Privacy Policy

1. About First Grow

For questions, requests, or concerns regarding your personal data, you may contact us using the email address above.

2. Scope of This Policy

This Privacy Policy applies to personal data collected or processed by First Grow through:

• Our website and related web pages;
• Client enquiry and onboarding processes;
• Consultation and strategy calls;
• Email and messaging communications;
• Social media and digital marketing engagements;
• Service agreements and project communications; and
• Billing and invoicing activities.

This Policy does not apply to third-party websites, applications, platforms, or services that you may access through links on our website. Those services are governed by their own privacy policies.

3. Personal Data We Collect

We collect only the personal data reasonably necessary for our business and service purposes.

A. Contact and Identification Information

Depending on your interaction with us, this may include:

• Full name;
• Email address;
• Telephone or WhatsApp number;
• Job title or professional role, where relevant; and
• Other contact information that you voluntarily provide.

B. Business and Brand Information

When you enquire about or use our services, we may collect:

• Company or brand name;
• Website URL;
• Social media profile links;
• Industry or business category;
• Marketing and content objectives;
• Brand information and preferences;
• Target audience information; and
• Other information necessary to provide our services.

C. Consultation and Communication Information

We may process information contained in:

• Discovery and consultation call notes;
• Strategy discussions;
• Emails;
• WhatsApp or other business communications;
• Project briefs;
• Client feedback and approvals;
• Meeting schedules and bookings; and
• Other communications relating to our services.

We do not intentionally record calls unless this is specifically communicated to you and, where required, appropriate consent is obtained.

D. Technical and Website Information

When you visit our website, certain technical information may be collected automatically, including:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Referring website or URL;
• Pages visited;
• Approximate session duration; and
• Other technical information generated through normal website operation.

E. Billing and Payment Information

For invoicing and accounting purposes, we may collect:

• Billing name and address;
• GSTIN, where applicable;
• Invoice details;
• Payment status; and
• Payment transaction or reference information.

We do not intentionally store complete credit card, debit card, banking passwords, or other payment authentication information on our own servers. Payments may be processed through third-party payment service providers, whose own terms and privacy policies may also apply.

4. How We Use Personal Data

We use personal data only for legitimate and specified purposes, including:

• Responding to enquiries and service requests;
• Providing and managing our digital marketing and creative services;
• Preparing strategies, proposals, quotations, and project plans;
• Communicating with clients about projects and deliverables;
• Scheduling consultations and meetings;
• Managing approvals, feedback, and project communications;
• Providing reports and performance updates;
• Processing invoices and maintaining business records;
• Complying with applicable legal, accounting, tax, and regulatory requirements;
• Protecting our website, systems, clients, and business against fraud, abuse, and security threats; and
• Performing other purposes that are reasonably connected with the services you have requested or otherwise permitted by applicable law.

We will not use personal data for purposes that are unrelated to the purpose for which it was collected unless permitted by applicable law or you have provided the required consent.

5. Consent and Processing of Personal Data

Where consent is required under applicable law, we will seek consent before processing personal data for the relevant purpose.

Where processing is permitted on another lawful basis under applicable law, we may process personal data without obtaining separate consent where legally permitted.

Where processing is based on consent, you may withdraw that consent by contacting us at:

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. It may also affect our ability to provide certain services where the relevant data is necessary for those services.

6. Your Privacy Rights

Subject to applicable law and any relevant conditions or exceptions, you may have rights regarding your personal data, including:

• Right to Access: You may request information about the personal data we process about you and relevant processing activities.
• Right to Correction: You may request correction or updating of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where permitted under applicable law. We may retain certain information where retention is necessary to comply with legal, tax, accounting, security, dispute-resolution, or other lawful obligations.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent.
• Right to Grievance Redressal: You may contact us if you have a concern or complaint regarding our handling of your personal data.

We may request reasonable information to verify your identity before processing a privacy request.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

• Enable essential website functionality;
• Improve website performance;
• Understand website traffic and usage;
• Remember certain preferences; and
• Measure the effectiveness of our marketing activities, where applicable.

Depending on the technologies implemented on our website, these may include essential cookies, analytics tools, advertising or conversion-tracking technologies.

You may manage or disable cookies through your browser settings. However, disabling certain essential cookies may affect the functionality or performance of parts of our website.

Where applicable law requires consent for non-essential cookies or tracking technologies, we will provide an appropriate mechanism to obtain and manage that consent.

8. Third-Party Service Providers

We may use trusted third-party service providers to operate our business and deliver our services.

These may include providers for:

• Website hosting and cloud infrastructure;
• Email and business communication;
• Scheduling and appointment management;
• Payment processing;
• Analytics and website performance;
• Advertising and marketing platforms;
• File storage and collaboration; and
• Business administration and accounting.

Examples may include services such as Google Workspace, Calendly, WhatsApp Business, cloud hosting providers, and payment processors, depending on the services we use at a particular time.

These providers may process personal data on our behalf or independently according to their own terms and privacy policies. We take reasonable steps to use reputable providers and to limit the information shared to what is reasonably necessary for the relevant purpose.

9. Disclosure of Personal Data

We do not sell, rent, or trade your personal data for monetary consideration.

We may disclose or share personal data where reasonably necessary:

• With service providers assisting us in operating our business;
• With contractors or professionals working on a project, where necessary;
• With payment, accounting, or financial service providers;
• To comply with applicable laws, regulations, court orders, or lawful government requests;
• To protect our rights, property, systems, clients, or users;
• To detect, investigate, or prevent fraud, security incidents, or unlawful activity; or
• In connection with a business transfer, merger, restructuring, or similar transaction, subject to applicable law.

We aim to ensure that third parties receive only the information reasonably necessary for the relevant purpose.

10. International Data Processing

Some third-party service providers used by First Grow may operate or process data from locations outside India.

Where personal data is transferred or processed outside India, we will do so in accordance with applicable Indian law and any restrictions or requirements imposed by the Government of India from time to time.

11. Data Security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, misuse, alteration, loss, disclosure, or destruction.

Depending on the nature of the information and our systems, these measures may include:

• SSL/TLS encryption for website communications;
• Access controls;
• Password and account security measures;
• Role-based access where appropriate;
• Secure cloud and hosting services;
• Security monitoring and maintenance; and
• Reasonable measures to prevent unauthorised access to systems and information.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

12. Data Retention

We retain personal data only for as long as reasonably necessary to:

• Provide our services;
• Maintain business and client records;
• Complete financial and accounting requirements;
• Comply with applicable legal and regulatory obligations;
• Resolve disputes;
• Prevent fraud or misuse; or
• Protect our legitimate business interests.

When personal data is no longer required for these purposes, we will take reasonable steps to delete, destroy, or anonymise it, subject to applicable legal and operational requirements.

13. Data Breaches and Security Incidents

If a personal data breach occurs that is subject to notification requirements under applicable law, First Grow will take appropriate steps to investigate, contain, and address the incident and provide notifications to affected individuals or authorities where required by applicable law.

14. Children's Personal Data

Our website and services are primarily intended for businesses, professionals, entrepreneurs, and organisations.

We do not knowingly solicit personal data from children for independent use of our business services.

If we become aware that personal data has been collected from a child in circumstances where applicable law requires additional safeguards or consent, we will take appropriate steps in accordance with applicable law.

15. Third-Party Links

Our website may contain links to third-party websites, social media platforms, payment services, or other external services.

First Grow does not control the privacy practices of these third parties. We recommend reviewing their respective privacy policies before providing personal data through their platforms.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our services or business practices;
• Changes in technology;
• Changes to applicable privacy or data protection laws; or
• Regulatory or operational requirements.

When we make changes, we will update the "Last Updated" date at the top of this Policy.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

17. Contact and Grievance Redressal

If you have any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, please contact us:

We will make reasonable efforts to acknowledge and address privacy requests and grievances within the time period required by applicable law.

18. Applicable Law

This Privacy Policy is governed by the laws applicable in India.

Any rights, obligations, procedures, or remedies under this Policy are subject to applicable Indian law, including the Digital Personal Data Protection Act, 2023 and rules made under it, to the extent applicable to First Grow and the relevant processing activity.