Privacy policy
Last updated: October 8, 2026
We are Grow Vertical, a.s., Company Identification No.: 246 00 008, with our registered office at U Splavu 1419, 684 01 Slavkov u Brna, Czech Republic, registered in the Commercial Register maintained by the Regional Court in Brno, Section B, File 9211 (hereinafter referred to as “we,” “us,” “our,” or “Grow Vertical”).
We are the controller of your personal data and are responsible for its processing.
This Privacy Policy (hereinafter referred to as the “Policy”) has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as the “GDPR”) and describes how we collect, use, process, store, disclose, and protect your personal data.
You can contact us using the following details:
Email: info@grow-vertical.com, admin@grow-vertical.cz
Phone: +420 721 011 865
Address: U Splavu 1419, 684 01 Slavkov u Brna, Czech Republic
Grow Vertical operates this website and its associated services, including information, content, features, tools, products, and other services, to provide visitors and customers with a convenient and personalized experience (hereinafter referred to as the “Services”).
Our website is built and hosted using Framer, a website design and hosting platform operated by Framer B.V. We may also use third-party services and integrations to support website functionality, customer communications, order processing, payments, marketing, and other business activities.
This Privacy Policy explains how we collect, use, and disclose your personal data when you visit or interact with our website, use our Services, make a purchase or other transaction, submit an inquiry, or otherwise communicate with us.
If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing, and disclosure of your personal data.
Please read this Privacy Policy carefully. By accessing or using our website and Services, you acknowledge that you have been informed about the collection, use, and disclosure of your personal data as described in this Policy. Where consent is required by law, we will request it separately.
Personal Data We Collect or Process
When we use the term “personal data,” we mean any information relating to an identified or identifiable natural person within the meaning of Article 4 of the GDPR.
Personal data does not include information that has been irreversibly anonymized so that it can no longer be linked to an identifiable individual.
Depending on how you interact with our website and Services, where you live, and what applicable law permits or requires, we may collect or process the following categories of personal data:
Identification and address details: Information that enables us to identify you, enter into a purchase agreement or another agreement of a similar nature (hereinafter referred to as the “Agreement”), and provide our Services and products. Examples include your first name, surname, delivery address, billing address, contact address, pickup-point address, registered business address, and company identification number.
Contact details: Information such as your email address, telephone number, and other contact information you provide to us.
Financial and payment information: Information necessary to process payments and transactions, including billing details, payment methods, payment confirmations, transaction records, and other relevant financial information. Payment card information may be processed by third-party payment service providers.
Account information: Where customer accounts are available, this may include your username, login credentials, account preferences, settings, and other account-related information.
Transaction information: Information about products you view, add to a shopping cart or wish list, purchase, return, exchange, or cancel, including your previous transactions and order history.
Communications with us: Information you provide when contacting us through email, website forms, social media, customer support, or other communication channels.
Device and technical information: Information about the device, browser, operating system, network connection, IP address, and other technical identifiers associated with your use of our website, where such information is collected.
Website usage information: Information about how visitors access and interact with our website, including page visits, navigation patterns, referral sources, and other website performance information.
The specific categories of personal data processed depend on the Services and features you use.
Sources of Personal Data
We may collect personal data from the following sources:
Directly from you: When you contact us, submit a form, create an account, make a purchase, subscribe to communications, or otherwise provide your personal data.
Automatically through our website: Through website functionality, technical logs, analytics tools, cookies, and similar technologies, where applicable.
From our service providers: When third-party providers process information on our behalf to support website hosting, order processing, payments, marketing, customer support, or other operations.
From our business partners and other third parties: Where necessary to provide our Services or carry out legitimate business activities.
From publicly available sources: Such as public registers, public business directories, and professional social networks.
Purposes, Legal Bases, and Retention Periods for Processing Personal Data
For the purposes of this Policy, a processing purpose means any activity carried out in connection with operating our website, providing Services, selling products, communicating with customers, fulfilling contractual obligations, complying with legal requirements, or conducting other legitimate business activities.
We process your personal data only where a valid legal basis exists under the GDPR.
The legal bases for processing include:
Consent: We process your personal data where you have provided valid consent. Where consent is the legal basis, processing continues for as long as the consent remains valid or until it is withdrawn, unless another lawful basis applies.
Performance of an Agreement: We process personal data where necessary to enter into or perform an Agreement with you.
Compliance with legal obligations: We process personal data where necessary to comply with applicable legal requirements.
Legitimate interests: We process personal data where necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.
The specific purposes and legal bases for processing are described below.
How We Use Your Personal Data
Depending on how you interact with our website and Services, we may use your personal data for the following purposes.
Entering into Agreements, Providing Services, and Selling Products
We use your personal data to provide our Services, sell products, and fulfill our contractual obligations.
This may include:
Processing purchases and orders.
Processing payments and issuing invoices.
Arranging shipping and delivery.
Managing product returns, exchanges, and cancellations.
Communicating about orders and transactions.
Maintaining transaction records.
Remembering preferences and items of interest, where applicable.
You are not legally required to provide personal data for this purpose. However, without certain information, we may be unable to process your order, deliver products, or enter into an Agreement with you.
You may enter into an Agreement with us directly through our website or through third-party marketplaces or e-commerce services, where such options are available.
For example, we may offer our products through third-party platforms such as Allegro (www.allegro.cz) or Kaufland Marketplace (www.kaufland.cz).
In these cases, we may receive personal data from the relevant third-party platform and may share the information necessary to process and fulfill your transaction.
Legal basis: Performance of an Agreement.
Retention period: For the duration of the Agreement and, where applicable, for any additional period required by law or necessary to protect our legal rights.
Marketing and Advertising
We may use your personal data for marketing and promotional purposes.
This may include:
Sending newsletters and promotional emails.
Sending marketing communications by text message or post.
Informing you about new products, services, and special offers.
Displaying advertisements on our website or third-party platforms.
Measuring the effectiveness of marketing activities.
Personalizing communications based on previous purchases or interactions, where permitted by law.
Providing personal data for marketing purposes is generally voluntary and is not a statutory or contractual requirement.
The legal basis for processing personal data for marketing is your consent or, where permitted by law, our legitimate interest, such as when communicating with existing customers about similar products or services.
You may withdraw your consent at any time. You may also object to marketing based on our legitimate interest.
If you inform us that you no longer wish to receive marketing communications, we will stop sending them without undue delay.
You may unsubscribe using the link in a marketing email or by contacting us using the details provided above.
Where marketing activities involve non-essential cookies or similar tracking technologies, we will request your consent where required by applicable law.
Customer Account Management
Where customer account functionality is available, you may register and create a customer account.
For this purpose, we may process information such as your first name, surname, email address, contact address, telephone number, and account credentials.
This information helps us manage your account and simplify the ordering process.
Where account registration is based on your consent, providing personal data is voluntary. Without the necessary information, we may be unable to create or maintain your account.
You may request the deletion of your account at any time, subject to any legal obligations requiring us to retain certain information.
To request account deletion, please contact us using the details provided above.
Assessing Customer Satisfaction
We may process personal data to assess customer satisfaction with our products and Services.
This may include sending customer satisfaction surveys or review requests through third-party services, such as the Verified by Customers program operated by Heureka (heureka.cz), or similar programs operated by Favi (favi.cz).
For these purposes, we may share limited information with the relevant service provider, particularly your email address and details of the products purchased.
Such processing may be based on our legitimate interest in improving customer satisfaction and service quality, taking into account Section 7(3) of Act No. 480/2004 Coll., where applicable.
You may object to receiving such communications at any time, including by using the unsubscribe link provided in the relevant email.
Security and Fraud Prevention
We may process personal data to protect our website, Services, customers, and business operations.
This includes:
Verifying user accounts.
Protecting transactions and payments.
Detecting and preventing fraudulent activities.
Investigating potentially illegal, unsafe, or harmful activities.
Preventing unauthorized access.
Maintaining the security and integrity of our website and Services.
Protecting public safety where applicable.
If you register an account, you are responsible for maintaining the confidentiality of your login credentials.
We strongly recommend that you do not disclose your username, password, or other account access information to third parties.
Processing for security and fraud prevention purposes is generally based on our legitimate interest in protecting our Services and users.
You may object to processing based on legitimate interests, subject to applicable legal requirements.
Communicating With You
We process personal data to communicate with customers, website visitors, and business partners.
This may include:
Responding to inquiries submitted through website contact forms.
Responding to emails and messages.
Providing customer support.
Addressing complaints and requests.
Maintaining business relationships.
Providing information about products or Services.
Where you submit information through a contact form on our Framer website, the information may be processed using Framer's form functionality and transferred to the email service, webhook, or third-party service configured to receive the submission.
If you communicate with us through social media platforms, the processing of information may also be governed by the privacy policies and terms of those platforms, which we do not control.
The legal basis for processing personal data for communication purposes is our legitimate interest, your consent, or the performance of an Agreement, depending on the circumstances.
Providing personal data for general inquiries is voluntary. However, certain information may be necessary for us to respond effectively.
Legal Matters
We may process personal data where necessary to comply with applicable laws, respond to lawful requests from authorities, or participate in legal proceedings.
This may include:
Responding to requests from law enforcement or government authorities.
Complying with court orders and other legal obligations.
Investigating potential legal violations.
Managing legal disputes and claims.
Enforcing applicable contractual terms and policies.
The legal basis for such processing is compliance with a legal obligation or, where applicable, our legitimate interest in protecting our legal rights.
We retain personal data for these purposes only for as long as necessary under applicable law.
Compliance With Legal Obligations
We process certain personal data to comply with statutory obligations, particularly those relating to accounting, taxation, and business recordkeeping.
The legal basis for this processing is compliance with legal obligations.
Where processing is legally required, we must retain the relevant information for the applicable statutory period.
Protecting Our Rights
Following the termination of a contractual relationship, we may retain certain personal data for a reasonable period corresponding to applicable limitation periods.
This processing is carried out to protect our rights, property, and legitimate interests, or the rights, property, and safety of others.
The legal basis for this processing is our legitimate interest.
You may object to processing based on legitimate interests in accordance with applicable law.
Website Analytics and Service Improvement
We may process website usage information to understand how visitors interact with our website, evaluate its performance, and improve our Services.
Our website is built and hosted using Framer, which provides built-in website analytics functionality.
Framer's built-in analytics are designed to measure website activity without using tracking cookies or persistent identifiers. According to Framer, its analytics do not collect or store information that identifies individual visitors.
These analytics may include aggregated information such as:
Website visits and page views.
Popular pages and content.
Traffic sources.
General website performance.
Anonymous visitor statistics.
We may also use other analytics or performance-monitoring services where necessary.
Where such services process personal data, the processing will be based on an appropriate legal basis, such as our legitimate interest or your consent.
If third-party analytics or tracking tools require non-essential cookies or similar technologies, we will request consent where required by law.
You may object to processing based on legitimate interests and may manage consent for non-essential tracking technologies where applicable.
Cookies and Similar Technologies
Our website may use cookies and similar technologies to support website functionality, improve performance, and provide additional features.
Cookies are small data files that may be stored on your device when you visit a website.
Cookies may be categorized as follows:
Essential cookies: Technologies necessary for the technical operation, security, and basic functionality of the website.
Analytics cookies: Technologies used to measure website traffic, visitor interactions, and website performance.
Marketing cookies: Technologies used to support advertising, campaign measurement, and personalized marketing.
Functional cookies: Technologies used to remember preferences or enable additional website features.
Framer's built-in analytics do not use cookies or persistent visitor identifiers and therefore do not, on their own, require cookie consent.
However, additional third-party services integrated into our website may use cookies or similar technologies.
Where non-essential cookies or tracking technologies are used, we will request your consent before activating them, as required by applicable law.
You may manage cookie preferences through the consent controls provided on our website, where applicable, or through your browser settings.
Disabling certain cookies may affect the availability or functionality of some website features.
How We Disclose Your Personal Data to Third Parties
Under certain circumstances, we may disclose personal data to third parties for legitimate purposes in accordance with this Privacy Policy and applicable law.
These circumstances may include:
Website hosting and infrastructure providers: Including Framer, which provides the platform used to design, host, and operate our website.
Technical service providers: Including providers of IT administration, hosting infrastructure, website maintenance, security, cloud storage, and related technical services.
Payment and e-commerce providers: Where necessary to process purchases, payments, refunds, and other transactions.
Shipping and fulfillment partners: Where necessary to arrange delivery, returns, exchanges, or other logistics services.
Customer communication providers: Including email services, contact form integrations, customer support platforms, and other communication tools.
Marketing and advertising partners: Where necessary to provide marketing services, advertising, and campaign measurement in accordance with applicable law.
Business partners and affiliates: Where necessary for legitimate business operations or within our corporate group.
Public authorities and legal representatives: Where required to comply with applicable laws, lawful requests, or legal proceedings.
Parties involved in corporate transactions: Such as a merger, acquisition, reorganization, or insolvency proceeding, where disclosure is legally permitted or required.
Where third parties process personal data on our behalf, we seek to ensure that appropriate contractual and data protection safeguards are in place.
Third parties acting as independent data controllers may process personal data in accordance with their own privacy policies and applicable legal obligations.
Relationship With Framer
Our website is built and hosted using Framer, a website design and hosting platform provided by Framer B.V., based in the Netherlands.
Framer provides technical infrastructure and functionality that enable us to publish, operate, and maintain our website.
In providing these services, Framer may process certain technical information and personal data on our behalf, including data necessary for website operation, security, hosting, and form functionality.
Where Framer processes personal data on our behalf, Grow Vertical acts as the data controller and Framer acts as the data processor, subject to applicable contractual data protection arrangements.
Framer may use infrastructure providers and other authorized subprocessors as necessary to provide its services.
Depending on the configuration of our website, information submitted through forms may be transferred to external email services or integrations selected by us.
Framer also provides built-in website analytics designed to measure website performance using anonymized information rather than persistent tracking cookies.
We remain responsible for determining the purposes and legal bases of processing personal data collected through our website.
To learn more about Framer's handling of personal data, you can review:
Framer Privacy Statement:
https://www.framer.com/legal/privacy-statement
Framer Data Processing Addendum:
https://www.framer.com/legal/data-processing-addendum
Third-Party Websites and Links
Our website and Services may contain links to websites or online platforms operated by third parties.
If you follow links to websites that are not affiliated with or controlled by us, we recommend reviewing their privacy policies, security practices, and terms of use.
We do not guarantee and are not responsible for the privacy or security of such third-party websites, including the accuracy, completeness, or reliability of information available on them.
Information you provide in public or semi-public spaces, including third-party social media platforms, may be accessible to other users of those platforms.
The inclusion of links to third-party websites does not necessarily imply our endorsement of their content, owners, or operators.
Methods of Processing Your Personal Data
Personal data may be processed both manually and through automated systems.
We maintain appropriate records of processing activities in accordance with applicable data protection laws.
Where external service providers process personal data on our behalf, we seek to ensure that appropriate technical, organizational, and contractual safeguards are implemented.
Children's Data
Our website and Services are not intended for use by children, and we do not knowingly collect personal data from individuals below the applicable age of majority without an appropriate legal basis.
If you are a parent or legal guardian of a child who has provided us with personal data, you may contact us using the contact details provided above to request its deletion.
As of the effective date of this Privacy Policy, we have no actual knowledge that we “share” or “sell,” as those terms may be defined under applicable law, the personal data of individuals under 16 years of age.
Security and Retention of Your Data
We take reasonable technical and organizational measures to protect personal data against unauthorized access, misuse, loss, alteration, or disclosure.
However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
We recommend that you avoid transmitting sensitive or confidential information through unsecured communication channels.
The period for which we retain personal data depends on several factors, including:
Whether the data is necessary to maintain a customer account.
Whether it is needed to provide our Services.
Whether it is necessary to fulfill an Agreement.
Whether applicable laws require us to retain the information.
Whether the information is required to resolve disputes.
Whether retention is necessary to establish, exercise, or defend legal claims.
When personal data is no longer required for the purposes for which it was collected, and no legal obligation or other lawful basis requires further retention, we will delete or anonymize it as appropriate.
Your Rights and Choices
Depending on applicable law and your circumstances, you may have some or all of the following rights regarding your personal data.
These rights are not absolute and may be subject to legal conditions or exceptions.
Right of Access and Information
You have the right to obtain confirmation as to whether we process your personal data.
Where personal data is being processed, you may request access to that data and information about its processing.
Where permitted by applicable law, we may charge a reasonable fee for additional copies of personal data based on administrative costs.
Right to Erasure
You may have the right to request the deletion of personal data we hold about you.
This right is subject to the conditions and exceptions established by applicable law, particularly Article 17 of the GDPR.
We may be required to retain certain information where necessary to comply with legal obligations or protect legitimate legal interests.
Right to Rectification
You have the right to request the correction of inaccurate personal data we hold about you.
You may also request that incomplete personal data be completed.
We will make appropriate corrections or additions without undue delay, taking into account applicable legal requirements.
Right to Data Portability
Under certain circumstances and subject to applicable legal conditions, you may have the right to receive personal data you have provided to us in a structured, commonly used, and machine-readable format.
You may also have the right to request that such data be transmitted to another controller, where technically feasible.
Managing Communication Preferences
We may send you promotional communications in accordance with applicable law.
You may opt out of marketing emails at any time by using the unsubscribe link provided in our communications or by contacting us directly.
If you unsubscribe from marketing communications, we may still send non-promotional communications relating to your orders, account, legal notices, or other necessary service-related matters.
Right to Object to Processing
You may have the right to object to the processing of your personal data where processing is based on our legitimate interests.
You also have the right to object to the processing of your personal data for direct marketing purposes at any time.
Right to Restriction of Processing
Under certain circumstances, you may request that we restrict the processing of your personal data.
Such restrictions will be applied in accordance with the requirements of applicable law.
Withdrawal of Consent
Where processing is based on your consent, you have the right to withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Automated Decision-Making and Profiling
You are not subject to any decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.
Exercising Your Rights
You may exercise your rights by contacting us using the contact details provided at the beginning of this Privacy Policy.
We will not discriminate against you or subject you to adverse consequences for exercising your rights.
Before processing a request, we may need to verify your identity where permitted or required by applicable law.
Where permitted by law, you may appoint an authorized representative to submit requests on your behalf.
We may require evidence that the representative is authorized to act for you and may request additional identity verification.
We will respond to your requests within the time limits required by applicable law.
Complaints
If you have concerns or complaints regarding the way we process your personal data, please contact us using the details provided above.
Depending on where you live, you may have the right to challenge our response or lodge a complaint with the relevant data protection supervisory authority.
For the European Economic Area, you can find a list of responsible supervisory authorities here:
https://edpb.europa.eu/about-edpb/about-edpb/members
The supervisory authority directly responsible for our company, given the location of our registered office, is:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Address: Pplk. Sochova 27, 170 00 Prague 7, Czech Republic
Phone: +420 234 665 111
Complaints may also be submitted using the contact information available at:
https://uoou.gov.cz/kontakt/podatelna-a-elektronicka-podatelna
International Transfers
Please note that your personal data may be transferred, stored, or processed outside the country in which you reside.
This may occur when we use service providers, hosting infrastructure, or other technical services located in different jurisdictions.
Where personal data is transferred outside the European Economic Area or the United Kingdom, we rely on recognized legal transfer mechanisms in accordance with applicable data protection laws, including Articles 44 et seq. of the GDPR.
Such mechanisms may include adequacy decisions, the European Commission's Standard Contractual Clauses, or equivalent safeguards recognized by the relevant UK authorities.
We seek to ensure that appropriate safeguards are in place to protect personal data transferred internationally.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business operations, website functionality, services, data processing activities, or applicable legal and regulatory requirements.
When we update this Privacy Policy, we will publish the revised version on our website and update the “Last updated” date.
Where required by applicable law, we will provide additional notice of material changes.
We encourage you to review this Privacy Policy periodically to stay informed about how we process and protect your personal data.
