Privacy Policy

01. Who we are

GRO is the trading brand of GRO AI LLC, a United States Limited Liability Company (LLC). Our business address is 33 N Gould St, Sheridan, Wyoming 82801, United States. In this policy, “GRO”, “we”, “us” and “our” mean GRO AI LLC.

This policy applies to thegro.agency, enquiries, meeting bookings, guide requests and our business relationships. We are the controller of personal information when we decide why and how it is used for these purposes. It does not replace a client's own privacy notice where we process information on that client's instructions.

02. The information we collect

• Contact and business details: your name, work email, telephone number, company, role, website address and the information you choose to give us.
• Enquiries and bookings: the service you are interested in, meeting time and timezone, business goals, website brief, correspondence and records of our conversations.
• Client administration: proposal and contract details, billing contacts, invoices, payment status, approvals and records needed to provide the services.
• Technical information: IP address, browser and device information, requested pages, referral information, request timestamps and security or error logs generated when you use the website or its providers.
• Preferences: your booking-tool choice, communications preferences and records of any consent or objection.

We obtain information directly from you, from colleagues who contact us on your business's behalf, and from the tools used to deliver our services. Where relevant, we may obtain professional contact details from public business websites, professional networks, referrals or a business data provider. We assess the permitted use of that information and provide the required privacy information when we contact you.

Please do not put passwords, payment-card details, health information or other sensitive personal information in a website brief or general enquiry. We will agree a suitable secure method if a project needs sensitive information or system access.

03. Why we use your information

When relying on legitimate interests, we consider the purpose, necessity and effect on your rights. You can object to this processing, including direct marketing. We do not treat booking a call, requesting a free page or accepting business terms as blanket consent to unrelated marketing.

You do not have to provide optional information. Without the contact details and context needed for your request, we may be unable to reply, reserve a meeting or deliver the service. Where a field is required by a booking form, it is identified there.

04. Website tools, bookings and guides

Netlify hosts this website and delivers its pages and files. Hosting involves processing technical request information to deliver and protect the service.

HubSpot provides our meeting calendars, booking forms and linked guide viewers. The calendar loads automatically when you reach it, unless you have switched HubSpot off in Cookie settings. When it loads, HubSpot receives information needed to deliver the embedded service, such as your IP address and browser details. Information you submit is used to manage your enquiry and booking. Calendar invitations and booking-related messages are part of the service you request.

Our guide buttons and direct scheduler links open HubSpot services. Those destinations have their own privacy information and controls. A document viewer may record access or ask for contact details; check the notice presented there. Case-study links take you to other websites, whose practices are governed by their own policies.

Our fonts, artwork and showcase films are served from this website. The showcase uses ordinary video files, not YouTube or Vimeo embeds. At this policy's update date, we do not install Google Analytics, Google Ads remarketing tags or Meta Pixel on this website. Read the Cookie Policy for the tools and choices that apply here.

05. Who we share information with

We share information where needed with providers supporting our hosting, CRM, meetings, communications, project delivery, payments, accounting and security. They receive information relevant to their role, subject to appropriate contractual and confidentiality requirements. HubSpot and Netlify are the website providers identified above; the providers needed for an individual client project depend on its agreed scope.

We may also disclose information to professional advisers, insurers, auditors, authorities or courts where necessary for a legal obligation, a legitimate investigation or the establishment, exercise or defence of legal claims. If our business is reorganised or transferred, relevant records may be disclosed to advisers and prospective or actual successors with appropriate protections.

We do not sell your personal information. We do not use this website to share visitor information for cross-context behavioural advertising. These statements concern GRO's own use of this website; an external provider's separate practices are explained in its own notice.

06. International processing

GRO AI LLC is based in the United States. Your information may be handled in the United States and in other countries where our service providers and authorised personnel operate. Privacy laws in those countries may differ from the laws where you live.

Where UK or EEA rules require a safeguard for a restricted transfer, the relevant transfer must be covered by an applicable adequacy decision or an appropriate contractual safeguard, such as approved standard contractual clauses and, where required for UK transfers, the UK Addendum or International Data Transfer Agreement. The appropriate mechanism depends on the provider, processing location and transfer. We do not claim that GRO AI LLC is certified under the EU-US Data Privacy Framework.

You can contact us for information about the destinations and safeguards relevant to your information, and request a copy of applicable safeguards, with confidential information redacted where appropriate.

07. How long we keep information

We keep personal information for the period needed for the purpose described in this policy, taking account of the relationship, any outstanding request or dispute, and applicable legal, tax, accounting and limitation requirements.

• Enquiry and meeting records are kept while we handle the request and any resulting business relationship, with further retention only where needed for a defined legal or administrative purpose.
• Client, contract and billing records are kept for the relationship and the applicable record-keeping or claims period.
• Marketing preferences and a limited suppression record may be retained so that we can honour an objection and avoid contacting you again.
• Technical logs follow the retention needed for service delivery, security and investigation. Provider-controlled retention may differ from records in our own systems.
• Your website booking-tool preference expires after 180 days, unless you change or remove it sooner. Other browser storage is described in the Cookie Policy.

When information is no longer needed, we delete it or make it anonymous. Records in backups may remain until their scheduled replacement, with access restricted. Ask us for the criteria or period applying to a particular record.

08. Security and use of automation

We use technical and organisational measures appropriate to the information and risk, including controlled access, secure transmission and confidentiality requirements. No internet service can be guaranteed completely secure. If an incident affects personal information, we assess it and make notifications where required by applicable law.

Our website does not make decisions producing legal or similarly significant effects about you solely through automated processing. GRO's service work may include AI-assisted drafting, research, workflow automation and CRM tools. The permitted use of client data in those tools must be covered by the agreed service scope, instructions and data protection arrangements. AI-generated material requires review before reliance or publication.

09. Your choices and privacy rights

Depending on where you live and which laws apply, you may be entitled to request access to or a copy of your personal information, correction, deletion, restriction, portability, or an explanation of how it is used. You may also be able to object to processing, withdraw consent or appeal a decision about a rights request.

Where processing relies on your consent, you can withdraw it without affecting the lawfulness of earlier processing. Use Cookie settings to change the embedded booking-tool choice. Use an unsubscribe option in marketing communications or contact us to stop marketing. Service and contract communications may still be necessary.

For a rights request, contact us using the details below and describe the information or action you need. We may request proportionate information to verify identity or an authorised representative's authority. We respond within the period required by the law that applies and explain any lawful exception, extension or refusal. We do not discriminate against you for exercising an applicable privacy right.

UK residents can complain to the Information Commissioner's Office. EEA residents can contact their local supervisory authority. US residents may have rights under applicable state privacy laws, including an appeal where that law provides one. Those rights depend on the law's scope and exemptions; a Wyoming address does not remove protections that otherwise apply to you.

We do not treat a browser Do Not Track signal as a substitute for your selected booking-tool preference. This site does not run advertising-sale or sharing activities that would require an opt-out from those activities. An applicable legally recognised opt-out signal will be honoured for any processing to which it applies.

10. Information processed for clients

Where a client asks us to handle its customer, prospect or employee data, the client will usually decide the purposes and means of that processing and GRO will act as its processor or service provider. The actual roles depend on the activity and must be recorded in the relevant agreement.

That processing is governed by the client's instructions and the applicable data processing agreement, not by a general permission in this notice. If your request concerns a business that uses GRO's services, contact that business first. If you contact us, we will identify the appropriate controller and assist or forward the request as required.

11. Children and policy updates

Our website and services are directed at business users, not children under 18. We do not knowingly collect children's information through this website. If you believe a child has provided personal information, contact us so that we can investigate and take appropriate action.

We may update this policy when our services, practices or legal requirements change. The date and version above identify the current notice. We will provide additional notice of material changes where required and seek a new choice before adding optional technologies that need consent.

12. Contact GRO AI LLC

For a privacy question, rights request or complaint, contact GRO AI LLC using the details below. Mark correspondence “Privacy request” and include a way for us to reply. You do not need to book a sales meeting to make a privacy request.