Last Updated: September 11, 2025 Grow Business ("we," "our," "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you use our Amazon PPC management services and website (amazon.grow-business.co.uk and amazongrow.framer.website). 1. Information We Collect 1.1 Personal Information We may collect the following personal information: Contact Information: Name, email address, phone number, business address Business Information: Company name, VAT number, business registration details Account Information: Amazon Seller/Vendor Central login credentials and account data Financial Information: Billing address, payment information, invoicing details Communication Records: Emails, phone call records, meeting notes, and other correspondence 1.2 Amazon Account Data With your authorization, we access and process: Campaign Performance Data: Ad spend, impressions, clicks, conversions, sales data Product Information: ASIN details, inventory levels, pricing, product descriptions Account Metrics: ACoS, ROAS, search term reports, keyword performance Listing Data: Product titles, descriptions, images, A+ content, storefront information 1.3 Technical Information We automatically collect: Website Usage Data: IP address, browser type, device information, pages visited Cookies and Tracking: Session data, preferences, analytics information Log Files: Access times, referring URLs, system configuration 1.4 Third-Party Data We may receive information from: Amazon: Performance data, account notifications, policy updates Analytics Tools: Website traffic data, user behavior insights Business Partners: Referral information, collaborative project data 2. How We Use Your Information 2.1 Service Delivery Manage and optimize your Amazon PPC campaigns Create and implement advertising strategies Monitor campaign performance and generate reports Provide account audits and optimization recommendations Develop A+ content and Amazon Storefront assets 2.2 Account Management Set up and maintain your service account Process payments and manage billing Provide customer support and respond to inquiries Send service-related communications and updates 2.3 Business Operations Analyze service performance and improve our offerings Conduct research and development for better strategies Maintain security and prevent fraud Comply with legal obligations and regulatory requirements 2.4 Marketing Communications Send newsletters and service updates (with your consent) Provide information about new services or features Share industry insights and best practices Conduct customer satisfaction surveys 3. Legal Basis for Processing Under GDPR, we process your personal data based on: 3.1 Contract Performance Processing necessary to perform our services under our agreement with you. 3.2 Legitimate Interests Improving our services and customer experience Conducting business analytics and research Maintaining security and preventing fraud Direct marketing to existing customers 3.3 Legal Compliance Processing required to comply with legal obligations, such as tax reporting and record-keeping requirements. 3.4 Consent Where we have obtained your explicit consent for specific processing activities, such as marketing communications. 4. Data Sharing and Disclosure 4.1 Service Providers We may share your information with trusted third-party service providers who assist us in: Cloud hosting and data storage Analytics and performance tracking Payment processing and billing Communication tools and customer support Legal and professional services 4.2 Business Transfers In the event of a merger, acquisition, or sale of business assets, your information may be transferred as part of the transaction. 4.3 Legal Requirements We may disclose your information when required by law, court order, or to: Comply with legal processes Protect our rights and property Prevent fraud or illegal activities Ensure user safety 4.4 Amazon Platform We access and manage your Amazon account data solely within Amazon's platform as authorized by you. We do not share your Amazon data with unauthorized third parties. 5. Data Security 5.1 Technical Safeguards Encryption: Data encrypted in transit and at rest using industry-standard protocols Access Controls: Multi-factor authentication and role-based access restrictions Secure Infrastructure: SOC 2 compliant cloud hosting with regular security audits Network Security: Firewalls, intrusion detection, and monitoring systems 5.2 Organizational Measures Staff Training: Regular privacy and security training for all team members NDA Requirements: All employees and contractors sign non-disclosure agreements Data Minimization: We collect and retain only necessary information Regular Audits: Periodic security assessments and vulnerability testing 5.3 Incident Response We maintain an incident response plan to address any potential data breaches promptly and in accordance with regulatory requirements. 6. Data Retention 6.1 Retention Periods Active Client Data: Retained for the duration of our business relationship Campaign Data: Maintained for up to 3 years after service termination for optimization insights Financial Records: Kept for 7 years as required by UK tax law Communication Records: Retained for 2 years after last contact Website Analytics: Aggregated data retained indefinitely; individual data deleted after 26 months 6.2 Deletion Process We securely delete personal data when retention is no longer necessary, using industry-standard deletion methods to ensure data cannot be recovered. 7. International Data Transfers 7.1 Transfer Safeguards When transferring data outside the UK/EEA, we ensure adequate protection through: Adequacy Decisions: Transfers to countries with adequate data protection laws Standard Contractual Clauses: EU-approved contract terms with service providers Certification Schemes: Partners certified under recognized privacy frameworks 7.2 Amazon Data Processing Amazon processes your data globally in accordance with their privacy policy and data processing agreements. We access this data only as necessary for service delivery. 8. Your Rights Under GDPR and UK data protection law, you have the following rights: 8.1 Access Right Request a copy of the personal data we hold about you, including how we use it. 8.2 Rectification Right Request correction of inaccurate or incomplete personal data. 8.3 Erasure Right Request deletion of your personal data in certain circumstances. 8.4 Restriction Right Request limitation of how we process your personal data. 8.5 Portability Right Request transfer of your data to another service provider in a structured format. 8.6 Objection Right Object to processing based on legitimate interests or for direct marketing. 8.7 Consent Withdrawal Withdraw consent for processing where consent is the legal basis. 8.8 Automated Decision Making We do not make solely automated decisions that significantly affect you without human involvement. 9. Exercising Your Rights 9.1 How to Make Requests Contact us using the details in Section 13 to exercise any of your rights. We may require identity verification to protect your privacy. 9.2 Response Timeframes We will respond to your requests within one month, or inform you if we need additional time (up to two additional months for complex requests). 9.3 No Fee We do not charge fees for exercising your rights unless requests are manifestly unfounded or excessive. 10. Cookies and Tracking 10.1 Cookie Types Our website uses: Essential Cookies: Required for website functionality Analytics Cookies: Google Analytics to understand website usage Performance Cookies: Tools to improve website performance Marketing Cookies: Track advertising effectiveness (with consent) 10.2 Cookie Management You can control cookies through your browser settings. Disabling certain cookies may affect website functionality. 10.3 Third-Party Tracking We use Google Analytics and similar tools that may place cookies on your device. These tools have their own privacy policies governing data use. 11. Children's Privacy Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly. 12. Changes to This Policy 12.1 Policy Updates We may update this Privacy Policy to reflect changes in our practices, services, or legal requirements. 12.2 Notification Material changes will be communicated through: Email notification to active clients Prominent website notice Updated "Last Modified" date 12.3 Continued Use Continued use of our services after policy changes constitutes acceptance of the updated terms. 13. Contact Information and Complaints 13.1 Data Protection Officer For privacy-related questions or to exercise your rights, contact our Data Protection Officer: Email: [DPO email address]
Address: [Your business address]
Phone: [Contact number] 13.2 Supervisory Authority You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ICO Helpline: 0303 123 1113
Website: www.ico.org.uk
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF 13.3 Response Commitment We take all privacy concerns seriously and will investigate and respond to complaints promptly and thoroughly.

This Privacy Policy demonstrates our commitment to protecting your personal data and maintaining transparency about our data practices. If you have any questions or concerns, please don't hesitate to contact us.

By using our services, you acknowledge that you have read, understood, and agree to be bound by these Terms and Conditions.