Book a call

Legal

Privacy policy

Last updated:

In short. We collect only what we need to reply to you and run this website. We do not sell your personal information. We do not use advertising or tracking cookies on this website. You can ask us to see, correct or delete your information at any time by emailing hello@grovuu.com.

1. Who we are

Grovuu ("Grovuu", "we", "us") is a B2B marketing consultancy based in Sri Lanka. We provide fractional CMO leadership, go-to-market and marketing services, and AI agents for B2B and technology companies. This policy explains how we handle personal information collected through grovuu.com and when you contact us. For the purposes of data protection law, we are the controller of that information.

Grovuu
18, 49A Evergreen Park Rd, Colombo 00500, Sri Lanka
Email: hello@grovuu.com

2. What this policy covers

This policy covers visitors to this website, people who send us an enquiry, and prospective clients and contacts we deal with before an engagement starts. Information we handle while delivering work for a client, such as campaign data or customer lists, is covered by our written agreement with that client, and we handle it on the client's instructions.

3. Information we collect

Information you give us

  • Contact form: your name, company, work email address, the market you want to grow in, what you need from us, and the message you write.
  • Emails and calls: the content of messages you send us, details needed to arrange a call, and notes we take about your business needs during discovery conversations.
  • Engagement details: if we start working together, the business and billing details we need to prepare a proposal and agreement.

Information collected automatically

When you visit the website, our hosting provider records basic technical information in server logs, such as your IP address, browser and device type, the pages requested, and the date and time. We use it to keep the website secure and working properly.

Information from public sources

To prepare for a conversation you have asked for, we may look at publicly available professional information, such as your company website or LinkedIn profile.

Please do not send us sensitive personal information (for example health, financial account or government identity details) through the contact form or by email.

4. How we use your information, and why

  • To reply to your enquiry and arrange a call. This is necessary to take steps at your request before a contract, and is in our legitimate interest in responding to business enquiries.
  • To prepare proposals and deliver services. This is necessary to perform a contract with you or your company.
  • To keep the website secure and improve it. This is in our legitimate interest in protecting our systems and running a reliable website.
  • To send you updates or marketing emails. We only do this with your consent, or where the law allows it for business contacts, and every message includes a way to opt out.
  • To meet legal, tax and accounting obligations.

We do not sell your personal information, and we do not make decisions about you using automated processing that has legal or similarly significant effects.

5. Cookies and similar technologies

This website does not set advertising or tracking cookies, and we do not currently use analytics tools that track you across websites. The fonts on this site are hosted by us, not loaded from a third party. If we add analytics or other cookies in future, we will update this policy and ask for your consent where the law requires it.

6. Who we share information with

We share personal information only with people and companies that help us run the business, and only as far as needed:

  • Form delivery: contact form submissions are passed through Web3Forms, which delivers them to our email inbox.
  • Hosting and security: our hosting provider (Cloudflare) processes website traffic and server logs.
  • Everyday business tools: email, calendar, video-call, document and accounting providers we use to communicate with you and manage engagements.
  • Professional advisers: lawyers, accountants and auditors, where needed.
  • Authorities: where we are required to by law, or to protect our rights or the safety of others.
  • A successor business: if Grovuu is sold or restructured, information may be transferred to the new owner on the same terms as this policy.

These providers are allowed to use personal information only to provide their services to us.

7. International transfers

We are based in Sri Lanka, and our clients and providers are in many countries, so your information may be processed in countries other than the one where you live. When we transfer personal information across borders, we take reasonable steps to make sure it stays protected, for example by using reputable providers with appropriate security commitments.

8. How long we keep information

  • Enquiries that do not lead to an engagement: up to 24 months after our last contact with you, then we delete them.
  • Client relationships: for as long as the engagement lasts, and afterwards for as long as we need the records for legal, tax and accounting purposes.
  • Server logs: for the short period set by our hosting provider.

9. Security

We use reasonable technical and organisational measures to protect personal information from loss, misuse and unauthorised access. No method of sending or storing information online is completely secure, so we cannot guarantee absolute security.

10. Your rights

Depending on where you live, you may have the right to:

  • ask for a copy of the personal information we hold about you;
  • ask us to correct information that is wrong or incomplete;
  • ask us to delete your information;
  • ask us to restrict how we use it, or object to a particular use;
  • receive your information in a portable format;
  • withdraw your consent at any time, where we rely on consent; and
  • complain to a data protection authority.

We handle personal information in line with Sri Lanka's Personal Data Protection Act, No. 9 of 2022, and with other data protection laws that apply to us in the places where we work. To use any of these rights, email hello@grovuu.com. We may need to confirm your identity first, and we aim to reply within 30 days.

11. Children

This website is for businesses and is not directed at anyone under 18. We do not knowingly collect personal information from children.

12. Links to other websites

This website links to other sites, such as LinkedIn. We do not control those sites and are not responsible for their privacy practices. Please read their policies before giving them your information.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows when it last changed. If we make a significant change, we will say so on this page.

14. Contact us

Questions about this policy or how we handle your information? Email hello@grovuu.com or write to us at 18, 49A Evergreen Park Rd, Colombo 00500, Sri Lanka.

You can also read our terms of use.