This Privacy Policy explains how Growth Bureau, the operator of the website growthbureau.ai (the "Site", "we", "us"), collects, uses and protects personal data of Site visitors. We process personal data lawfully, fairly and transparently, in line with applicable data protection laws, including, where applicable, the EU General Data Protection Regulation (GDPR).

1. Who we are and what this Policy covers

Growth Bureau is a full-cycle marketing and AI agency operating remotely and serving clients worldwide. This Policy applies to personal data collected through the Site — via contact and audit request forms, email correspondence and cookies. It does not cover third-party websites linked from the Site.

For the purposes of applicable data protection law, Growth Bureau acts as the data controller for the personal data described below. You can reach us at hello@growthbureau.ai.

2. What data we collect

We collect personal data that you provide voluntarily when filling in forms on the Site (project request form, contact form, audit request form):

  • name;
  • phone number;
  • email address;
  • any other information you choose to include in your message (for example, your company website, region or a description of your task).

We may also process aggregated, non-identifying data about Site visits collected automatically through cookies and web analytics services (see Section 5).

3. Purposes and legal bases of processing

We process personal data for the following purposes:

  • responding to your inquiries and requests (legal basis: taking steps at your request prior to entering into a contract, and our legitimate interest in responding to inquiries);
  • preparing proposals, estimates and delivering requested services (legal basis: performance of a contract or pre-contractual steps);
  • keeping you informed about the status of your request (legal basis: legitimate interest);
  • sending informational and marketing materials — only with your separate consent, which you may withdraw at any time (legal basis: consent);
  • improving the Site and the quality of our services based on aggregated statistics (legal basis: consent for analytics cookies; legitimate interest for aggregated, non-identifying analysis).

4. How long we keep data

We keep personal data only as long as necessary for the purposes described above: inquiry data — for the time needed to handle the inquiry and for a reasonable follow-up period; contractual data — for the duration of the engagement and any retention period required by law. When data is no longer needed, we delete or anonymize it.

5. Cookies and analytics

The Site uses cookies. Necessary cookies keep the Site working. Analytics and marketing cookies, as well as web analytics services, run only after you give consent through the cookie banner. You can change your choice at any time via the "Cookie settings" link in the Site footer.

We use a web analytics service to collect aggregated statistics about how visitors use the Site (pages visited, session duration, approximate location at city level). This data does not directly identify you, and analytics runs only with your consent.

6. Sharing personal data

We do not sell personal data. We share it only:

  • with service providers that help us run the Site and process inquiries (hosting, form processing, analytics), under agreements that restrict how they may use the data;
  • where required by law, regulation or a valid legal process;
  • with your consent, in other cases.

7. International data transfers

As a remote-first company we may process data in different countries. Where personal data of individuals in the EU/EEA or UK is transferred outside those territories, we rely on appropriate safeguards, such as standard contractual clauses, and take reasonable technical and organizational measures to protect the data wherever it is processed.

8. Your rights

Depending on your location, you have the right to:

  • access the personal data we hold about you and receive a copy;
  • have inaccurate or incomplete data corrected;
  • have your data erased ("right to be forgotten") or its processing restricted;
  • receive your data in a portable format;
  • object to processing based on legitimate interest;
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
  • lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, email us at hello@growthbureau.ai. We respond to verified requests within the timeframes required by applicable law.

9. Security

We apply reasonable legal, organizational and technical measures to protect personal data against unauthorized access, loss, alteration or disclosure, including access controls and encrypted connections (HTTPS).

10. Changes to this Policy

We may update this Policy from time to time. The current version is always available on this page, with the date of the latest revision shown above. Material changes will be highlighted on the Site.