Privacy policy

Who is responsible

GROWER SRL, trading as GRWR, is the data controller for the personal data described here.

• Registered office: Avenue Louise 54 / M12, 1050 Brussels, Belgium
• Enterprise number: BE 0440.581.423
• Email: menno@grwr.co

Data protection questions go to the same address. There is no separate data protection officer, because the scale of processing described below does not require one.

What is collected, and why

The contact form

If you send a message, the form collects your name, email address, optionally your company and role, optionally which format you are interested in, and whatever you write in the message. That is all it collects. There is no hidden field beyond a spam trap, which is never read unless it is filled in, in which case the message is discarded.

Why: to read your message and reply to it. Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR), and legitimate interest in responding to business enquiries (Article 6(1)(f)).

Please do not use the form to send confidential company information, personal data about other people, or anything sensitive. It is an email form, not a secure channel.

Server logs

The host records technical data with each request, including IP address, browser type, the page requested and the time. This is standard infrastructure logging, used to keep the site running and to investigate abuse. Legal basis: legitimate interest in operating and securing the site (Article 6(1)(f)).

What is not collected

No analytics. No advertising or tracking pixels. No profiling, and no automated decision-making. Nothing you do on this site is used to build a profile of you, here or anywhere else, and nothing is sold or rented to anyone.

Who else sees it

Personal data is shared only with the providers needed to run the site and deliver your message, each acting on documented instructions:

Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission’s Standard Contractual Clauses. Data may also be disclosed if the law requires it.

How long it is kept

• Enquiries that do not lead to work: up to 24 months from the last exchange, then deleted.
• Enquiries that lead to work: kept for the duration of the engagement and afterwards for as long as Belgian accounting and limitation rules require.
• Server logs: retained by the host on a short rolling window, normally measured in days.

Your rights

Under the GDPR you can ask to:

• see the personal data held about you, and get a copy;
• have it corrected if it is wrong;
• have it deleted;
• restrict how it is used, or object to it being used at all;
• receive it in a portable, machine-readable form;
• withdraw consent at any time, where the processing rests on consent.

Write to menno@grwr.co. You will get an answer within one month. No charge, and no need to give a reason.

If you are not satisfied with the response, you can complain to the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, Belgium.

Security

The site is served over HTTPS. Form submissions are validated on the server, rate limited, and sent straight to a mailbox: there is no website database holding your enquiry, and no admin login to compromise. Credentials for the email provider are held server-side and are never included in anything sent to your browser. No system is perfect, and no promise of absolute security is made here, because nobody can honestly make one.

Children

This site offers services to businesses and is not directed at children. No personal data is knowingly collected from anyone under 16.

Changes

If this policy changes, the date at the top changes with it. Material changes will be described here rather than slipped in quietly.