Privacy Policy
1. Who we are
Grow & Scale BV (KvK 85043583, Laantje van Rigter 2, 1261 WB Blaricum, the Netherlands) is the controller of the personal data described in this policy. Questions or requests: info@growandscale.nl.
2. What we collect and why
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| Webinar registration | First name, email, optionally phone number | Register you for the webinar, send the Zoom link, reminders and related emails | Consent and our legitimate interest in following up on your request |
| Call application | Name, email, phone, website, business details and answers to our questions (e.g. revenue, ad spend) | Assess whether a call makes sense and prepare for it | Steps at your request before entering into a contract |
| Unfinished call application | How far you got in the form and your answers to the business questions (e.g. revenue, bottleneck), plus which ad you came from. No name, email, phone number or website: for those we only note whether a field was filled in | See where people stop and improve the form | Our legitimate interest in improving our website |
| Booking a call | Name, email, phone, booking details | Schedule and hold the call, send reminders | Steps at your request before entering into a contract |
| Webinars and calls | Attendance, and recordings of calls and sessions | Quality, training, and records of what was agreed and delivered | Legitimate interest |
| Purchase | Name, email, phone, billing address, VAT number, payment details | Process payment, invoicing, deliver the Program, handle disputes | Performance of the contract and legal obligations (tax records) |
| Website visits | IP address, browser and device data, pages visited, ad click IDs, UTM parameters and cookie identifiers | Measure and improve our advertising (see section 4) | Our legitimate interest in measuring the effectiveness of our advertising |
We check that email addresses can receive mail and use your IP address to pre-select your country in the phone field. We don't sell your data.
3. Who processes your data for us
We use the following service providers, which process data on our behalf under data processing terms:
- Vercel: website hosting and form handling
- Kit (ConvertKit): email list and email sending
- Zoom: webinars and calls
- Calendly: call scheduling
- Stripe: payments and invoicing
- Meta Platforms: advertising measurement (Meta Pixel and Conversions API)
- Google: website fonts and business email
Some of these providers are based in, or transfer data to, the United States. Where that happens, transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
4. Cookies and advertising measurement
Cookies (Meta Pixel). Our pages load the Meta Pixel, which places cookies (such as _fbp and _fbc) in your browser to measure which of our ads work. A notice informs you about this on your first visit; we store that you have seen it in a first-party cookie (gs_consent, 6 months). You can block or delete these cookies at any time in your browser settings.
Server-side measurement (Meta Conversions API). To measure and improve our advertising, our server reports key actions to Meta: page views, webinar registrations, opening and starting the call application, call applications and bookings, webinar attendance and purchases. This happens whether or not you accept cookies, based on our legitimate interest in measuring the effectiveness of our ads. What we send: the action, the page, your IP address and browser details, the ad click ID from the link you clicked (if any), and, once you've given them to us, your email address, phone number, first name and country in hashed (encrypted, non-readable) form. The Pixel's browser ID is included too.
You can object to server-side measurement at any time by emailing info@growandscale.nl; we will stop sending your data to Meta. Meta processes this data as described in its own privacy policy, and you can manage ad preferences in your Meta account.
5. How long we keep data
- Leads who don't become clients: up to 2 years after our last contact, or until you unsubscribe or ask us to delete it.
- Client and payment records: 7 years, as required by Dutch tax law.
- Call recordings: up to 2 years, or longer if needed for a dispute.
- Progress of unfinished call applications: up to 12 months.
6. Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to data portability. Where processing is based on consent, you can withdraw it at any time; every email contains an unsubscribe link. Email info@growandscale.nl and we will respond within one month.
You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
7. Security
We use encrypted connections (HTTPS), keep API keys and credentials out of our website code, and limit access to personal data to people who need it.
8. Changes
We may update this policy. The date at the top shows when it was last changed.