Privacy Policy

Data Collection and Usage

At GrowHighClub we prioritize the protection of your personal information. This privacy policy complies with the LSSICE (Ley de Servicios de la Sociedad de Información de España) and LOPD (Ley Orgánica de Protección de Datos de Carácter Personal de España).

We collect and process the following personal information:

We collect this information when you: Create an account, Make a purchase, Sign up for newsletters, Contact our customer service, Use our website, Engage with our social media, Participate in surveys or promotions

All data collection is conducted in accordance with applicable Spanish and EU data protection laws, ensuring transparency and user consent where required.

Data Processing and Storage

At GrowHighClub, we implement comprehensive security measures to protect your personal data through advanced encryption protocols and secure data centers. All your information is stored within the European Union in compliance with GDPR and Spanish data protection laws.

We retain your personal information for specific periods as required by law: active accounts remain active until closure, order information is kept for 5 years as per Spanish regulations, and inactive accounts are maintained for 2 years from the last activity. Payment data is retained according to financial regulations.

Your data is processed for essential business operations including order fulfillment, payment processing, customer service, account management, and website functionality. We may engage trusted third-party processors who are bound by strict data protection agreements and must comply with EU data protection standards.

All data processing activities are protected by multiple security layers, including firewalls, intrusion detection systems, and regular security audits. International data transfers, if any, occur only within the EU/EEA or to countries with adequate data protection levels approved by the EU Commission.

We maintain regular backups and disaster recovery protocols to ensure data availability, while implementing strict access controls and regular staff training on data protection procedures. Our security measures are regularly updated to address emerging threats and maintain the highest standards of data protection.

Your Rights

As a customer of GrowHighClub, and in accordance with Spanish and European Union data protection laws, you have comprehensive rights regarding your personal data.

You have the right to access all personal data we hold about you and can request a complete copy at any time. If you find any information is incorrect or incomplete, you can request immediate corrections or updates to ensure accuracy.

You maintain the right to withdraw your consent and request the deletion of your personal data from our systems. This "right to be forgotten" applies to all data except information we are legally required to maintain for tax, legal, or regulatory purposes.

You can restrict or object to certain types of data processing at any time. This includes the right to opt out of marketing communications or modify your preferences regarding how we use your data.

Data portability is your right - you can request your data in a structured, commonly used format and have it transferred to another service provider. We will fulfill such requests within 30 days.

You may also: Request information about how your data is being used, Object to automated decision-making processes, Lodge a complaint with the Spanish Data Protection Authority (AEPD), Modify your cookie preferences at any time, Update your marketing preferences or unsubscribe from communications

To exercise any of these rights, simply contact us at contact@growhighclub.com. We will respond to your request within 30 days and will not charge any fee for processing standard data rights requests.

These rights are protected under the General Data Protection Regulation (GDPR) and Spanish data protection laws (LOPD), and we are committed to facilitating their exercise in a transparent and straightforward manner.

Data Sharing

GrowHighClub shares your personal data only when necessary for business operations and with your consent. We carefully select our partners and service providers, ensuring they maintain the same high standards of data protection as we do.

We share data with the following categories of partners:

Essential Service Providers: Payment processors for secure transaction handling, Shipping and delivery companies for order fulfillment, Customer service platforms to assist with inquiries, Website hosting and maintenance providers

Legal and Regulatory: We may share information when required by: Spanish law enforcement authorities, Tax authorities, Regulatory bodies, Court orders or legal proceedings

We never sell, rent, or trade your personal information to third parties for marketing purposes. All data sharing is conducted under strict contractual agreements that ensure: Data security and confidentiality, Processing only for specified purposes, Compliance with data protection regulations, Immediate data deletion when no longer needed

Our partners are primarily located within the European Union, ensuring your data remains protected under EU data protection laws. If data must be transferred outside the EU, we ensure appropriate safeguards are in place through standard contractual clauses and data protection agreements.

We maintain detailed records of all data sharing activities and regularly audit our partners' compliance with our data protection requirements. You have the right to request information about specific third parties that may have access to your data.

Cookie Usage

GrowHighClub uses cookies and similar technologies to enhance your browsing experience on our website. These small text files help us understand how visitors use our site and enable essential features.

Types of Cookies We Use:

Essential Cookies: These cookies are necessary for the website to function properly. They enable basic functions like page navigation, shopping cart functionality, and secure checkout processes. You cannot opt out of these cookies, as they are required for our services to work.

Functionality Cookies: These cookies remember your preferences, such as language selection, and login details, making your future visits more convenient.

We retain cookie data for a maximum period of 12 months, after which it is automatically deleted. All cookie data is processed in accordance with Spanish and EU data protection regulations.

Communication

GrowHighClub values transparent and effective communication with our customers. We maintain clear and professional communication channels to ensure you receive all necessary information about your orders, account, and our services.

We will always send you essential communications regarding your orders, including confirmations, shipping updates, payment receipts, and important account security notifications. These essential messages also include any critical updates about our terms of service or privacy policies, as well as responses to your customer service inquiries.

For marketing purposes, and only with your explicit consent, we may send you information about new products, special offers, promotions, newsletters, and event invitations. We believe in keeping you informed about opportunities that might interest you, but we respect your right to control these communications.

You can easily manage your communication preferences at any time through your account dashboard or by contacting our customer service team. Every marketing email includes an unsubscribe link, and we process opt-out requests within 48 hours.

Our primary communication channel is email, though we may also reach you through SMS for delivery updates, WhatsApp, and our social media platforms. If you've enabled push notifications, we may use these to keep you informed about important updates.

All our communications strictly comply with Spanish and EU electronic communication regulations. We maintain records of our communications to improve our service quality and ensure legal compliance, with all records protected under our robust data protection protocols.

You have complete control over your communication preferences, and we respect your choices about how and when you want to hear from us. Our goal is to provide relevant, timely, and valuable information while respecting your privacy and preferences.

Updates to Privacy Policy

GrowHighClub reserves the right to modify this privacy policy to reflect changes in our practices, technology, legal requirements, and business operations. We understand the importance of keeping you informed about how we handle your personal data.

When we make significant changes to this policy, we will notify you through email on our website. For minor updates, we may simply post the revised policy on our website with an updated effective date.

We encourage you to review our privacy policy periodically to stay informed about how we protect your personal information. The date at the bottom of the policy indicates when it was last updated. By continuing to use our services after policy changes take effect, you agree to be bound by the revised policy.

If you disagree with any changes to this policy, you may close your account and discontinue using our services. However, we will still maintain your data according to our legal obligations and data retention policies.

All updates to this policy comply with current Spanish and European Union data protection laws, including GDPR and LOPD requirements. Historical versions of our privacy policy are archived and available upon request for your reference.

This privacy policy was last updated on February 16, 2024. The current version supersedes all previous versions.

Contact Information

If you have any questions, concerns, or requests regarding your personal data or this privacy policy, we encourage you to contact GrowHighClub. Our dedicated data protection team is ready to assist you with any privacy-related matters.

You can reach us through our email: contact@growhighclub.com, we aim to respond to all privacy-related inquiries within 24 hours during business days.

For urgent privacy matters or to exercise your data protection rights, please mark your communication as "Privacy Request" to ensure priority handling.

You also have the right to file a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos - AEPD) if you believe your data protection rights have been violated.

We are committed to addressing your privacy concerns promptly and transparently, ensuring your rights under Spanish and EU data protection laws are fully respected.