Growpido

Legal

Privacy Posture

Privacy Policy

Last updated: [Effective Date]

Growpido ("Growpido," "we," "us," or "our") respects your privacy and is committed to protecting the personal data of everyone who visits our website, applies for a mandate, or subscribes to our communications. This Privacy Policy explains what we collect, how we use it, who we share it with, and the rights you have over your information.

Your data is protected with us. Discretion is the foundation of our work. We collect only what we need, we never sell your personal data, and we hold it under strict confidentiality and security controls. Protecting your information is not an afterthought for us. It is part of how we operate.

This policy applies to www.growpido.com and any related pages, forms, or communications (together, the "Site"). By using the Site, you acknowledge that you have read and understood this policy.

Who we are (Data Controller). [Legal Entity Name], a company in the process of registration in the Meydan Free Zone, Dubai, United Arab Emirates ([License No. to be added on issuance]), registered address [Registered Address], is the controller responsible for your personal data. For any privacy question or request, contact us at nidhi@growpido.com.


1. The information we collect

a) Information you give us directly

  • Mandate application data. When you complete our "Request a Mandate" form, we collect your full name, role or title, company or firm, primary market, the information you provide about "what's at stake," your timeline, your email address, and whether you have expressed interest in the Private Engine.
  • Newsletter data. When you subscribe to "The private brief," we collect your email address.
  • Correspondence. If you email or otherwise contact us, we keep a record of that correspondence and any information you choose to share.

b) Information we collect automatically

When you visit the Site, we and our service providers may automatically collect certain technical data through cookies and similar technologies, including your IP address, device and browser type, operating system, referring pages, pages viewed, time spent, and general location at city or country level. See Section 6 (Cookies) for details.

c) Information from third parties

We may receive information about you from analytics providers and from the customer relationship and email marketing platform(s) we use to manage applications and communications.

We do not intentionally collect special categories of sensitive personal data through the Site, and we ask that you do not submit such data in free text fields.


2. How we use your information

We use personal data to:

  • review and respond to mandate applications and assess fit;
  • communicate with you, schedule calls, and provide our services;
  • send "The private brief" and other communications you have requested, which you can opt out of at any time;
  • operate, secure, analyse, and improve the Site;
  • maintain our customer records and manage our relationship with you;
  • comply with legal, regulatory, and tax obligations; and
  • establish, exercise, or defend legal claims.

We do not sell your personal data, and we do not use it for automated decision making that produces legal or similarly significant effects about you.


3. Legal bases for processing (GDPR / UK GDPR)

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:

  • Consent, for sending marketing communications and for non-essential cookies. You may withdraw consent at any time.
  • Performance of a contract, or steps prior to a contract, to review your application and provide services you request.
  • Legitimate interests, to operate and improve the Site, secure our systems, and pursue our business, provided your rights do not override these interests.
  • Legal obligation, where we must process data to comply with applicable law.


4. Cookies and analytics

We use cookies and similar technologies to make the Site work, understand how it is used, and improve it. Cookies fall into these categories:

  • Strictly necessary, required for the Site to function.
  • Analytics and performance, which help us understand traffic and usage, via [Analytics Provider, for example Google Analytics or Vercel Analytics].
  • Functional, which remember your preferences.

Where required by law, we request your consent before setting non-essential cookies via our cookie banner. You can also control cookies through your browser settings, though disabling some cookies may affect Site functionality. For [Analytics Provider], you may opt out using [opt-out link or browser add-on].


5. How we share your information

We share personal data only as needed, with:

  • Service providers (processors) who act on our instructions, including our website host ([Vercel]), our analytics provider ([Analytics Provider]), and our CRM and email marketing platform ([CRM / Email Platform]);
  • Professional advisors such as lawyers, accountants, and auditors, where necessary;
  • Authorities or third parties where required by law, regulation, legal process, or to protect our rights, our users, or the public; and
  • A successor entity in connection with any merger, acquisition, or reorganisation, subject to this policy.

We require all processors to protect your data and to use it only for the purposes we specify.


6. International data transfers

We operate across the UAE, the United States, and Singapore, and may serve visitors in the EU and UK. Your data may be transferred to, and processed in, countries other than your own, including by service providers located abroad. Where we transfer personal data internationally, we use appropriate safeguards, such as Standard Contractual Clauses or equivalent mechanisms, and take steps to ensure your data remains protected consistent with this policy and applicable law.


7. Data retention

We keep personal data only for as long as necessary for the purposes set out in this policy, including to provide services, maintain business records, and comply with legal obligations, after which it is deleted or anonymised. Application data for prospects we do not engage is retained for [retention period, for example 24 months] unless you ask us to delete it sooner. Newsletter data is kept until you unsubscribe.


8. Your rights

Your rights depend on where you are located. We honour the following:

UAE (Federal Decree-Law No. 45 of 2021 on Personal Data Protection, the PDPL). You have rights to access, correct, delete, and restrict or object to the processing of your personal data, to request portability, and to withdraw consent, subject to the conditions of the PDPL.

EU and UK (GDPR / UK GDPR). You have the right to access, rectify, erase, restrict, and port your data; to object to processing, including direct marketing; to withdraw consent; and to lodge a complaint with your local data protection supervisory authority.

California (CCPA / CPRA). You have the right to know what personal information we collect, use, and disclose; to request deletion and correction; to opt out of the "sale" or "sharing" of personal information; and to non-discrimination for exercising your rights. We do not sell your personal information.

Singapore (PDPA). You have the right to access and correct your personal data and to withdraw consent to its collection, use, or disclosure.

To exercise any right, email nidhi@growpido.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.


9. Data security

We maintain administrative, technical, and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or alteration. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If we become aware of a personal data breach that affects you, we will notify you and the relevant authorities as required by law.


10. Children's privacy

The Site and our services are intended for professionals and are not directed to children. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us data, contact us and we will delete it.


11. Third-party links

The Site may link to third-party websites, for example LinkedIn or YouTube. We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy policies.


12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version here with a new "Last updated" date, and where required by law, we will notify you or seek your consent to material changes.


13. Contact us

For any question about this policy or your personal data, or to exercise your rights, contact:

[Legal Entity Name] Meydan Free Zone, Dubai, United Arab Emirates Email: nidhi@growpido.com


Back to Home