GDPR
Last updated: 17 October 2026
This notice is for the people we work with at client brands: founders, marketing leads, media buyers, in-house designers, and anyone else on the project. It explains how we handle your personal data when your brand works with us.
Growmark is based in Egypt and works with brands in Egypt and the Gulf. The GDPR is the European Union’s data protection law. It applies to us only when we handle the data of people in the EU or UK in ways it covers. Wherever you are, we give you the same core rights it gives, and we follow the data protection laws of Egypt and the Gulf countries where we work.
For website visitors and everyone else, see our Privacy Policy.
§1Who is responsible for your data
Growmark, Cairo, Egypt. In this notice, “Growmark,” “we” and “us” mean this business.
§2How to reach us
For anything about your personal data, email . Youssef Walid, our Founder, handles these requests.
§3Why we use your data, and on what basis
- To make and run the agreement with your brand. This covers the Diagnosis, the strategy plan, Creative Design, reporting, invoices and day-to-day contact. Basis: our legitimate interest in working with your brand properly (GDPR Article 6(1)(f)). If you sign the agreement in your own name, the basis is the contract itself (Article 6(1)(b)).
- To meet legal duties, such as keeping invoices and accounting records. Basis: legal obligation (Article 6(1)(c)).
- To set up, make or defend legal claims. Basis: our legitimate interest in protecting our rights (Article 6(1)(f)).
- To quote you by name in a published result. Only with your consent, which you can withdraw at any time (Article 6(1)(a)). Results we publish about your brand follow the publish clause in our agreement, and your brand approves the wording first.
§4What we need from you
Giving us your data is your choice. But we need the following to sign and run an agreement with your brand:
- First and last name
- Role
- Email address
- Phone or WhatsApp number
Without these, we can’t sign or deliver the agreement.
§5No automated decisions
We don’t make decisions about you using software alone, and we don’t profile you. A person reviews every result, including any work done with the help of software or AI tools.
§6Transfers outside your country
Some of the services we use, including hosting, email and software tools, store data outside Egypt and the Gulf, mainly in the United States and the European Union. Where the GDPR applies to a transfer, we protect it with the safeguards the GDPR requires, such as the EU Standard Contractual Clauses.
You can ask us for a copy of the safeguards that cover your data.
§7Who receives your data
Only the people and services we need to do the work, and only what each one needs:
- A company that provides our accounting
- A law firm that advises us
- Our hosting, email and file storage providers
- Our IT and software providers, including WhatsApp and Tally
- Payment providers: InstaPay, banks, Payoneer and Western Union
- Project partners (a developer, production crew or creator), only when your project needs one and your brand agrees
- Authorities, when the law requires us to share data
We never sell your data.
§8How long we keep it
| Data held | Kept for |
|---|---|
| For the agreement | For as long as the agreement runs, then 5 years |
| For legal duties | For as long as tax and accounting law requires |
| For legal claims | Until claims about the agreement can no longer be made under the law |
| For our legitimate interest | Until you object and we have no stronger reason to keep it, or until the purpose is done |
| For a published quote | Until you withdraw your consent |
§9Your rights
You can ask us to:
- Show you what personal data we hold about you, and give you a copy. The first copy is free.
- Correct your data if it’s out of date, incomplete or wrong.
- Delete your data when:
- we no longer need it for the purposes in this notice
- you withdraw consent, and we have no other legal basis to keep it
- we handled it unlawfully
- the law requires us to delete it
- Send your data to another company, in a common format. This applies to data we handle under an agreement and by automated means.
- Stop using your data for our legitimate interests, by objecting.
- Pause what we do with your data, keeping it stored but unused, while we check it’s correct, or when you need it kept for a legal claim.
To use any of these rights, email . We may ask you to confirm who you are. We reply within 30 days.
If you think we’ve handled your data unlawfully, you can complain to a data protection authority:
- In the EU or UK: the authority in the country where you live or work
- In Egypt: the Personal Data Protection Center
- In Saudi Arabia: the Saudi Data and AI Authority (SDAIA)
- In another Gulf country: the data protection authority there
Contact
Questions about your data? Email
Growmark · Cairo, Egypt