Privacy Policy
1. Introduction
Welcome to the Gro3 Privacy Policy. Gro3 is a trading name of Crest Labs Ltd ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and services, and your rights regarding your information under applicable data protection laws.
2. Data Controller
Gro3 (Crest Labs Ltd) is the data controller responsible for your personal information. Registered Office: Suite Ff10 Brooklands House, 58 Marlborough Road, Lancing, West Sussex, United Kingdom, BN15 8AF Company Number: 15795586 Email: Contact@gro3.io
3. Information We Collect
We may collect the following categories of personal information: Identifiers: Name, contact details (email address, phone number), IP address, and other unique identifiers. Commercial Information: Information regarding your use of our services, purchase history, and payment details. Internet or Network Activity: Browsing history, search history, and information regarding your interaction with our website. Geolocation Data: Physical location or movements. Other Information: Any other information you provide to us through surveys, forms, webinars, or other channels.
4. How We Use Your Information
We use your personal information for the following purposes: To provide you with the information, products, or services you request To send you marketing communications, such as newsletters, promotions, and updates (if you have opted in) To improve our website, services, and customer experience To comply with legal obligations To detect, prevent, and address fraud or other unlawful activity To conduct analytics and understand how users interact with our website and services
5. GDPR Compliance Statement
We are committed to complying with the UK GDPR and the EU GDPR. We ensure that: Your personal data is processed lawfully, fairly, and transparently. Your data is collected for specified, explicit, and legitimate purposes and not further processed in a way incompatible with those purposes. Your personal data is accurate, kept up to date, and retained only as long as necessary for the purposes for which it was collected. Appropriate technical and organizational measures are in place to protect your data against unauthorized or unlawful processing, accidental loss, destruction, or damage.
6. Legal Basis for Processing Your Data
We process your personal data based on the following legal grounds: Consent: When you provide your email for marketing communications or other specified purposes. Legitimate Interests: For analysis, fraud prevention, improving our services, and marketing where we assess that our interests do not override your rights. Compliance with Legal Obligations: When required to comply with laws and regulations.
7. International Compliance
We comply with all applicable data protection laws, including but not limited to the UK GDPR, EU GDPR, California Consumer Privacy Act (CCPA), Brazil's General Data Protection Law (LGPD), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Australia's Privacy Act 1988, and any other applicable privacy regulations in countries where we operate. 8. Marketing Communications If you have opted in, we may use your email to send marketing communications. You can withdraw your consent at any time by clicking the unsubscribe link in any email or contacting us directly at Contact@gro3.io.
8. Data Retention
We retain your personal data only as long as necessary for the purposes for which it was collected or as required by law. Our retention periods are based on the legal requirements and the purposes for which we hold the information.
9. Data Sharing
We do not share your personal data with third parties except where necessary to provide our services or where required by law. We may share your data with: Service Providers: To perform services on our behalf (e.g., payment processing, data analysis, email delivery, hosting services). Regulators and Authorities: To comply with legal obligations or protect our rights. 11. International Data Transfers Your personal data may be transferred to, stored, and processed in a country outside your jurisdiction. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, adequacy decisions, or Binding Corporate Rules, to protect your data in line with UK, EU, and other applicable laws.
10. Cross-Border Data Transfers and Consent
By using our services or providing us with your information, you consent to the transfer of your personal data to countries outside of your own, including countries that may have different data protection laws. You may withdraw your consent at any time by contacting us at Contact@gro3.io.
11. Your Rights Under GDPR and Global Privacy Laws
Depending on your location, you may have the following rights regarding your personal data: Access: Request access to the personal data we hold about you. Rectification: Request correction of any inaccurate or incomplete data. Erasure: Request deletion of your personal data, subject to certain conditions. Restriction: Request restriction of processing where certain conditions apply. Objection: Object to processing of your data for direct marketing or other purposes. Data Portability: Request the transfer of your personal data to another party. Withdraw Consent: Withdraw your consent at any time, where processing is based on consent. Lodge a Complaint: Lodge a complaint with your local data protection authority.
12. California Privacy Rights
If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA): Right to Know: Request details about the personal information we have collected about you in the past 12 months. Right to Delete: Request the deletion of your personal information, subject to certain exceptions. Right to Opt-Out: Opt out of the sale of your personal information (we do not sell personal information). Right to Non-Discrimination: Right not to receive discriminatory treatment for exercising privacy rights.
13. Exercising Your California Privacy Rights
To exercise your rights under the CCPA, you can contact us by:
Email: Contact@gro3.io
Online: Visit our website's “California Privacy Rights” page.
14. Verification of Requests
We will take reasonable steps to verify your identity before fulfilling any requests related to your personal information to protect your privacy.
15. Children's Data
Our services are not intended for children under the age of 13 (or the applicable age in your jurisdiction), and we do not knowingly collect personal information from children without parental consent, in compliance with COPPA, GDPR, and other applicable laws.
16. Cookies
Our website uses cookies to enhance the user experience. Please see our Cookie Policy for more information.
17. Notice at Collection
At the time of collecting personal information, we will provide you with information about the categories of personal information being collected and the purposes for which it is being used.
18. Authorized Agents
California residents may designate an authorized agent to make a request under CCPA on their behalf, subject to verification of the agent's authority.
19. Contact Information for Global Users
If you have any questions about this Privacy Policy or how we handle your data, or if you wish to exercise your rights, please contact us at Contact@gro3.io or by mail at: Suite Ff10 Brooklands House, 58 Marlborough Road, Lancing, West Sussex, United Kingdom, BN15 8AF.
20. Multilingual Accessibility
We may provide translations of this Privacy Policy in multiple languages to ensure our users worldwide understand our data practices. In the event of any discrepancies between different translations, the English version shall prevail. 23. Changes to This Privacy Policy We may update this Privacy Policy periodically. The updated policy will be posted on our website, so please check regularly.
Cookie Policy (Summary for Quick Reference)
1. What Are Cookies?
Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience by remembering your preferences and tracking website usage.
2. Types of Cookies We Use
Necessary Cookies Analytical/Performance Cookies Functional Cookies
3. Managing Cookies
Control cookies through your browser settings. Disabling cookies may affect your experience.
4. Third-Party Cookies
We use third-party cookies to analyze usage and deliver targeted ads.
5. Cookie Consent
By using our website, you consent to cookies in accordance with this policy. Adjust your browser settings or refrain from using the website if you do not agree.
