Privacy Policy
1. Who we are
GrowitUp Media Private Limited ("GrowitUp", "we", "us", "our") operates https://growitup.co and provides done-for-you content production and growth services to coaches and creators.
- Registered entity: GrowitUp Media Private Limited, incorporated in India (CIN: U73100GJ2023PTC145770)
- Registered address: Sovereign Shoppers, 312/313, Anand Mahal Rd, beside Sindhu Seva Samiti School, Honey Park, Adajan Gam, Adajan, Surat, Gujarat 395009, India
- Email: contact@growitup.co
- Phone: +91 9723603757
For visitors in the UK and EEA, GrowitUp Media Private Limited is the data controller for personal data described in this policy. For data we process on behalf of a client (see Section 6), the client is the controller and we act as processor.
We are the controller responsible for your data under the UK GDPR, EU GDPR, India's Digital Personal Data Protection Act 2023 (DPDP Act), and applicable US state privacy laws including the California Consumer Privacy Act (CCPA/CPRA).
2. What we collect
When you book a call. Our booking is powered by Calendly. When you book, we collect your name, email address, phone number (if provided), time zone, scheduling details, and any answers you give to the booking questions (for example your channel URL, your offer, or your goals).
When you email or message us. Your name, email address or phone number, and the contents of your message, including via WhatsApp if you contact us there.
When you subscribe to our emails. Your name and email address, plus engagement data (opens, clicks) used to tailor what we send.
When you use the website. We do not run analytics on this site. Our host records standard server logs — IP address, browser type, and the pages requested — which are used for security and to keep the site running, and are not used to build a profile of you. See Section 8 for cookies.
When you become a client. Business and billing details, invoicing information, and the operational materials needed to deliver the service (see Section 6).
We do not sell personal data, and we do not knowingly collect data from children — see Section 11.
3. Why we process it, and our legal basis
| What we do | Why | Legal basis (UK/EU GDPR) |
|---|---|---|
| Schedule and hold discovery calls | To respond to your request and assess fit | Steps taken at your request prior to a contract |
| Deliver our services to clients | To perform our contract with you | Performance of a contract |
| Send marketing emails and newsletters | To share relevant content and offers | Consent (withdrawable at any time) |
| Follow up on an enquiry that didn't convert | To continue a conversation you started | Legitimate interests |
| Invoicing, accounting, tax records | Legal and financial obligations | Legal obligation |
| Security, fraud prevention, enforcing terms | To protect our business and clients | Legitimate interests |
Under the DPDP Act, we process personal data of individuals in India on the basis of consent or for legitimate uses as defined in that Act.
4. Who we share it with
We share personal data only with service providers who help us operate, each under contract and only for the purposes described here:
| Provider | Purpose | Where |
|---|---|---|
| Calendly | Call scheduling | USA |
| Google (Workspace, Drive) | Email and file storage | USA / global |
| Kit, MailerLite, or the client's own email platform | Email delivery for client campaigns (platform varies by client) | USA / varies |
| Vercel | Website hosting | USA / global |
| Stripe, PayPal, Wise | Payments and invoicing | USA / EU / global |
| Bank transfer (client's and our banking providers) | Payments | India / client's country |
| Slack | Team and client communication | USA |
| Notion | Internal project and documentation management | USA |
| Envato Elements | Licensed stock assets used in deliverables | Australia / global |
We may also disclose personal data where required by law, court order, or a lawful request from a public authority; to establish, exercise, or defend legal claims; or in connection with a merger, acquisition, or sale of assets, in which case we will notify you.
We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
5. International transfers
We operate from India and use service providers located primarily in the United States. If you are in the UK or EEA, your personal data will be transferred outside your country. Where we make such transfers, we rely on the European Commission's Standard Contractual Clauses for transfers to third countries, and on the UK International Data Transfer Addendum for transfers from the United Kingdom. Our service providers are engaged under data processing terms incorporating those clauses. We take steps to ensure your data receives a level of protection equivalent to that in your home jurisdiction. You can request details of these safeguards at contact@growitup.co.
6. Client data and channel access (important)
To deliver our services, clients give us access to systems and materials that may contain personal data belonging to their audiences — for example YouTube channel access, email lists, community platforms, and analytics. In relation to that data:
- The client is the data controller. GrowitUp acts as a data processor and processes such data only on the client's documented instructions.
- We limit access to team members who need it to deliver the service.
- Access is limited to team members working on the account, two-factor authentication is enforced on our business accounts, and every team member and contractor is bound by a signed confidentiality agreement.
- We do not use client audience data for our own marketing.
- On termination, we revoke our access to client systems within 7 days of the engagement ending or of a written request, and we retain client files for 1 month afterwards so clients can download anything they need, after which they are deleted.
- A separate Data Processing Agreement is available to any client who requests one.
- If we become aware of a personal data breach affecting client data, we will notify the client without undue delay and, where feasible, within 72 hours of becoming aware of it.
7. How long we keep it
| Data | Retention |
|---|---|
| Enquiries and bookings that don't become clients | 24 months from last contact |
| Client files and deliverables | Duration of the engagement plus 1 month |
| Financial and tax records | 8 years, as required under Indian law |
| Marketing subscribers | Until you unsubscribe, plus a suppression record to honour your opt-out |
8. Cookies
We use:
- Strictly necessary cookies — required for the site to function. These do not require consent.
- Third-party embeds — Calendly (booking) and YouTube (video). When you interact with these, the provider may set its own cookies and receive data about you, governed by their own policies.
We set no non-essential cookies of our own, so there is no consent banner on this site and nothing for you to opt out of. The only third-party cookies come from the Calendly and YouTube embeds above, and only once you interact with them; you can avoid those by not using the embed. You can block or delete cookies through your browser settings, though some features may stop working.
We run no analytics, no A/B testing, no advertising cookies, and no advertising pixels on this website. If that changes, we will update this policy and add a consent control before setting anything non-essential.
9. Your rights
If you are in the UK or EEA, you have the right to access your data; correct inaccurate data; request erasure; restrict or object to processing; data portability; withdraw consent at any time; and lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office at ico.org.uk).
If you are in California, you have the right to know what personal information we collect and how it is used; to request deletion; to request correction; and to be free from discrimination for exercising these rights. We do not sell personal information or share it for cross-context behavioural advertising.
If you are in India, under the DPDP Act you have the right to access a summary of your personal data and our processing; to correction, completion, updating and erasure; to nominate another individual to exercise your rights in the event of death or incapacity; and to grievance redressal. Our Grievance Officer is Divyesh Kalubhai Nabhoya, reachable at divyesh@growitup.co.
To exercise any right, email contact@growitup.co. We will respond within 30 days. We may ask you to verify your identity first.
10. Marketing emails
If you subscribe, we send occasional emails containing content and offers relating to our services. Every email includes an unsubscribe link, and you can opt out at any time — or email contact@growitup.co and we will remove you. We do not sell, trade, or rent your email address.
11. Children
Our website and services are directed to business owners and are not intended for children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, contact us and we will delete it.
12. Security
We use reasonable technical and organisational measures to protect personal data. These include restricting access to team members who need it, enforcing two-factor authentication on our business accounts, managing credentials through controlled access rather than shared logins, and requiring every team member and contractor to sign a confidentiality agreement. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Third-party links
Our site links to third-party websites, including our clients' YouTube channels and social platforms. We are not responsible for their privacy practices, and we encourage you to read their policies.
14. Changes
We may update this policy. The current version is always posted here with its effective date. If we make material changes, we will take reasonable steps to notify you.
15. Contact
Questions, requests, or complaints: contact@growitup.co GrowitUp Media Private Limited, Sovereign Shoppers, 312/313, Anand Mahal Rd, beside Sindhu Seva Samiti School, Honey Park, Adajan Gam, Adajan, Surat, Gujarat 395009, India.