Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Contact & Business Information: Name, work email, phone/WhatsApp number, company name, website, industry, role, and any details you share via our contact forms, discovery requests, or discovery calls.
• Engagement Data: Information you share with us while we scope, plan, and deliver marketing services — offer details, target audience, budgets, competitors, brand guidelines, existing performance data, and creative assets.
• Access Credentials: When you grant us access to your ad accounts, analytics, CRM, or social platforms, we may hold tokens, permissions, or invited-user access. We do not store your platform passwords.
• Payment Information: Billing name, address, and payment references. Card payments are handled by third-party processors such as Stripe; we do not store full card numbers.
• Communications: Emails, WhatsApp/Telegram messages, meeting notes, and call recordings (where you are notified and consent).

1.2 Information Collected Automatically

• Device & Browser Data: IP address, browser type, operating system, device identifiers, referring URL, and language.
• Usage Data: Pages visited, time on page, buttons clicked, forms started/submitted, and how you navigate the site.
• Cookies & Similar Technologies: Essential cookies for site functionality, preference cookies, and analytics/marketing cookies. See Section 7.

1.3 Data We Process On Your Behalf

While delivering Services, we may process personal data belonging to your customers or leads (for example, form submissions from your landing pages, or contacts in your CRM). For that data, you are the data controller and we act as a data processor under your instructions and applicable law.

2. How We Use Your Information

We use personal data to:

• Respond to Inquiries: Reply to discovery requests, contact forms, WhatsApp messages, and email.
• Deliver the Services: Scope, plan, launch, and manage marketing campaigns, funnels, creative, and reporting agreed in your statement of work.
• Billing & Contracts: Issue invoices, process payments, manage renewals, and keep required financial records.
• Communication: Send transactional and service-related messages, reports, and — with your consent — occasional marketing about our own services.
• Improve Our Website & Services: Understand how visitors use the site, diagnose issues, and improve user experience and content.
• Security & Fraud Prevention: Protect our site, systems, and clients from abuse and unlawful activity.
• Legal Compliance: Meet obligations under UAE law and other applicable regulations.
• Software Add-on: If you separately sign up for GrowthzillaOS®, our optional software add-on, additional processing described at sign-up may apply.

3. Legal Basis for Processing (GDPR)

If you are in the EEA or UK, we rely on:

• Contract: Processing needed to provide the Services you request or to take steps at your request before entering a contract.
• Legitimate Interests: Running our business, marketing our services to other businesses, improving the website, and preventing fraud.
• Consent: For non-essential cookies and optional marketing communications. You can withdraw consent at any time.
• Legal Obligation: Where processing is required to comply with law (e.g., tax records).

4. Sharing & Disclosure

We do not sell your personal data. We share it only with:

• Service Providers: Vetted vendors who help us run our business, including cloud hosting, email delivery, analytics, CRM, scheduling, payment processing (Stripe), and communication tools.
• Ad & Marketing Platforms: When we run campaigns for you, we act on the accounts you own (Meta, Google, TikTok, LinkedIn, etc.). Data flows to those platforms are governed by their own terms and privacy policies.
• Contractors & Freelancers: Trusted specialists (designers, media buyers, developers) engaged under confidentiality obligations to help deliver Services.
• Professional Advisors: Lawyers, accountants, and auditors as reasonably necessary.
• Legal & Safety: Authorities where required by law, or to protect the rights, property, or safety of the Company, clients, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, data may be transferred to the successor entity.

5. Data Retention

• Prospect Data: If you contact us but never become a client, we typically retain your details for up to 24 months to follow up, then delete or anonymise.
• Client Data: Retained for the duration of the engagement and for up to 24 months after the last active engagement for support, portfolio, and legal purposes.
• Financial Records: Retained for at least the period required by UAE tax and accounting law (typically 5 years).
• Website Logs & Analytics: Typically retained for up to 14 months.
• Backups: Encrypted backups may retain data for a limited period after deletion from primary systems.

6. Data Security

We use reasonable and industry-standard measures to protect personal data, including:

• TLS encryption for data in transit.
• Access controls and least-privilege permissions for our team and contractors.
• Confidentiality agreements with team members and vendors.
• Encrypted storage for sensitive credentials such as ad-platform tokens.
• Regular review of vendors and internal practices.

No system is 100% secure. If we become aware of a security incident affecting your personal data, we will notify affected parties as required by law.

7. Cookies & Tracking

Our website may use:

• Essential Cookies: Required for basic site function and security.
• Preference Cookies: Remember settings such as theme.
• Analytics Cookies: Help us understand traffic and improve content.
• Marketing Pixels: We may use pixels from platforms such as Meta, Google, TikTok, or LinkedIn to measure ad performance and show relevant ads about our services. You can manage these via your browser settings or the relevant platform's ad-preferences page.

8. Your Rights

Subject to your jurisdiction and applicable law, you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data, subject to legal retention obligations.
• Restrict or Object to certain processing, including direct marketing.
• Data Portability in a structured, machine-readable format.
• Withdraw Consent where processing is based on consent.
• Complain to the relevant supervisory authority.

To exercise any right, contact privacy@growthzilla.ae. We will respond within 30 days.

9. International Data Transfers

Our vendors and ad platforms may process data outside the UAE, including in the EU, UK, and United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and vendor Data Processing Agreements.

10. Children's Privacy

Our website and Services are intended for business users. We do not knowingly collect personal data from children under 18. If you believe a child has provided us data, contact privacy@growthzilla.ae and we will delete it.

11. UAE Compliance

We aim to comply with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL") and its implementing regulations, together with any applicable free-zone data protection frameworks.

12. Client Data & Our Role as Processor

When we process leads or customer data captured through funnels, ads, or CRMs on your behalf, you (the client) remain the controller. You are responsible for having a lawful basis to collect and use that data and for informing your own contacts as required by law. We will:

• Process this data only per your written instructions and our engagement.
• Apply reasonable security measures.
• Return or delete such data at the end of the engagement, subject to legal retention needs.

13. GrowthzillaOS® Add-on

GrowthzillaOS® is an optional software tool we offer as an add-on to certain engagements. When you sign up for it, additional platform-specific privacy information (covering account data, AI processing, and integrations) is presented at sign-up and applies alongside this Policy. Software access is not required to work with our marketing services.

14. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated by updating the "Last updated" date and, where appropriate, by email. Your continued use of the website or Services after the effective date constitutes acceptance of the changes.

15. Contact Us

For any privacy question or request:

• Company: Saleselite Consulting Group FZCO (Growthzilla®)
• Privacy: privacy@growthzilla.ae
• Data Protection Inquiries: dpo@growthzilla.ae
• Website: growthzilla.ae