Legal
Privacy Policy
This Privacy Policy explains how Growgents (operated by GrowExx, “we”) collects, uses, discloses and protects personal data when you visit growgents.ai or engage our services. We act as a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP) and, where applicable, as a controller under the EU/UK GDPR.
1. Data we collect
- Contact data you submit (name, work email, company, role, message) via our forms.
- Usage data (pages, device, approximate location, referrer) via cookies and analytics, see our Cookie Notice.
- Service data, where you engage us, limited business data we process to deliver the service (e.g. read-only data from your SAP/finance systems), governed by a separate Data Processing Agreement.
2. Why we use it
| Purpose | Basis (DPDP / GDPR) |
|---|---|
| Respond to enquiries, book audits | Consent / legitimate interest |
| Provide & improve the service | Contract / legitimate interest |
| Analytics & site performance | Consent (cookies) |
| Legal, security & compliance | Legal obligation |
3. Sharing
We share data only with vetted processors who support our operations (hosting, analytics, email, CRM), bound by contract. We do not sell personal data. A current list of sub-processors is available on request.
4. International transfers
Where data is processed outside India or the EEA, we rely on appropriate safeguards consistent with DPDP and GDPR.
5. Retention
We keep personal data only as long as necessary for the purposes above or as required by law, typically up to 24 months for enquiry data, after which we delete or anonymise it.
6. Your rights
- Access, correction, completion and erasure of your data.
- Withdraw consent and (under DPDP) nominate a person to exercise rights on your behalf.
- Grievance redressal and, under GDPR, portability and objection.
To exercise any right, contact [email protected]. We respond within statutory timelines.
7. Security
We apply administrative, technical and physical safeguards including encryption in transit and at rest, access controls and least-privilege. Our Security Overview is available on request.
8. Children
Our services are for businesses and are not directed to children. We do not knowingly process children’s data without verifiable parental consent as required by DPDP.
9. Changes & contact
We may update this Policy; material changes will be posted here with a new effective date. Questions: [email protected].
Growgents is a GrowExx venture. For privacy or data-protection requests, email [email protected].