Privacy policy

The data controller for both sites is Keferboeck Ltd, 66 Paul Street, London, EC2A 4NA, United Kingdom, registered in England and Wales under company number 12840144. You can reach us about anything in this policy at [email protected].

We are a UK company serving merchants across Europe, so we hold ourselves to both the UK GDPR and the EU GDPR. Where the two differ, you get whichever protects you more.

Our web servers, hosted on DigitalOcean in the European Union, write technical logs that include your IP address and browser type. We use them only for security and troubleshooting, and they are deleted on rotation. The legal basis is our legitimate interest in keeping the sites running and safe.

This website loads its font from the Fontshare content delivery network, which receives your IP address in order to serve the file but sets no cookies and builds no profile.

We use Fathom Analytics, which is cookieless and stores no personal data at all: no identifiers, no cross site tracking, servers in the EU. It simply counts visits.

Only if you consent, we additionally run Google Analytics 4 to understand which pages help and which confuse. IP addresses are anonymized by Google Analytics by design. The legal basis is your consent, which you can withdraw at any time on the cookie policy page.

We advertise on Google, on Meta platforms like Facebook and Instagram, and on LinkedIn. Only if you consent, we send conversion events to these providers, from your browser and from our server, so we can tell whether those ads work. These events can include your IP address, browser details and the identifier of the ad click that brought you here. The legal basis is your consent; nothing is sent without it, and withdrawing it on the cookie policy page stops it immediately.

Requesting beta access, or asking us anything, happens by email to [email protected]. We then hold your email address, your name if you sign with one, and whatever you chose to write. We use it to answer you and, if you become a customer, to set up your account. The legal basis is taking steps you asked for before entering a contract, and our legitimate interest in answering people who write to us. We keep correspondence as long as the conversation is relevant and delete it when it no longer is.

The app at app.growcentric.ai stores your email address, your password in hashed form, meaning we could not read it if we wanted to, your language choice, and the shop data the platform needs to do its job. The legal basis is the contract between us. The cookies involved are listed in the cookie policy. When your account closes, your personal data is deleted, except where we are legally required to keep invoices and similar records for the statutory retention period.

Nobody buys your data from us, because we do not sell it. A short list of processors handles it on our instructions: DigitalOcean hosts both sites in the European Union, and, only with your consent, Google Ireland Ltd, Meta Platforms Ireland Ltd and LinkedIn Ireland Unlimited Company receive the analytics and advertising events described above. Each is bound by a data processing agreement.

Beyond that, we disclose personal data only if the law requires it, and we will tell you when we are allowed to.

Our own servers are in the European Union. Google, Meta and LinkedIn may transfer data to the United States; those transfers rest on the EU–US Data Privacy Framework and standard contractual clauses, with the UK extension covering data from the United Kingdom.

Server logs are deleted on rotation. Your cookie choice is remembered for twelve months, six if you declined. Email correspondence lives as long as the conversation does. Account data lives as long as the account does, plus whatever the tax authorities insist on for billing records.

You can ask us for a copy of the personal data we hold about you, have it corrected, have it deleted, have its use restricted, receive it in a portable format, and object to processing based on legitimate interest. Where processing rests on consent, you can withdraw that consent at any time without affecting what happened before. Mail [email protected] and we will act on it, usually within days, at most within the month the law allows.

If you think we handled your data badly, you can complain to the Information Commissioner's Office in the UK or to your local data protection authority in the EU. We would appreciate the chance to fix it first, and we are usually faster.

We do not sell personal data. We make no automated decisions about you that carry legal or similarly significant effects; the automation in our product concerns product prices and ad budgets, not people. Our sites are aimed at businesses and not directed at children under sixteen.

Mail us at [email protected] and a human answers, usually within one business day. When this policy changes, the date at the top changes with it, and if a change matters we will say so rather than hide it.