Legal
Privacy Policy
Who we are
Growth Sharks B.V. is responsible for processing personal data through growth-sharks.com and in our contact with webshops, technology partners and applicants. We only use the data we need, and we never sell it.
- Company: Growth Sharks B.V., based in the Netherlands
- Chamber of Commerce (KvK): 92612733
- VAT number: NL866116709B01
- Privacy questions: contact@growth-sharks.com
We have not appointed a Data Protection Officer; this is not required for a company of our size and activities. You can send all your questions to the email address above.
What data we process and why
We only process business contact details and information you give us yourself. The table below shows, per situation, what we use, for what purpose, on which legal basis under the GDPR, and how long we keep it.
| Situation | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| You request a demo or a call through the website | Name, company, business email address, phone number (optional), webshop URL, platform, your goal or question, and whether you are a webshop, technology partner or agency | Contacting you, planning and preparing the demo. We only use your phone number to schedule an appointment with you | Consent and legitimate interest | 2 years after the last contact, unless you become a client or partner |
| You are a client or technology partner | Contact details of your contact persons, agreements, correspondence, invoicing details | Performing the agreement and administration | Performance of a contract and legal obligation | For as long as we work together; invoicing details 7 years (statutory tax retention period) |
| We approach you for business (outreach) | Name, job title, company, business email address or phone number, public LinkedIn profile | Informing you about technology that suits your webshop or business | Legitimate interest | Until you object, and at most 2 years without contact |
| We have an online meeting with you | Name, video and audio, notes | Recording the meeting and following up properly | Consent, which we ask for at the start of the meeting | At most 12 months |
| You apply for a job | CV, motivation, contact details, interview notes | Assessing your application | Consent and entering into an agreement | 4 weeks after the end of the procedure; with your consent 1 year |
| You visit the website | Pages viewed, referring website, device and browser | Improving the website | Legitimate interest (without cookies) | See “Website statistics” |
Phone number. The phone number field in our forms is optional. If you fill it in, we store it in our CRM (Pipedrive) and use it only to schedule an appointment with you. We do not use it for marketing or any other purpose.
We do not use your data for automated decision-making with legal consequences for you, and we do not sell it to third parties.
Website statistics
We use Cloudflare Web Analytics to see how our website is used: which pages are popular, which websites visitors come from and what type of device they use. This service does not place cookies, does not track you across other websites and does not build a profile of you. We only see totals, not who you are. That is why we do not ask for your consent for this.
Who we share data with
We only share your data with parties we need to do our work. With service providers that process data on our behalf, we have a data processing agreement.
| Party | Purpose |
|---|---|
| Pipedrive | CRM: contacts, leads and deals. We only use phone numbers in it to schedule appointments. Data is stored in the European Union (Amazon Web Services, Frankfurt and Dublin) |
| Google Workspace | Email, calendar and documents |
| Fathom | Recording and transcribing online meetings, only with consent |
| Cloudflare | Hosting the website, processing forms, spam protection and website statistics (without cookies) |
| Brevo | Forwarding form submissions to our mailbox (data stored in the European Union) |
Technology partners. If you request a demo or quote through us for a technology such as Reskyt, Segmentify, Fozzels, Boostic, NextChapter Ecommerce, Cervito or Vchfy, we share your contact details and your question with that partner, so they can arrange the demo or the contract. That partner is responsible for what it does with your data afterwards; its own privacy policy then applies.
Outside the EEA. Some service providers are based in the United States or have servers there. We only work with parties that are certified under the EU-U.S. Data Privacy Framework, or with whom we have agreed the Standard Contractual Clauses of the European Commission.
We also pass on data when the law requires us to, for example to the tax authorities.
Security
We protect your data with appropriate technical and organisational measures, including:
- an encrypted connection (https) across the entire website;
- access to the CRM and mailbox only for employees who need it, with two-factor authentication;
- spam and abuse protection on all forms;
- data processing agreements with all our service providers;
- deleting data once the retention period has ended.
Do you suspect misuse or a data breach? Report it straight away to contact@growth-sharks.com.
Your rights
You always have the right to know what data we hold about you, and to have it changed. Send your request to contact@growth-sharks.com; we will respond within one month.
- Access: ask which data we hold about you.
- Rectification: have incorrect data corrected.
- Erasure: have your data deleted, unless we are legally required to keep it, such as invoices.
- Restriction: have the processing temporarily stopped, for example while we check a correction.
- Objection: object to processing based on our legitimate interest. You can always object to business outreach; after that we will not approach you again.
- Data portability: receive the data you provided yourself in a common file format.
- Withdrawing consent: if you gave consent, you can withdraw it at any time. What we did before remains lawful.
To prevent someone else from requesting your data, we may ask you to confirm your identity.
Not happy with how we handle your data? Please let us know first, so we can find a solution together. You can always file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the supervisory authority in your own country.
Cookies and changes
We do not use tracking or marketing cookies. Read more in our Cookie Policy.
We may update this privacy policy when our services or the law change. The latest version is always available on this page, with the date of the last update.