Growtoria respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data — in compliance with the GDPR (EU), CCPA (California), and other applicable data protection laws.

1. Who We Are (Data Controller)

Growtoria is a digital marketing agency and digital products publisher. Our website is https://growtoria.com.

The data controller is:
Zakaria Mamoumi (Entrepreneur Individuel), trading as Growtoria
Address: 8 RUE BOTHIRON, 33290 BLANQUEFORT, France
SIREN: 883604290
Email: [email protected]

2. Data We Collect

• Contact information (name, email, company, phone) when you fill out forms, request a quote, or purchase a service.
• Billing information (name, address, payment method) processed securely via Stripe.
• Technical information (IP address, browser type, device, referring URL, pages visited) collected automatically via cookies and analytics.
• Communications (emails, chat messages, call notes) exchanged during our engagement.

3. How We Use Your Data

• Deliver the services you’ve purchased
• Respond to your inquiries and provide customer support
• Send transactional emails (order confirmations, invoices, project updates)
• Send marketing communications — only with your explicit opt-in consent
• Improve our website, services, and user experience
• Comply with legal obligations (accounting, tax, security)

4. Legal Basis for Processing (GDPR)

We process your data on one or more of the following legal bases: (a) your explicit consent; (b) performance of a contract you’ve entered into with us; (c) our legitimate interests in operating our business; (d) compliance with legal obligations.

5. Who We Share Data With

We never sell your personal data. We share data only with trusted third-party service providers, including:

• Stripe — payment processing (PCI-DSS compliant)
• Meta Pixel and Conversions API — advertising performance measurement; only after you opt in to the Advertisement cookie category
• CookieYes (cookie-law-info) — consent management and consent log records
• Fluent CRM — newsletter and customer relationship management
• Brevo — transactional email and marketing email delivery
• Cloudflare — content delivery network, DDoS protection and IP-level security (US/EU/global edge)
• Hostinger — website hosting (EU data centers)

All third parties are bound by data protection agreements.

6. Your Rights

Depending on your location, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict certain processing
• Port your data to another service
• Withdraw consent at any time
• Lodge a complaint with a data protection authority

To exercise any of these rights, email [email protected]. We respond within 30 days.

7. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy, or as required by law. Customer records are typically kept for 7 years for accounting and legal purposes. Marketing data is kept until you unsubscribe.

8. Security

We implement industry-standard security measures including SSL encryption, secure password storage, regular backups, and access controls. No method of transmission over the internet is 100% secure, but we work hard to protect your data.

9. International Transfers

Some of our service providers are located outside the European Economic Area. When we transfer data internationally, we ensure appropriate safeguards are in place (Standard Contractual Clauses or equivalent).

10. Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website.