Growtoria respects your right to erasure under the GDPR (Article 17), CCPA, and other applicable data protection laws. This page explains exactly what data we hold, how to request its deletion, and what happens after your request.

1. What Data We Hold About You

Depending on your interactions with us, we may store:

• Account data: name, email, billing address, phone (if provided)
• Order history: products purchased, transaction IDs (Stripe), invoices
• Email subscriptions: opt-in status managed in Fluent CRM
• Form submissions: information you sent via contact or quote forms
• Tracking cookies: only after consent (CookieYes manages categories)

2. How to Request Deletion

Send an email to [email protected] with the subject line “Data Deletion Request” and include:

• The email address associated with your account or purchases;
• Your full name (as used at purchase or registration);
• If applicable, an order number or transaction ID;
• A clear statement that you wish all your personal data to be deleted.

We may ask for additional verification to confirm your identity before processing the request.

3. Processing Time

We will acknowledge your request within 72 hours and complete the deletion within 30 days (GDPR Article 12.3). You will receive a confirmation email once your data has been removed.

4. What Will Be Deleted

• Your WordPress / WooCommerce account and customer profile
• Your contact information and any form submissions
• Your subscription record in Fluent CRM
• Marketing identifiers stored on Meta and other ad platforms (where technically possible)
• Any local cookies set by us (you can also clear them yourself in your browser)

5. What We May Have to Retain

Some data must be kept by law and cannot be deleted on request:

• Invoices and accounting records: kept for 10 years (French Commercial Code, Article L123-22).
• Stripe payment metadata: retained per Stripe’s own legal obligations (typically 7 years).
• Records of consent: kept for the duration required to demonstrate compliance (CookieYes consent logs).

Where retention is required, the data is anonymized as soon as legally possible.

6. Deleting Data From Third-Party Services

For data held by our processors directly (separately from us), you can also exercise your rights with them:

• Stripe — stripe.com/privacy
• Meta (Pixel / Conversions API) — manage your ad preferences and delete activity at accountscenter.meta.com
• Cloudflare (CDN/security) — cloudflare.com/privacypolicy
• Hostinger (hosting) — hostinger.com/privacy-policy

7. Your Other Rights

In addition to deletion, you can also request: access to your data, correction, restriction of processing, data portability, and objection to processing. See our Privacy Policy for the full list.

8. Complaint Right

If you believe we have not handled your request correctly, you may lodge a complaint with the French data protection authority: CNIL — www.cnil.fr.

Contact

Growtoria (Zakaria Mamoumi, Entrepreneur Individuel)
Address: 8 RUE BOTHIRON, 33290 BLANQUEFORT, France
SIREN: 883604290
Email: [email protected]