Privacy statement

This privacy statement explains which personal data Growthflow processes, why we do so and what rights you have. We comply with the General Data Protection Regulation (GDPR).

1. Who is responsible?

Growthflow is responsible for the processing of personal data described in this statement.

• Chamber of Commerce (KvK) number: 99031337
• Email: info@growthflow.nl
• Phone: 06 23 94 78 14

2. What data we process and why

Contact via WhatsApp, email or phone. If you contact us this way, we process your name, phone number or email address and whatever you tell us. We do this to answer your question and, if you wish, to make a proposal. This is at your request or based on our legitimate interest in answering your question.

Forms on the website. Through the contact form you send your name, email address, your message and the topics or service your question is about, and, if you fill them in, your company name and phone number. Through the free audit form you send your website address, your name, your email address and, if you fill it in, your phone number. We also record the language in which you viewed the site and, for the audit form, the page on which you filled it in. We use this data to handle your request and to contact you. This is at your request.

Form submissions arrive in Klaviyo, the service we use to receive and manage requests and to send emails. Klaviyo processes this data on our behalf.

Newsletter. On the audit form you can tick a box to also receive tips and news. Only then do we add your email address to our newsletter list in Klaviyo. This is based on your consent. You can unsubscribe at any time using the link at the bottom of every email.

Hosting and technical data. The website runs on Amazon Web Services (AWS Amplify). When you visit, the hosting provider processes technical request data such as your IP address, browser information and the time of the request. This is necessary to keep the website secure and working properly (legitimate interest).

3. How long we keep data

We do not keep data longer than necessary for the purpose for which we received it. We keep the data of a request for as long as necessary to handle and follow up your question. If you become a client, we keep data for as long as the assignment runs and after that for as long as the law requires, such as the retention obligation for the accounts. Your newsletter subscription runs until you unsubscribe.

4. Who we share data with

We never sell your data. We only share it with parties we need to provide our services: Amazon Web Services for hosting the website and Klaviyo for forms and email. They process the data on our behalf, and we have agreements with them about security and confidentiality. If data is processed outside the European Economic Area, this only happens with appropriate safeguards.

5. Cookies

The website does not use tracking, analytics or advertising cookies, nor any other cookies that require consent. The language of the website follows from the address (for example /en for English); no cookie is needed for that. If you close the message next to the WhatsApp button, your browser remembers this only while the tab is open. This information is not sent to us. If we start using cookies that require consent in the future, we will ask for it first and update this statement.

6. Security

We take appropriate technical and organisational measures to protect your data against loss and unauthorised access. The website uses a secure connection (HTTPS).

7. Your rights and complaints

You have the right to access your data and to have it corrected or deleted. You can also ask us to restrict the processing, object to the processing, receive your data in a common file format and withdraw consent you have given at any time.

Send your request to info@growthflow.nl. We respond within one month. To prevent someone else from requesting your data, we may ask you to identify yourself.

Not happy with how we handle your data? Let us know and we will look for a solution together. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

8. Changes

We may update this privacy statement. The date at the top shows when this last happened.

This is a translation of the Dutch version. In the event of any differences, the Dutch version prevails.