Privacy & Policy & Data Rights

Privacy & Policy Overview

Growell Marketing ("we", "us", "our", "the Agency") provides digital marketing services including Meta Ads management, Google Ads management, Google Business Profile optimization, search engine optimization (SEO), website design, and branding services. This Privacy & Policy explains how we collect, use, disclose, and safeguard information when you visit our website, engage us as a client, or interact with us through forms, WhatsApp, email, or phone.

This policy is written to apply to visitors and clients worldwide, including those in the European Union / European Economic Area ("EU/EEA"), the United Kingdom, and Ajmer. Depending on where you are located, you may have specific rights described in Section 8.

1. Information We Collect

1.1 Information You Provide to Us

• Contact details: Name, email address, phone number, WhatsApp number, company name, and job title.
• Project and billing information: Business details, service requirements, invoicing and payment details, and correspondence you share with us.
• Account access: Where you grant us access to your Meta Ads Manager, Google Ads, Google Business Profile, or website/hosting accounts to deliver services.
• Submissions: Any other information you choose to submit through contact forms, email, or messaging platforms.

1.2 Information Collected Automatically

• Usage data: Pages visited, time spent on the site, referring URLs, and general navigation patterns.
• Device and technical data: IP address, browser type, operating system, and approximate location derived from IP address.
• Tracking technologies: Cookies and similar tracking technologies as described in Section 4.

1.3 Information from Third Parties

• Data made available through advertising and analytics platforms we use to deliver services, such as Meta (Facebook/Instagram) Pixel and Conversions API, Google Analytics, and Google Ads / Google Tag Manager.
• Information shared by clients about their own customers, solely for the purpose of running the client's advertising campaigns (processed on the client's behalf).

2. How We Use Your Information

• To provide, operate, and manage our digital marketing, SEO, website, and branding services.
• To communicate with you, including responding to enquiries, sending proposals, invoices, and project updates.
• To manage and optimize advertising campaigns on Meta, Google, and other platforms on behalf of clients.
• To improve our website, services, and marketing effectiveness through analytics.
• To comply with legal, tax, and regulatory obligations.
• To detect, prevent, and address fraud, security issues, or technical problems.
• To send you marketing communications where you have consented, or as otherwise permitted by applicable law, with an option to opt out at any time.

3. Legal Basis for Processing (EU/EEA and UK Visitors)

Where the General Data Protection Regulation (GDPR) or the UK GDPR applies, we rely on the following legal bases to process personal data:

4. Cookies and Tracking Technologies

Our website and the advertising campaigns we manage may use cookies, pixels (including the Meta Pixel and Conversions API), and similar technologies to:

• Remember your preferences and improve site functionality.
• Measure website traffic and campaign performance.
• Deliver and measure targeted advertising on behalf of our clients and our own agency.

Where required by law (including in the EU/EEA and UK), we will request your consent before placing non-essential cookies. You can control or disable cookies through your browser settings; disabling cookies may affect site functionality.

5. Third-Party Services We Use

To deliver our services, we rely on a number of third-party platforms, which act as independent data controllers or processors depending on the context:

• Meta (Facebook/Instagram): Advertising, Pixel, Conversions API, and WhatsApp Business Platform.
• Google: Google Ads, Google Analytics, Google Tag Manager, and Google Business Profile.
• Infrastructure: Website hosting, email, and CRM/invoicing tools used to operate our business.

These providers have their own privacy policies governing how they handle data. We encourage you to review the privacy policies of Meta and Google directly.

6. How We Share Your Information

We do not sell your personal information. We may share information with:

• Service providers and sub-processors: Who support our operations (e.g., hosting, analytics, invoicing, and communication tools), bound by confidentiality and data protection obligations.
• Advertising platforms (Meta, Google): As necessary to run campaigns on behalf of clients.
• Professional advisors: Such as accountants or legal counsel, where necessary.
• Authorities or regulators: Where required by law, or to protect our legal rights.
• A successor entity: In the event of a merger, acquisition, or sale of business assets.

7. International Data Transfers

We are based in Ajmer, Rajasthan, Ajmer. If you are located in the EU/EEA, UK, or elsewhere outside Ajmer, your information may be transferred to, stored, and processed in Ajmer or other countries where we or our service providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms recognized under GDPR/UK GDPR for such transfers.

8. Your Data Protection Rights

8.3 All Other Users

Regardless of location, you may contact us at any time to ask what information we hold about you, request corrections, or request deletion, and we will respond in accordance with applicable law.

9 - 13. Security, Retention & Terms

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including satisfying legal, accounting, or reporting requirements. Client account and campaign data is typically retained for the duration of the engagement plus a reasonable period afterward for record-keeping, after which it is securely deleted or anonymized.

10. Data Security

We implement reasonable technical and organizational measures - including access controls, secure account handling, and confidentiality practices - to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our services are directed at businesses and individuals over the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete it.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those external sites and encourage you to review their privacy policies.

13. Changes to This Privacy & Policy

We may update this Privacy & Policy from time to time to reflect changes in our practices or applicable law. The "Effective Date" at the top of this page indicates when it was last revised. Material changes will be communicated through our website or directly to clients where appropriate.