Last Updated: 15-04-2026
GDPR Compliance
General Data Protection Regulation (EU) 2016/679
Our Commitment to Data Protection
Grow Ora OÜ is committed to protecting the privacy and personal data of our users in compliance with the General Data Protection Regulation (GDPR). This document outlines our data protection practices and your rights as a data subject within the European Union.
Data Controller Information
Grow Ora OÜ
Harju maakond, Tallinn, 10145, Estonia, Europe
Email: support@growora.link
Legal Bases for Processing
Under GDPR, we process personal data based on the following legal grounds:
- Consent: Where you have given explicit consent for specific processing activities (e.g., marketing communications, cookies).
- Contractual Necessity: Where processing is necessary for the performance of a contract with you (e.g., account creation, affiliate tracking).
- Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights (e.g., fraud prevention, website security, analytics).
- Legal Obligation: Where processing is required to comply with applicable laws (e.g., tax records, legal requests).
Your Rights Under GDPR
Right to Access
Request a copy of your personal data we hold.
Right to Rectification
Correct inaccurate or incomplete data.
Right to Erasure
Request deletion of your data ("right to be forgotten").
Right to Restriction
Limit how we process your data.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or direct marketing.
Automated Decision-Making
Not be subject to solely automated decisions with legal effects.
Right to Complain
Lodge a complaint with a supervisory authority.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us at support@growora.link with the subject line "GDPR Request". We will respond within 30 days as required by law. To verify your identity, we may request additional information before processing your request.
Data Protection Officer (DPO)
For privacy-related inquiries, you may contact our Data Protection Officer at: dpo@growora.link
International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer your data internationally, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data receives adequate protection.
Data Retention Periods
We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy:
- Account Data: Retained for the duration of your active account plus 12 months after account closure for fraud prevention and legal compliance.
- Transaction/Affiliate Data: Retained for up to 7 years to comply with tax and accounting obligations.
- Marketing Data: Retained until you unsubscribe or withdraw consent.
- Log Data: Retained for up to 12 months for security and analytics purposes.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights, we will also notify you directly without undue delay.
Cookies and Consent
Under GDPR, we obtain your explicit consent before placing non-essential cookies on your device. Our cookie consent banner allows you to accept, reject, or customize your cookie preferences. You can change your preferences at any time through our cookie settings.
Supervisory Authority
If you believe we have violated your data protection rights, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local EU supervisory authority.
Estonian Data Protection Inspectorate:
Website: www.aki.ee
Email: info@aki.ee
Updates to This GDPR Compliance Notice
We may update this GDPR Compliance notice periodically to reflect changes in our data processing practices or legal requirements. Significant changes will be communicated via email or website notice.
Contact Us
For any questions about GDPR compliance or data protection, please contact:
Email: support@growora.link
Mail: Grow Ora OÜ, Harju maakond, Tallinn, 10145, Estonia