Grow Higher - Privacy Policy

Privacy Policy for Grow Higher (www.growhigher.org)

Effective Date: [November 2025]

Introduction

At Grow Higher (“we,” “us,” “our”), your privacy and data protection are our highest priorities. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website (www.growhigher.org) and utilize our services. We are committed to safeguarding your information in accordance with the European General Data Protection Regulation (GDPR) and applicable data protection laws, adopting industry best practices to ensure your rights are protected.

1. Information We Collect

We may collect personal and non-personal data through various means, including when you directly share it with us or automatically through your interaction with our website.

1.1 Personal Data You Provide

Full name
Email address
Phone number
Mailing or billing address
Payment details (processed through secure third-party providers)
Username and password for account registration
Demographic data (age, gender, etc., if voluntarily provided)
Communications with us (messages, inquiries, feedback)

1.2 Automatically Collected Data

IP address
Browser type and version
Operating system and device information
Language preferences
Referring URLs
Date and time of your visit
Pages viewed and time spent on pages
Cookies and tracking technologies

1.3 Data from Third Parties

Social media profiles when connecting via social login
Publicly available data from third-party sources

2. Purposes and Legal Basis for Data Processing

We process your data solely for legitimate and lawful purposes under GDPR, based on one or more of the following legal bases:

PurposeLegal BasisTo provide, operate, and improve our website and servicesContractual necessity; legitimate interests in service improvementTo process transactions and paymentsContractual necessityTo personalize user experienceLegitimate interestsTo send updates, marketing communications, and newsletters (with your consent)ConsentTo respond to inquiries and provide customer supportContractual necessity; legitimate interestsTo ensure security and prevent fraudLegal obligation; legitimate interestsTo comply with legal or regulatory obligationsLegal obligationTo conduct analytics and improve site functionalityLegitimate interests

3. Data Sharing and Disclosure

Your data is kept strictly confidential and is not sold or rented to third parties. We may share your data with:

Service Providers: Third-party vendors assisting with hosting, data analysis, payment processing, email delivery, customer support, and security measures (under strict confidentiality agreements).
Legal Authorities: As required by law, such as law enforcement or regulatory agencies.
Business Transfers: In case of mergers, acquisitions, or sale of assets, where your data may be transferred to a third party.
Consent-driven sharing: When you authorize third-party integrations or services.

4. Data Retention Policy

We retain personal data for as long as necessary to fulfill the purposes outlined, including satisfying legal, accounting, or reporting requirements. Once the purpose is fulfilled, or upon your request, we securely delete or anonymize your data.

Specific retention periods:

User account data: Until you request deletion or account deactivation.
Transaction records: Minimum of 7 years for legal compliance.
Marketing data: Until you withdraw consent or unsubscribe.
Log and security data: Up to 12 months, unless required otherwise by law.

5. Your GDPR Rights

You are entitled to exercise several rights concerning your personal data:

5.1 Right to Access

You may request confirmation whether we are processing your data and request access to your personal data.

5.2 Right to Rectification

You can request updating or correcting inaccurate or incomplete data.

5.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data, subject to legal retention obligations.

5.4 Right to Restrict Processing

You can request that we limit processing of your data under certain circumstances.

5.5 Right to Data Portability

You have the right to receive your data in a structured, commonly used format and transmit it to another controller.

5.6 Right to Object

You can object to processing based on legitimate interests, especially for marketing purposes.

5.7 Right to Withdraw Consent

If processing is based on your consent, you can withdraw it at any time.

To exercise your rights, contact us at comercial@growhigher.org. We will respond within one month, unless requests are complex or numerous.

6. Data Security Measures

We implement appropriate technical and organizational safeguards.