Privacy Policy

This policy explains what personal data Growbz ("we", "us") collects when you use this website or engage our services, why we collect it, and what control you have over it. We have written it to be read, not to be impenetrable.

Who we are

Growbz is a digital marketing agency operating from Chennai, India. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary responsible for the personal data described below.

For any question about this policy or your data, contact us at info@growbz.in.

What we collect

We collect only what we need. In practice that is:

We do not knowingly collect data from children, and we do not collect sensitive categories of personal data such as health, biometric or financial account information through this website.

The basis on which we process it

Under the DPDP Act we rely on your consent, given when you submit a form, and on the legitimate uses permitted by the Act where processing is necessary to provide a service you have requested or to comply with a legal obligation such as tax record-keeping.

Consent is specific to the purpose you gave it for. Submitting an enquiry does not subscribe you to marketing email; those are separate actions requiring separate consent.

How we use it

• To reply to enquiries and provide the services you engage us for
• To send newsletters, where you have specifically subscribed
• To raise invoices and maintain statutory financial records
• To protect the site from spam and abuse
• To improve our services based on aggregate, non-identifying patterns

We do not sell your personal data. We do not share it with third parties for their own marketing.

Who we share it with

We share personal data only with service providers who process it on our behalf, under contract, and only as needed to run our business. These include our web hosting provider, our email delivery provider, and analytics services where enabled.

We may also disclose data where we are legally required to do so by a court or competent authority.

Cookies and analytics

This site uses cookies that are necessary for it to function, including a session cookie that keeps you logged in to any restricted area and remembers messages between page loads.

Where analytics or advertising measurement tools are enabled, they may set additional cookies that help us understand how the site is used and how effectively our own advertising performs. You can block or delete cookies through your browser settings; the site will continue to work, though some conveniences may not.

How long we keep it

• Enquiries that do not become clients: retained while there is an active prospect of engagement, then deleted.
• Newsletter subscribers: until you unsubscribe.
• Client records and invoices: retained for the period required by Indian tax and company law.
• Spam-prevention logs: a short rolling window, then discarded.

How we protect it

The site is served over HTTPS. Access to client records is restricted to authenticated administrators. Stored credentials and email passwords are encrypted at rest using AES-256. We review access and rotate keys when circumstances require it.

No system is perfectly secure, and we will not claim otherwise. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board as the DPDP Act requires.

Your rights

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how we process it
• Correct or complete data that is inaccurate or out of date
• Erase data where it is no longer needed for the purpose it was collected for
• Withdraw consent at any time, as easily as you gave it
• Nominate another person to exercise these rights on your behalf in the event of death or incapacity
• Complain to us, and then to the Data Protection Board of India if unsatisfied

To exercise any of these, contact us using the details above. We will respond within a reasonable period and will not charge you for it.

Every marketing email we send includes a one-click unsubscribe link. Using it withdraws your consent immediately.

Visitors outside India

Our services are directed at the Indian market, but we work with clients elsewhere. If you are in a jurisdiction with additional data protection rights — such as the EU or UK under the GDPR — we will honour requests to access, correct, or delete your data on the same terms set out above.

Changes to this policy

We will update this page when our practices change, and the "last updated" date at the top will reflect that. Material changes affecting how we use data you have already given us will be communicated directly where we hold contact details for you.