Last updated: October 23, 2025
This Privacy Policy explains how we collect, use, disclose, and protect your information when you use GrowBaze. We use your personal data to operate and improve the Service. By using the Service, you agree to this Policy.
Legal Entity: Alex Pfeffer (sole proprietor)
Brand: GrowBaze
Location: Hamburg, Germany
Email: [email protected]
For GDPR purposes, the Data Controller is Alex Pfeffer.
Website: https://growbaze.com
The Website and the GrowBaze software platform, including any related web applications, subdomains, and checkout pages we operate.
Personal Data: Any information that identifies or can identify a natural person.
Processing: Any operation performed on Personal Data (collection, storage, use, etc.).
Service Provider / Processor: A third party that processes data on our behalf.
GDPR: EU General Data Protection Regulation.
CCPA/CPRA: California Consumer Privacy Act and California Privacy Rights Act.
We may collect the following categories of data:
Contact data: Name, email address, phone number (if provided).
Account and profile data: Login, password (hashed), preferences, settings.
Commercial data: Records of products or services purchased or considered.
Usage data: IP address, device/browser type, pages visited, time/date, and interactions with platform features (e.g., scheduling, CRM actions).
Communications: Messages you send to us (support, feedback), newsletter preferences.
We do not intentionally collect special categories of data (e.g., health data) or precise geolocation. We do not knowingly collect data from children under 13.
Directly from you (forms, checkout, account creation, support).
Automatically via cookies, pixels, and similar technologies when you use the Website or Service.
From Service Providers that help us operate the Service (e.g., payment, hosting, analytics, or email delivery).
We use necessary cookies to run the Service and functional/analytics tools to improve it. You can manage cookies in your browser. If you use a cookie banner on the Website, your choices there apply. For details, see our Cookie Policy (if available) or contact us.
We process Personal Data for the following purposes:
Operating and securing the Service; providing features (Art. 6(1)(b)/(f) GDPR).
Account management and customer support (Art. 6(1)(b)/(f)).
Payment, subscriptions, invoicing, and fraud prevention (Art. 6(1)(b)/(f)/(c)).
Service improvement, analytics, and product development (Art. 6(1)(f)).
Marketing communications with your consent, or “soft opt-in” for existing customers where permitted (Art. 6(1)(a)/(f)). You may unsubscribe anytime via links in our emails.
Compliance with laws, enforcing terms, and protecting rights and safety (Art. 6(1)(c)/(f)).
Where we rely on consent, you may withdraw it at any time without affecting prior processing.
Giveaway and Partner Promotions
From time to time, we may collaborate with selected partners on joint promotions (e.g., giveaways or exclusive campaigns).
If you participate, your contact details may be shared with those partners solely for related promotional communication.
You can unsubscribe at any time or request a list of current partners by contacting us at [email protected].
GrowBaze provides tools to help you organize contacts, schedule content, and streamline outreach.
We use only integrations and methods that comply with each platform’s terms of service.
We sell digital subscriptions and services.
We use Paddle as our Merchant of Record and payment provider. Paddle processes your payment information and may act as an independent controller for transaction data under its own privacy policy.
We do not store full payment card details on our servers.
Paddle Privacy Policy: https://www.paddle.com/legal/privacy
We may share data with:
Service Providers/Processors (hosting, analytics, support, email/CRM).
Payment providers (as listed above).
Professional advisers and auditors (bound by confidentiality).
Authorities where legally required, or to protect rights, safety, and enforce terms.
Parties to a business transaction (e.g., merger or asset sale), subject to this Policy.
We do not sell or share Personal Data as defined under CCPA/CPRA, including for cross-context behavioral advertising.
If our practices change, we will update this Policy and provide required mechanisms.
We use GoHighLevel for CRM and email automation. It may use sub-processors (e.g., for email/SMS delivery).
GoHighLevel Privacy Policy: https://www.gohighlevel.com/privacy-policy
Where we transfer Personal Data outside the EEA or UK (e.g., to the U.S.), we rely on appropriate safeguards under Article 46 GDPR, such as the European Commission’s Standard Contractual Clauses (SCCs), and implement supplementary measures where necessary.
We retain Personal Data only as long as necessary for the purposes described above, including to meet legal, accounting, or reporting requirements.
Usage data is typically retained for shorter periods unless needed for security, functionality, or legal reasons.
We use administrative, technical, and organizational measures designed to protect Personal Data.
However, no method of transmission or storage is 100% secure; we cannot guarantee absolute security.
You have the right to:
Access your Personal Data and receive a copy.
Rectify inaccurate data.
Erase data in certain cases (“right to be forgotten”).
Restrict or object to processing in certain cases.
Data portability for data you provided to us.
Withdraw consent where processing is based on consent.
To exercise these rights, contact us at [email protected].
We may need to verify your identity.
You also have the right to lodge a complaint with your supervisory authority.
In Hamburg:
Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI)
Ludwig-Erhard-Str. 22, 7. OG, 20459 Hamburg, Germany
https://datenschutz-hamburg.de
If you are a California resident, you have rights to:
Notice of categories collected and purposes of use.
Know/access specific pieces of Personal Information we hold about you.
Correct inaccurate Personal Information.
Delete Personal Information (subject to exceptions).
Opt out of “sale” or “sharing” of Personal Information (we do not sell or share as defined).
Not be discriminated against for exercising your rights.
To exercise your rights, contact: [email protected].
We will verify requests and respond within the timelines required by law.
Our Service does not respond to DNT (Do Not Track) signals.
You can control certain tracking via your browser or device settings.
The Service is not directed to children under 13, and we do not knowingly collect Personal Data from them.
If you believe a child has provided Personal Data, contact us to delete it.
If consent is required by your country for minors, we will seek verifiable parental consent.
The Service may contain links to third-party sites.
We are not responsible for their content or privacy practices.
Review their policies before providing data.
If we are involved in a merger, acquisition, or asset sale, your Personal Data may be transferred, subject to this Policy.
We will provide notice when required by law.
We may update this Policy from time to time.
We will post the new version on this page and update the “Last updated” date.
Material changes may also be notified by email or a prominent notice on the Service.
If you have questions about this Privacy Policy or wish to exercise your rights, contact:
Email: [email protected]
Postal location: Buchwaldstieg 10, 22149 Hamburg, Germany