Privacy Policy

01. Who we are

GRO is the trading brand of GRO AI LLC, a United States Limited Liability Company (LLC). Our business address is 33 N Gould St, Sheridan, Wyoming 82801, United States. In this policy, “GRO”, “we”, “us” and “our” mean GRO AI LLC.

This policy applies to thegro.agency, enquiries, meeting bookings, guide requests and our business relationships. We are the controller of personal information when we decide why and how it is used for these purposes. It does not replace a client's own privacy notice where we process information on that client's instructions.

02. The information we collect

• Contact and business details: your name, work email, telephone number, company, role, website address and the information you choose to give us.
• Enquiries and bookings: the service you are interested in, meeting time and timezone, business goals, website brief, correspondence and records of our conversations.
• Client administration: proposal and contract details, billing contacts, invoices, payment status, approvals and records needed to provide the services.
• Technical information: IP address, browser and device information, requested pages, referral information, request timestamps and security or error logs generated when you use the website or its providers.
• Preferences: your booking-tool and advertising measurement choices, communications preferences and records of any consent or objection.

We obtain information directly from you, from colleagues who contact us on your business's behalf, and from the tools used to deliver our services. Where relevant, we may obtain professional contact details from public business websites, professional networks, referrals or a business data provider. We assess the permitted use of that information and provide the required privacy information when we contact you.

Please do not put passwords, payment-card details, health information or other sensitive personal information in a website brief or general enquiry. We will agree a suitable secure method if a project needs sensitive information or system access.

03. Why we use your information

When relying on legitimate interests, we consider the purpose, necessity and effect on your rights. You can object to this processing, including direct marketing. We do not treat booking a call, requesting a free page or accepting business terms as blanket consent to unrelated marketing.

You do not have to provide optional information. Without the contact details and context needed for your request, we may be unable to reply, reserve a meeting or deliver the service. Where a field is required by a booking form, it is identified there.

04. Website tools, bookings and guides

Netlify hosts this website and delivers its pages and files. Hosting involves processing technical request information to deliver and protect the service.

HubSpot provides our meeting calendars, booking forms and linked guide viewers. The calendar loads automatically when you reach it, unless you have switched HubSpot off in Cookie settings. When it loads, HubSpot receives information needed to deliver the embedded service, such as your IP address and browser details. Information you submit is used to manage your enquiry and booking. Calendar invitations and booking-related messages are part of the service you request.

Our guide buttons and direct scheduler links open HubSpot services. Those destinations have their own privacy information and controls. A document viewer may record access or ask for contact details; check the notice presented there. Case-study links take you to other websites, whose practices are governed by their own policies.

Our fonts, artwork and showcase films are served from this website. The showcase uses ordinary video files, not YouTube or Vimeo embeds. We do not install Google Analytics or Meta Pixel on this website. Read the Cookie Policy for the tools and choices that apply here.

Google Ads measures our advertising, only if you allow advertising measurement in the notice shown on your first visit or in Cookie settings. Until then Google’s tag does not load and nothing is sent to Google. If you allow it, the tag records which of our Google adverts brought you here and whether you went on to request a guide or book a call, so that we can see which adverts work, and Google can show our adverts to people who have visited this website. Google receives information such as your IP address, browser and device details, the pages you visit here and identifiers stored in cookies, and uses it under its own Privacy Policy (opens in a new tab), including to provide its measurement and advertising services. If you allow advertising measurement and then submit one of our forms, Google’s tag also sends Google a coded (hashed) version of the email address you entered so that Google can match your visit to a conversion (Google’s enhanced conversions), and this does not happen without your consent. You can withdraw your consent at any time in Cookie settings.

ChatGPT ads (OpenAI) measures our adverts in ChatGPT under the same advertising measurement choice, so it also runs only if you allow it. Until then OpenAI’s pixel does not load and nothing is sent to OpenAI. If you allow it, the pixel loads from OpenAI (bzrcdn.openai.com) and tells OpenAI about your visit and, when you reach one of our booking confirmation pages, that you booked a call, so that we can see which of our ChatGPT adverts lead to booked calls. OpenAI receives information such as your IP address, browser and device details, the page you are on, and identifiers its pixel may store in your browser, and uses it under its own Privacy Policy (opens in a new tab) to provide its advertising measurement. You can withdraw your consent at any time in Cookie settings.

When you ask for one of our guides, such as our package and pricing guides or our web design guide, our website records your request (the details you enter: your first and last name, work email, phone number, company name and website address, your budget band if you ask for an advertising guide, and the guide and the page) with Netlify, our host, so that we can send you the guide and a short series of follow-up emails about it, and may call you about it. We send these emails through Resend, an email delivery provider in the United States. Every email has an unsubscribe link, and you can ask us not to call you at any time. After you unsubscribe we keep your address and the date on a suppression list, so that we never email you about the guides again.

05. Who we share information with

We share information where needed with providers supporting our hosting, CRM, meetings, communications, project delivery, payments, accounting and security. They receive information relevant to their role, subject to appropriate contractual and confidentiality requirements. HubSpot, Netlify and Resend are the website providers identified above, with Google and OpenAI when you allow advertising measurement; the providers needed for an individual client project depend on its agreed scope.

We may also disclose information to professional advisers, insurers, auditors, authorities or courts where necessary for a legal obligation, a legitimate investigation or the establishment, exercise or defence of legal claims. If our business is reorganised or transferred, relevant records may be disclosed to advisers and prospective or actual successors with appropriate protections.

We do not sell your personal information. Only if you allow advertising measurement do Google’s tag and OpenAI’s pixel share information about your visit with Google and OpenAI for advertising measurement, and Google may also use it to show our adverts to people who have visited this website. You can switch this off at any time in Cookie settings. These statements concern GRO's own use of this website; an external provider's separate practices are explained in its own notice.

06. International processing

GRO AI LLC is based in the United States. Your information may be handled in the United States and in other countries where our service providers and authorised personnel operate. Privacy laws in those countries may differ from the laws where you live.

Where UK or EEA rules require a safeguard for a restricted transfer, the relevant transfer must be covered by an applicable adequacy decision or an appropriate contractual safeguard, such as approved standard contractual clauses and, where required for UK transfers, the UK Addendum or International Data Transfer Agreement. The appropriate mechanism depends on the provider, processing location and transfer. We do not claim that GRO AI LLC is certified under the EU-US Data Privacy Framework.

You can contact us for information about the destinations and safeguards relevant to your information, and request a copy of applicable safeguards, with confidential information redacted where appropriate.

07. How long we keep information

We keep personal information for the period needed for the purpose described in this policy, taking account of the relationship, any outstanding request or dispute, and applicable legal, tax, accounting and limitation requirements.

• Enquiry and meeting records are kept while we handle the request and any resulting business relationship, with further retention only where needed for a defined legal or administrative purpose.
• Client, contract and billing records are kept for the relationship and the applicable record-keeping or claims period.
• Marketing preferences and a limited suppression record may be retained so that we can honour an objection and avoid contacting you again.
• Technical logs follow the retention needed for service delivery, security and investigation. Provider-controlled retention may differ from records in our own systems.
• Your website booking-tool preference expires after 180 days, unless you change or remove it sooner. Other browser storage is described in the Cookie Policy.

When information is no longer needed, we delete it or make it anonymous. Records in backups may remain until their scheduled replacement, with access restricted. Ask us for the criteria or period applying to a particular record.

08. Security and use of automation

We use technical and organisational measures appropriate to the information and risk, including controlled access, secure transmission and confidentiality requirements. No internet service can be guaranteed completely secure. If an incident affects personal information, we assess it and make notifications where required by applicable law.

Our website does not make decisions producing legal or similarly significant effects about you solely through automated processing. GRO's service work may include AI-assisted drafting, research, workflow automation and CRM tools. The permitted use of client data in those tools must be covered by the agreed service scope, instructions and data protection arrangements. AI-generated material requires review before reliance or publication.

09. Your choices and privacy rights

Depending on where you live and which laws apply, you may be entitled to request access to or a copy of your personal information, correction, deletion, restriction, portability, or an explanation of how it is used. You may also be able to object to processing, withdraw consent or appeal a decision about a rights request.

Where processing relies on your consent, you can withdraw it without affecting the lawfulness of earlier processing. Use Cookie settings to change the embedded booking-tool and advertising measurement choices. Use an unsubscribe option in marketing communications or contact us to stop marketing. Service and contract communications may still be necessary.

For a rights request, contact us using the details below and describe the information or action you need. We may request proportionate information to verify identity or an authorised representative's authority. We respond within the period required by the law that applies and explain any lawful exception, extension or refusal. We do not discriminate against you for exercising an applicable privacy right.

UK residents can complain to the Information Commissioner's Office (opens in a new tab). EEA residents can contact their local supervisory authority. US residents may have rights under applicable state privacy laws, including an appeal where that law provides one. Those rights depend on the law's scope and exemptions; a Wyoming address does not remove protections that otherwise apply to you.

We do not treat a browser Do Not Track signal as a substitute for your selected booking-tool preference. Advertising measurement runs only if you allow it, and a Global Privacy Control signal from your browser keeps it off. An applicable legally recognised opt-out signal will be honoured for any processing to which it applies.

10. Information processed for clients

Where a client asks us to handle its customer, prospect or employee data, the client will usually decide the purposes and means of that processing and GRO will act as its processor or service provider. The actual roles depend on the activity and must be recorded in the relevant agreement.

That processing is governed by the client's instructions and the applicable data processing agreement, not by a general permission in this notice. If your request concerns a business that uses GRO's services, contact that business first. If you contact us, we will identify the appropriate controller and assist or forward the request as required.

11. Children and policy updates

Our website and services are directed at business users, not children under 18. We do not knowingly collect children's information through this website. If you believe a child has provided personal information, contact us so that we can investigate and take appropriate action.

We may update this policy when our services, practices or legal requirements change. The date and version above identify the current notice. We will provide additional notice of material changes where required and seek a new choice before adding optional technologies that need consent.

12. Contact GRO AI LLC

For a privacy question, rights request or complaint, contact GRO AI LLC using the details below. Mark correspondence “Privacy request” and include a way for us to reply. You do not need to book a sales meeting to make a privacy request.