors and users of the various Sites;
• attendees of Events;
• customers and prospective customers and their representatives;
• suppliers and business partners and their representatives.

When interacting with the Sites, you also have the ability to link or connect with non-GRBX websites, services, social networks, applications or other features. Enabling these features will lead to parties other than GRBX Systems processing Personal Information. We do not have any control over these features of other parties, and we encourage you to review their privacy policies before using them.

1368576 B.C. LTD. (GRBX Systems) and its affiliates are responsible for processing the Personal Information described in this Privacy Policy.

We can process Personal Information collected both offline and online. Offline Personal Information originates from our interactions with you during Events. Online Personal Information originates from your activities on the Sites — for example in relation to (pre-)sales inquiries or subscriptions, blogs, or your interactions with us via email or telephone. Personal Information may also be provided by third-party sources, such as data aggregators who may not have a relationship with you.

Online Personal Information may also originate from the use of cookies and similar technologies (for example, pixel tags and device identifiers) on the Sites or sites of third parties — see Section 11.

Personal Information we may collect and process

• name and physical address, mailing address, email addresses, and telephone numbers;
• demographic attributes, when tied to Personal Information that identifies you;
• photographs and testimonials;
• transactional data, including products and services ordered, financial details and payment methods;
• company data such as the name, size and location of the company you work for, and your role within it;
• data from surveys and publicly available information, such as social media posts;
• unique IDs such as your mobile device identifier or cookie ID on your browser;
• IP address and information that may be derived from it, such as geographic location;
• information about a device you use — browser, device type, operating system, presence or use of apps, screen resolution, software preferences, preferred language;
• behavioural data of the internet-connected computer or device you use when interacting with the Sites, such as advertisements clicked or viewed, sites and content areas, date and time of activities, or the web search used to locate and navigate to a site.

Please note that we do not control the content you may post to GRBX social networks; in some cases such content may be publicly available on the Internet. You should carefully consider whether you wish to submit Personal Information to these forums, and tailor any content you submit accordingly.

We may use Personal Information for the following purposes:

1 · To communicate and respond to your requests

If you get in touch with us — by submitting contact forms on the Sites, attending events or other occasions, sending an email, or visiting social media platforms — we process Personal Information to communicate with you and respond to your requests or other inquiries. We can also process Personal Information to interact with you on third-party social networks.

2 · To deliver functionality on the Sites, and for their technical and functional management

When you choose to register with us, we process the Personal Information you provide so that we can create and manage a personal account for you, and send your personal login information. This enables us to administer your account, for example by changing your password for you.

3 · To administer subscriptions

Where applicable, if you subscribe to our services, we process Personal Information to administer your subscription, including the renewal process.

4 · To market and tailor products, services and sales activities

We may use Personal Information to notify you about new product releases and service developments, events, alerts, updates, prices, terms, special offers and associated campaigns and promotions (including via newsletters). We may also use it to advertise our products and services or related products and services, and to have our distributors, resellers or partners notify you about their related products or services. We do our best to tailor your Site visit, marketing experience and our communications to your expressed interests.

If you attend an event, we may process Personal Information gathered in relation to that event and can share information about your attendance with your company. We may also permit designated event partners or conference sponsors to send you up to two communications related to your event attendance. Our partners or sponsors may directly request Personal Information at their booths or presentations, and their use of that information will be subject to their own privacy policies. We may also process your Personal Information to post testimonials on the Sites, but will first obtain your consent to use your name and testimonial.

5 · To engage in transactions and process purchases

If you place an order for our products and services, or if you provide services to us as a supplier or business partner, we process Personal Information to engage in and administer the relevant transactions (such as sending invoices and making payments), administer your order, and help you get started with our products and services. If you download products or services from the Sites, we use Personal Information to confirm certain information about your order (for example, that you did not experience problems in the download process).

6 · To analyse, develop, improve and optimise

We may process Personal Information in order to analyse, develop, improve and optimise the use, function and performance of the Sites, products and services, as well as marketing and sales campaigns. Where the Sites permit you to participate in interactive discussions, create a profile, post comments or other content, or communicate directly with another user, we may process Personal Information when moderating these activities.

7 · To manage security

We may collect site-use data for security and operations management to help keep the Sites, networks and systems secure, to investigate and prevent potential fraud including ad fraud and cyber-attacks, and to detect bots.

8 · To comply with law and operate our business

In some cases we have to process Personal Information to comply with applicable laws and regulations — for example to respond to a request from a regulator or to defend a legal claim. We may also process Personal Information in the performance and operation of our business, such as internal audits and investigations, finance and accounting, archiving and insurance purposes.

• In order to communicate adequately with you and respond to your requests, we need to process Personal Information and therefore have a legitimate interest in processing it.
• In order to engage in transactions with customers, suppliers and business partners, and to process purchases and downloads, we process Personal Information as necessary to enter into or perform a contract with you.
• We process Personal Information for marketing and sales activities based on your consent where so indicated on the Sites at the time your Personal Information was collected, or further to our legitimate interest to market and promote our products and services.
• We rely on our legitimate interest to analyse, develop, improve and optimise the Sites, products and services, and to maintain the security of the Sites, networks and systems.
• In order to comply with applicable laws and regulations, such as to comply with a subpoena or other legal process, or to process an opt-out request.

• Transactions — Personal Information collected to engage in transactions with customers, suppliers and business partners, and to process purchases, is retained for the duration of the transaction or services period, or longer as necessary for record retention and legal compliance purposes.
• Accounts — where applicable, account information is retained for as long as you maintain an active account. Your account and account information will be deleted if you do not log in for 12 consecutive months. We retain records of that deletion for 30 days.
• Newsletters and blogs — if you have registered, your data is retained for as long as you are subscribed to our distribution lists. We retain records of that deletion for 30 days.
• Contact information — email address or phone number collected online or offline and used for direct marketing and sales is retained for as long as we have an active relationship with you. We treat you as an active contact if (i) you have interacted with us or updated your contact details and preferences in the past 18 months, and (ii) you have not made a deletion request.
• Opt-out preferences — Personal Information needed to retain your opt-out preferences is retained for 7 years, or longer as necessary to comply with applicable law.

Sharing within GRBX Systems

Personal Information may be shared throughout our organisation. Employees are authorised to access Personal Information only to the extent necessary to serve the applicable purpose(s) and to perform their job functions.

Sharing with third parties

• Third-party service providers — for example credit card processing services, order fulfilment, analytics, event/campaign management, Site management, information technology and related infrastructure provision, customer service, email delivery, auditing and other similar service providers — in order for those providers to perform business functions on our behalf.
• Distributors or resellers — for further follow-up related to your interests, specific partners that offer complementary products and services, or third parties to facilitate interest-based advertising.
• Relevant third parties in a corporate transaction — in the event of a reorganisation, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or shares (including in connection with any bankruptcy or similar proceedings).
• As required by law — such as to comply with a subpoena or other legal process, when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to government requests, including public and government authorities outside your country of residence, for national security and/or law enforcement purposes.

When third parties are given access to Personal Information, we take appropriate contractual, technical and organisational measures designed to ensure it is processed only to the extent necessary, consistent with this Privacy Policy, and in accordance with applicable law.

The providers this site currently uses

• Stripe — payment processing for reservation deposits. Card details go to Stripe, never to us. Privacy policy
• Klaviyo — sends the launch and update emails you signed up for. Privacy notice
• Google Analytics 4 & Google Ads — site-traffic measurement and advertising. Privacy policy
• Meta pixel — measures our Facebook / Instagram ads and may show you GRBX there. Privacy policy
• TikTok pixel — the same, for TikTok. Privacy policy
• Netlify — website hosting and delivery. Privacy policy

GRBX Systems may sell its products globally, with Personal Information processed in Canada from global sources. Personal Information transferred to us is subject to the Personal Information Protection and Electronic Documents Act S.C. 2000, c. 5 (“PIPEDA”) and the Personal Information Protection Act SBC 2003 Ch. 63 (“PIPA”). Where PIPEDA and PIPA do not provide an adequate level of protection for Personal Information, we will take reasonable measures to adequately protect it.

We have implemented appropriate technical, physical and organisational measures designed to protect Personal Information against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorised disclosure or access, as well as all other forms of unlawful processing.

Cookies and similar technologies (e.g. pixel tags, tokens, and device identifiers) are used by us and our advertising technology partners to recognise you and/or your device(s) on, off and across different services and devices, for the purposes specified in Section 05.

When do we use cookies and similar technologies?

Cookies are small text files that contain a string of characters and uniquely identify a browser on a device connected to the Internet. Any browser visiting the Sites will receive cookies from us. We also place cookies in your browser when you visit third-party websites that host our plugins or tags. We use cookies and other technologies on all the Sites to ensure the best possible and secure experience and to provide you with tailored information on products and services. We also use cookies or similar technologies to collect online information such as your mobile device ID, IP address, and other information about your device, as well as behavioural data of your device usage on the Sites (e.g. pages viewed, links clicked, documents downloaded). This information contributes to our marketing data services and to enforcement of licences.

We also keep a small record in your browser’s local storage noting which advertisement or campaign brought you to the Sites — the campaign tags and click identifiers in the link you followed. It is used to understand which advertising works, it is not shared with anyone beyond the advertising partners listed in Section 08, and clearing your browser’s site data removes it.

How can I manage my cookie preferences?

If you do not want to receive cookies, you can change the browser settings on the computer or other device you use to access our services. Most browsers also provide functionality that lets you review and erase cookies, including ours. However, opting out of cookies may reduce or prohibit some site functionality.

You can also use Google’s Analytics opt-out, and manage ad preferences inside Meta and TikTok. Every marketing email we send includes a one-click unsubscribe.

We provide multiple choices in respect of the information we process about you. You can exercise these choices in accordance with applicable laws. These choices include:

• Opt out of our use of your Personal Information — you may withdraw consent you have previously provided for the processing of Personal Information, including for email marketing.
• Delete Personal Information — you can ask us to erase or delete all or some of your Personal Information.
• Change or correct Personal Information — you can ask us to change, update or fix Personal Information in certain cases, particularly if it is inaccurate.
• Object to, limit or restrict use — you can ask us to stop using all or some of the Personal Information (for example, if we have no legal right to keep using it) or to limit our use of it (for example, if it is inaccurate).
• Access, and have your information provided to you — you can ask us for a copy of your Personal Information. A copy may be provided in machine-readable form if you reside in the EU or another country that provides you this right as a matter of law.

To exercise any of these, email admin@mygrbx.com.

Sensitive Personal Information

We ask that you do not send us, and do not share, any sensitive Personal Information — for example government-issued IDs; information related to racial or ethnic origin; political opinions; religion or other beliefs; health; genetic or biometric data; criminal background; or trade union membership.

Children’s privacy

As a company focused on serving the needs of adult individuals and businesses, our Sites are not directed to minors and we do not promote or market our services to minors. If you believe that we have mistakenly or unintentionally collected Personal Information of a minor through the Sites without appropriate consent, please notify us so that we may immediately delete the information from our servers and make any other necessary corrections. Additionally, please contact us to request removal of content or information that was posted to the Sites when the registered user was under the age of 18. Please note that such requests may not ensure complete or comprehensive removal of the content or information, as, for example, some of the content may have been reposted by another user.

GRBX Systems has a Privacy Officer. If you believe your Personal Information has been used in a way that is not consistent with this Privacy Policy or your choices, or if you have further questions, comments or suggestions related to this Privacy Policy, please contact us.

Written inquiries may be addressed to

1368576 B.C. LTD.
Privacy Officer
627 Brookside Rd, Suite 102
Victoria, BC  V9C 0C3
Canada

Email: admin@mygrbx.com

If you have any complaints regarding our compliance with this Privacy Policy, please contact us first. We will investigate and attempt to resolve complaints and disputes regarding the use and disclosure of Personal Information in accordance with this Privacy Policy and applicable law.

If you have an unresolved privacy or data-use concern that you believe we have not addressed satisfactorily, you have the right to file a complaint with a competent data protection authority.

GRBX Systems’ corporate headquarters are located at:

1368576 B.C. LTD. (DBA GRBX Systems)
627 Brookside Rd, Suite 102
Victoria, BC  V9C 0C3
Canada

General enquiries: sendit@mygrbx.com · Privacy: admin@mygrbx.com