Privacy Policy

We collect information you provide directly to us, including: name, email address, company name, phone number, and any other information you choose to provide when you contact us, fill out a form, or engage our services.

We automatically collect certain technical information when you visit our website, including your IP address, browser type, operating system, referring URLs, pages viewed, and the date and time of your visits.

When you engage our services, we may collect payment information. Note: we do not store full credit card numbers. Payment processing is handled by PCI-DSS compliant processors including Stripe, which have their own privacy policies governing the use of your financial information.

To provide, maintain, and improve our services and respond to your inquiries and support requests.

To process transactions and send related information, including invoices and project updates.

To send promotional communications such as newsletters, case studies, and service updates — only where you have given consent. You may opt out at any time by clicking 'unsubscribe' in any marketing email.

To analyze usage of our website to understand what content is most useful and improve our offerings.

To comply with legal obligations and enforce our Terms and Conditions.

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases: (a) Performance of a contract — when data processing is necessary to provide services you have requested; (b) Legitimate interests — for analytics, security, and improving our services; (c) Consent — for marketing communications; (d) Legal obligation — to comply with applicable laws.

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted third-party service providers who assist us in operating our website and conducting our business, subject to confidentiality agreements. These include: Stripe (payment processing), Google Analytics (website analytics), and project management tools.

We may disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Growkit Solutions, our clients, or others.

We use Stripe to process all credit card payments. When you provide payment information, it is sent directly to Stripe and never passes through or is stored on our servers. Stripe is certified as a PCI Service Provider Level 1, the most stringent level of certification in the payment industry.

Stripe's use of your payment information is governed by Stripe's Privacy Policy. We encourage you to review Stripe's policy at stripe.com/privacy.

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small files stored on your device that help us remember your preferences and understand how you interact with our site.

We use: (a) Essential cookies — required for basic website functionality; (b) Analytics cookies — to understand how visitors use our site (e.g., Google Analytics); (c) Marketing cookies — only if you consent, to show relevant content.

You can control cookies through your browser settings. Disabling cookies may limit some functionality of our website.

We retain personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Client project data is retained for a minimum of 5 years for record-keeping and tax compliance purposes.

Marketing contact data is retained until you unsubscribe or request deletion. Website analytics data is retained for up to 26 months.

Depending on your location, you may have the following rights regarding your personal data: the right to access, correct, or delete your data; the right to object to or restrict processing; the right to data portability; and, where applicable, the right to withdraw consent at any time.

To exercise any of these rights, contact us at customerservice@growkitsolutions.com. We will respond within 30 days. Note: we may need to verify your identity before fulfilling requests.

We implement technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), access controls, and regular security reviews.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we take our obligation to protect your data seriously.

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the 'Last updated' date. We encourage you to review this policy periodically.