Grow’s preparation for GDPR compliance
Grow is committed to meeting the requirements of the General Data Protection Regulation (GDPR). This legislation comes into effect in the European Union on May 25, 2018.
To comply with the GDPR, we have done the following:
Made our staff aware of the importance of customer privacy
Ensured that all staff who access and process the personal data of our customers are bound to maintain the confidentiality and security of that data
Identified all 3rd party vendors and confirmed the status of their GDPR compliance
Reviewed our current data privacy and security processes to ensure that they are up to date
Created new processes and updated existing processes for handling data breaches
Created an FAQ section where customers can check more information about GDPR and our actions
What is the GDPR? - The General Data Protection Regulation (GDPR) is a regulation that protects the data and privacy of individuals within the European Union. The aim of the GDPR is to give EU citizens more control over their personal information and to establish uniform rules for privacy protection across Europe.
What rights do individuals have under the GDPR? - The rights of individuals under the GDPR include:
The right to be informed when their data is being collected
The right to request access to their personal data and to ask how it is being used by the company
The right to have their personal data deleted by a company that holds it
The right to transfer data from one service provider to another
The right to correct or change information
The right to stop companies from using their data for direct marketing
The right to be notified within 72 hours if a data breach occurs and the individual’s personal data has been compromised
To learn more about the GDPR, you can consult the European Commission's fact sheet.
What personal information does Grow collect? - We are collecting the following user information:
Personal information provided by users
Data from the use of the Grow website
How can I request a copy of my personal data? - You may contact us at firstname.lastname@example.org to request a copy of your personal data. We will respond to your request within 30 days on how you can download your data.
How can I request account closure and the deletion of my personal data? - You may request to close your account by sending us an email at email@example.com. The following conditions apply:
The account requested for closure will be deactivated for 15 days before full closure.
You will no longer be able to log into your account after it is deactivated.
Your personal data will be unrecoverable after full closure along with your account.
If you have any additional questions about how we are complying with GDPR, please contact us at firstname.lastname@example.org. We will promptly respond to your request.