GDPR

Growmark, Cairo, Egypt. In this notice, “Growmark,” “we” and “us” mean this business.

For anything about your personal data, email growmark@growmark.site. Youssef Walid, our Founder, handles these requests.

• To make and run the agreement with your brand. This covers the Diagnosis, the strategy plan, Creative Design, reporting, invoices and day-to-day contact. Basis: our legitimate interest in working with your brand properly (GDPR Article 6(1)(f)). If you sign the agreement in your own name, the basis is the contract itself (Article 6(1)(b)).
• To meet legal duties, such as keeping invoices and accounting records. Basis: legal obligation (Article 6(1)(c)).
• To set up, make or defend legal claims. Basis: our legitimate interest in protecting our rights (Article 6(1)(f)).
• To quote you by name in a published result. Only with your consent, which you can withdraw at any time (Article 6(1)(a)). Results we publish about your brand follow the publish clause in our agreement, and your brand approves the wording first.

Giving us your data is your choice. But we need the following to sign and run an agreement with your brand:

• First and last name
• Role
• Email address
• Phone or WhatsApp number

Without these, we can’t sign or deliver the agreement.

We don’t make decisions about you using software alone, and we don’t profile you. A person reviews every result, including any work done with the help of software or AI tools.

Some of the services we use, including hosting, email and software tools, store data outside Egypt and the Gulf, mainly in the United States and the European Union. Where the GDPR applies to a transfer, we protect it with the safeguards the GDPR requires, such as the EU Standard Contractual Clauses.

You can ask us for a copy of the safeguards that cover your data.

Only the people and services we need to do the work, and only what each one needs:

• A company that provides our accounting
• A law firm that advises us
• Our hosting, email and file storage providers
• Our IT and software providers, including WhatsApp and Tally
• Payment providers: InstaPay, banks, Payoneer and Western Union
• Project partners (a developer, production crew or creator), only when your project needs one and your brand agrees
• Authorities, when the law requires us to share data

We never sell your data.

You can ask us to:

• Show you what personal data we hold about you, and give you a copy. The first copy is free.
• Correct your data if it’s out of date, incomplete or wrong.
• Delete your data when:
  • we no longer need it for the purposes in this notice
  • you withdraw consent, and we have no other legal basis to keep it
  • we handled it unlawfully
  • the law requires us to delete it
• Send your data to another company, in a common format. This applies to data we handle under an agreement and by automated means.
• Stop using your data for our legitimate interests, by objecting.
• Pause what we do with your data, keeping it stored but unused, while we check it’s correct, or when you need it kept for a legal claim.

To use any of these rights, email growmark@growmark.site. We may ask you to confirm who you are. We reply within 30 days.

If you think we’ve handled your data unlawfully, you can complain to a data protection authority:

• In the EU or UK: the authority in the country where you live or work
• In Egypt: the Personal Data Protection Center
• In Saudi Arabia: the Saudi Data and AI Authority (SDAIA)
• In another Gulf country: the data protection authority there