Privacy Policy

Effective date: October 4, 2026

Who We Are

GrowthZor ("we," "us," "our") operates the website growthzor.com. GrowthZor provides CRM implementation, marketing automation, funnel building, integration, and related digital services.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have regarding your data.

What Data We Collect

Data you provide directly

When you submit a form on our website (such as the contact form or strategy call booking form), we collect:

• Name
• Email address
• Subject or enquiry type
• Message content

We only collect this data when you voluntarily submit it through a form on our website.

Data collected automatically

When you visit our website, certain data is collected automatically through cookies and similar technologies:

• IP address (anonymized where required by law)
• Browser type and version
• Operating system and device type
• Pages visited, time on page, and navigation path
• Referring website or source
• Approximate geographic location (country/region level, derived from IP)
• Screen resolution and viewport size
• Click, scroll, and interaction behavior (via session recording tools)

For full details on cookies and tracking technologies, see our Cookie Policy.

How We Use Your Data

Purpose	Data used	Legal basis (GDPR)
Respond to your enquiry or form submission	Name, email, message	Consent (you submitted the form); Legitimate interest
Understand how visitors use our website	Analytics data, cookies	Consent (cookie consent); Legitimate interest
Improve website performance and user experience	Session recordings, heatmaps, scroll/click data	Consent (cookie consent); Legitimate interest
Monitor website security	IP address, access logs	Legitimate interest
Comply with legal obligations	Any data as required	Legal obligation

We do not sell, rent, or trade your personal data to any third party. We do not use your data for automated decision-making or profiling.

Third-Party Services

We use the following third-party services that may process your data:

Service	Provider	Purpose	Privacy policy
Google Analytics 4	Google LLC	Website analytics (traffic, behavior, conversions)	Google Privacy Policy
Google Tag Manager	Google LLC	Tag and script management	Google Privacy Policy
Microsoft Clarity	Microsoft Corporation	Session recordings, heatmaps, behavior analysis	Microsoft Privacy Statement
Google Search Console	Google LLC	Search performance monitoring (no personal visitor data shared)	Google Privacy Policy
Forminator	WPMU DEV (Incsub LLC)	Form submissions (data stored on our server)	WPMU DEV Privacy Policy

These services may process data outside your country of residence. Where data is transferred outside the UK/EEA, these providers rely on Standard Contractual Clauses or equivalent safeguards.

Microsoft Clarity

Microsoft Clarity records anonymized session replays (mouse movements, clicks, scrolling) and generates heatmaps to help us understand how visitors interact with our website. Clarity does not capture keystrokes in form fields by default. We have configured masking on sensitive form inputs. You can opt out of Clarity tracking through your cookie preferences.

Data Retention

• Form submissions: Retained for up to 24 months, then deleted unless an ongoing business relationship exists.
• Analytics data (GA4): Retained for 14 months within Google Analytics. Aggregated (non-personal) data may be archived in our internal reporting systems for longer periods.
• Session recordings (Clarity): Retained according to Microsoft Clarity's standard retention period (typically 30 days).
• Server logs: Retained for up to 12 months for security purposes.

Your Rights

If you are in the UK or European Economic Area (GDPR / UK GDPR)

You have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict or object to processing
• Data portability (receive your data in a structured format)
• Withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal)
• Lodge a complaint with a supervisory authority (e.g., the UK Information Commissioner's Office at ico.org.uk)

If you are in California (CCPA / CPRA)

You have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale or sharing of personal information (we do not sell your data)
• Non-discrimination for exercising your rights

If you are in Canada (PIPEDA)

You have the right to access your personal information held by us and to challenge its accuracy. You may withdraw consent for future collection, use, or disclosure of your information, subject to legal or contractual restrictions.

If you are in Australia (Privacy Act 1988)

You have the right to access and correct your personal information. You may also complain to the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached.

Cookies

Our website uses cookies and similar technologies for analytics and functionality. For full details on the cookies we use, their purposes, and how to manage or disable them, please see our Cookie Policy.

Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.