Privacy Policy
Last updated: April 13, 2026
1. Introduction
Golden West Packaging Group ("GWPG," "we," "us," or "our") operates the GWPG Store (gwpg-store.com). This Privacy Policy explains how we collect, use, and protect your personal information when you use our online store.
2. Information We Collect
Account Information
When you create an account or are invited by an administrator, we collect your name, email address, and password. If provided, we also store your company name, customer number, shipping address, and billing address.
Order Information
When you place an order, we collect shipping and billing addresses, contact information, order details, and payment status. Payment card details are processed directly by Stripe and are never stored on our servers.
Usage Data
We collect basic usage data such as product page views and cart activity for internal analytics purposes. This data helps us understand which products are popular and improve the shopping experience.
3. Cookies & Local Storage
Authentication Cookies
We use essential cookies to manage your login session. These cookies are strictly necessary for the site to function and cannot be disabled. They include:
- Session token — Keeps you logged in as you navigate the site (encrypted JWT)
- CSRF token — Protects against cross-site request forgery attacks
- Callback URL — Remembers where to redirect you after login
Local Storage
If you browse the store without logging in, your cart items and recently viewed products are stored in your browser's local storage. This data stays on your device and is not sent to our servers. It is cleared when you clear your browser data.
No Tracking Cookies
We do not use any advertising, marketing, or third-party tracking cookies. We do not use Google Analytics, Facebook Pixel, or any similar tracking services.
4. Third-Party Services
Stripe (Payment Processing)
We use Stripe to process credit card payments. When you proceed to checkout, you are redirected to Stripe's secure payment page. Stripe may set its own cookies on their domain (checkout.stripe.com) to process your payment and prevent fraud. These cookies are governed by Stripe's Privacy Policy. We do not store your credit card number, CVV, or full card details on our servers.
Email Services
We use email services to send order confirmations, account invitations, and password reset emails. Your email address is shared with our email provider solely for the purpose of delivering these transactional emails.
5. How We Use Your Information
We use the information we collect to:
- Process and fulfill your orders
- Manage your account and provide customer support
- Send order confirmations and shipping updates
- Improve our products and store experience through internal analytics
- Prevent fraud and maintain security
6. Data Retention
We retain your account information and order history for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Authentication cookies expire when you log out or after your session ends.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal information. Passwords are hashed using industry-standard algorithms. Two-factor authentication (2FA) is available for additional account security. All data is transmitted over encrypted HTTPS connections.
8. Your Rights
You have the right to access, correct, or request deletion of your personal information. You can update your profile and addresses from your account settings. To request account deletion or data export, please contact us using the information below.
9. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the store after changes constitutes acceptance of the revised policy.