Privacy Policy
This Privacy Policy explains how GrowthSpecialist B.V. ("we", "us", or "our") collects, uses, and protects your personal information when you visit our website or use our services.
Last updated: 15th January 2026
Data Controller Information
GrowthSpecialist B.V. is the data controller responsible for your personal data. Our contact details are:
- Company: GrowthSpecialist B.V.
- Registration Number: 62523252
- VAT Number: NL588664250B01
- Address: Kerkstraat 214, 3537 BC Utrecht, Netherlands
- Email: privacy@growthspecialist.pro
- Phone: +31 303087496
Data We Collect
We collect personal data that you voluntarily provide to us and certain information automatically when you visit our website. The data we collect includes:
Information You Provide
- Contact Information: Name, email address, phone number, and postal address
- Business Information: Company name, business stage, location, and project details
- Communication Data: Messages, enquiries, and consultation requests
- Service Preferences: Information about your medical spa planning needs and interests
Information Collected Automatically
- Technical Data: IP address, browser type, device information, and operating system
- Usage Data: Pages visited, time spent on site, and interaction patterns
- Cookie Data: Information collected through cookies and similar technologies
How We Use Your Information
We process your personal data for the following purposes based on legitimate legal grounds:
Service Provision
- Responding to your enquiries and consultation requests
- Providing medical spa consulting services and support
- Delivering requested information and resources
- Managing client relationships and project communications
Business Operations
- Processing payments and managing billing
- Maintaining accurate records and documentation
- Improving our services and website functionality
- Conducting business analysis and market research
Legal and Compliance
- Complying with legal obligations and regulatory requirements
- Protecting our rights and interests
- Preventing fraud and ensuring security
Cookies and Tracking Technologies
We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.
For detailed information about our use of cookies, please see our Cookie Policy.
Legal Basis for Processing
Under GDPR, we process your personal data based on the following legal grounds:
- Consent: Where you have given clear consent for specific processing activities
- Contract Performance: To fulfil our contractual obligations when providing services
- Legitimate Interests: For business operations, service improvement, and marketing communications
- Legal Obligation: To comply with applicable laws and regulations
Data Sharing and Disclosure
We may share your personal data with trusted third parties in the following circumstances:
- Service Providers: Trusted partners who assist with website hosting, analytics, and communication tools
- Professional Advisers: Lawyers, accountants, and other professional service providers
- Legal Requirements: When required by law, court order, or regulatory authority
- Business Transfers: In connection with mergers, acquisitions, or asset sales
We ensure all third parties maintain appropriate security measures and process your data only as instructed.
International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, including:
- European Commission adequacy decisions
- Standard Contractual Clauses
- Binding Corporate Rules
- Certification schemes and codes of conduct
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. Our data retention periods are:
- Client Data: 7 years after the end of our business relationship
- Marketing Data: Until you withdraw consent or 3 years of inactivity
- Website Analytics: 26 months from collection
- Communication Records: 3 years from last contact
Your Rights
Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:
Access and Portability
- Right of Access: Request a copy of the personal data we hold about you
- Right to Portability: Receive your data in a structured, machine-readable format
Correction and Deletion
- Right to Rectification: Correct inaccurate or incomplete personal data
- Right to Erasure: Request deletion of your personal data in certain circumstances
Processing Control
- Right to Restrict Processing: Limit how we use your personal data
- Right to Object: Object to processing based on legitimate interests or for marketing purposes
- Right to Withdraw Consent: Withdraw consent for specific processing activities
Supervisory Authority
You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data appropriately.
Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication procedures
- Staff training on data protection requirements
- Incident response and breach notification procedures
Children's Privacy
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.
Contact Information
If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out using the following details:
Privacy Officer: GrowthSpecialist B.V.
Email: privacy@growthspecialist.pro
Phone: +31 303087496
Post: Kerkstraat 214, 3537 BC Utrecht, Netherlands
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will notify you by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.