Privacy Policy

Growth Hub OÜ (“we”, “us”, “our”, “Growth Hub”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our B2B marketing and acquisition services, or interact with our team. Please read this policy carefully to understand our views and practices regarding your personal data.

1. Information we collect

We collect different categories of personal data depending on how you interact with Growth Hub:

• Contact & identification data: name, email address, phone number, job title, company name, country (when you fill out forms, request a demo, subscribe to our newsletter, or download resources).
• Communication data: any correspondence you send to us via email, chat, contact forms, or phone calls (including call recordings with your consent where required).
• Usage & analytics data: IP address, browser type and version, time zone setting, operating system, referral source, pages visited, clickstream data, and time spent on our website (collected via cookies and similar tracking technologies).
• Marketing & campaign interaction: information about your engagement with our email campaigns, event attendance, webinar registrations, and lead scoring activities.
• Client & project data: when we provide marketing and acquisition services to our clients, we may process business contact details and campaign performance data as a data processor under separate agreements.

2. How we use your information

We use your personal data for legitimate business and legal purposes, including:

• Providing, operating, and improving our marketing, acquisition, and analytics services;
• Responding to inquiries, proposals, support requests, and client onboarding;
• Managing client relationships, invoicing, and service delivery;
• Sending service updates, newsletters, promotional communications, and event invitations (you may opt out at any time);
• Analyzing website performance, user behavior, and campaign effectiveness to optimize our offerings;
• Complying with legal obligations, preventing fraud, enforcing our terms, and protecting our rights.

3. Legal basis for processing (GDPR compliant)

Under the General Data Protection Regulation (EU) 2016/679 and Estonian law, we rely on the following legal grounds:

• Contractual necessity: processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract (e.g., providing services, invoicing).
• Legitimate interests: such as direct marketing to business clients, improving our services, network security, fraud prevention, and analytics.
• Consent: where you have explicitly consented (e.g., for non-essential cookies, certain marketing communications, or testimonials).
• Legal obligation: to comply with applicable laws, regulatory requirements, or court orders.

4. Sharing your information with third parties

We do not sell your personal data. However, we may share your information with trusted third parties to help us operate our business, subject to strict data protection obligations:

• Service providers & subcontractors: cloud hosting (e.g., AWS, Google Cloud), CRM platforms (e.g., HubSpot, Salesforce), analytics providers (e.g., Google Analytics, Hotjar), email marketing platforms, and customer support tools.
• Professional advisors: legal counsel, auditors, and accountants as necessary.
• Legal authorities: if required by law, regulation, legal process, or to protect the rights, property, or safety of Growth Hub, our clients, or others.
• Business transfers: in the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the new owner.

All third-party processors are contractually bound to protect your data and process it only in accordance with our instructions.

5. International data transfers

Growth Hub operates primarily within the European Union, but some of our service providers may be located outside the European Economic Area (EEA). When transferring personal data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) adopted by the European Commission, or transfers to countries with an adequacy decision. You may request a copy of these safeguards by contacting us at privacy@growthhub.ee.

6. Data retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (e.g., tax, accounting, or legal obligations). In general:

• Marketing and contact data: retained until you unsubscribe or request deletion, plus a reasonable period to process your request.
• Client project data: retained according to the terms of our client agreements or for up to 7 years after the end of the contract for legal and audit purposes.
• Website analytics data: anonymized or retained for up to 26 months.

7. Your privacy rights (EEA & Estonia)

If you are located in the European Economic Area or Estonia, you have the following rights regarding your personal data:

• Right to access: obtain confirmation whether we process your data and request a copy.
• Right to rectification: correct inaccurate or incomplete personal data.
• Right to erasure (“right to be forgotten”): request deletion of your data under certain conditions.
• Right to restriction of processing: limit how we use your data in specific circumstances.
• Right to data portability: receive your data in a structured, commonly used, machine-readable format.
• Right to object: object to processing based on legitimate interests (including direct marketing).
• Right to withdraw consent: where processing relies on your consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact our privacy team at privacy@growthhub.ee or write to: Lliksoo põik 1-1, 12616 Tallinn, Estonia. We will respond within 30 days. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at info@aki.ee or via their website at www.aki.ee.

8. Cookies and tracking technologies

Our website uses essential cookies (necessary for functionality), performance cookies (to analyze site usage), and optional targeting cookies (for personalized marketing). You can manage your cookie preferences through our cookie banner or browser settings. By continuing to use our site without adjusting your preferences, essential cookies will remain active. For more details, please see our Cookie Notice (available upon request).

9. Children’s privacy

Our services are intended for businesses and professionals. We do not knowingly collect personal data from individuals under the age of 16. If you believe we have inadvertently collected information from a minor, please contact us immediately so we can take appropriate action.

10. Security measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These include encryption in transit (TLS), access controls, regular security audits, and employee training. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The latest version will always be posted on this page with the “effective date” at the top. Material changes will be notified via email or a prominent notice on our website. Your continued use of our services after any changes constitutes acceptance of the updated policy.

12. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please reach out:

• Privacy point of contact: Gon Bhron
• Email: privacy@growthhub.ee
• Postal address: Lliksoo põik 1-1, 12616 Tallinn, Estonia
• Phone: +372 58104098 (ask for Data Protection team)

We are committed to resolving any privacy concerns in a fair and transparent manner.