Privacy Policy
Effective Date: September 10, 2025
Address: Yrjönkatu 11, 00120 Helsinki, Finland
Our Commitment to Privacy
At GrowthLab, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect, and handle your personal information when you interact with our website and services. We are committed to transparency and compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
We believe you should have control over your personal information. This policy outlines your rights and how you can exercise them at any time.
Information We Collect
We collect information that you provide directly to us and information that is automatically collected when you use our website. The types of information we collect include:
Information You Provide
When you interact with our website, you may choose to provide us with personal information, including:
- Contact information such as name, email address, and phone number when you fill out forms
- Course preferences and professional background information
- Communication preferences and feedback
- Any other information you choose to share with us
Automatically Collected Information
When you visit our website, we automatically collect certain technical information, including:
- IP address and approximate geographic location
- Browser type, device information, and operating system
- Pages visited, time spent on pages, and navigation patterns
- Referring website or source that directed you to our site
- Cookie data and similar tracking technologies (see our Cookie Policy for details)
How We Use Your Information
We use the information we collect for legitimate business purposes that enhance your experience and help us improve our services. Specifically, we use your information to:
- Respond to your inquiries and provide information about our courses and services
- Process course enrollments and manage your participation in our programs
- Send you relevant communications about courses, updates, and educational content
- Analyze website usage to improve functionality and user experience
- Maintain security and prevent fraudulent activities
- Comply with legal obligations and enforce our terms
- Conduct research and analytics to enhance our educational offerings
Legal Basis for Processing
Under GDPR, we process your personal data based on one or more of the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract: Processing is necessary to fulfill a contract with you or take steps at your request before entering into a contract
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services
- Legal Obligation: Processing is necessary to comply with legal requirements
How We Share Your Information
We do not sell your personal information to third parties. We may share your information in the following limited circumstances:
- Service Providers: We work with trusted third-party service providers who assist us in operating our website, conducting business, or providing services to you. These providers are contractually obligated to protect your information and use it only for specified purposes.
- Analytics Partners: We use analytics services to understand how our website is used. These services may collect and process data according to their own privacy policies.
- Legal Requirements: We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights or the safety of others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:
- Encryption of data in transit using secure protocols
- Regular security assessments and updates to our systems
- Access controls limiting who can view your personal information
- Employee training on data protection and privacy practices
While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to using industry-standard practices to safeguard your data.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the purpose for which it was collected.
When your information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies and applicable legal requirements.
Your Privacy Rights
Under data protection laws, including GDPR, you have the following rights regarding your personal information:
Right to Access
You have the right to request a copy of the personal information we hold about you.
Right to Erasure
You have the right to request deletion of your personal information under certain circumstances.
Right to Object
You have the right to object to processing of your personal information for marketing purposes or based on legitimate interests.
Right to Data Portability
You have the right to receive your personal information in a structured, commonly used format and transmit it to another controller.
To exercise any of these rights, please contact us using the information provided on our contact page. We will respond to your request within one month, as required by GDPR.
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:
- Avoid filling out contact forms, account registrations, or any data-submitting features
- Disable cookies through your browser settings (see our Cookie Policy for more details)
- Contact us directly to request the deletion of any previously shared personal data
We respect your privacy choices. If you would like us to delete your data, please reach out to us through our contact page. We will process your request promptly and in accordance with applicable laws.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction. When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR and other applicable regulations.
We use standard contractual clauses approved by the European Commission and other appropriate mechanisms to ensure your data receives adequate protection regardless of where it is processed.
Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete the information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make significant changes, we will notify you by updating the effective date at the top of this policy.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.
Contact Us About Privacy
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your personal information, please contact us. We are committed to addressing your concerns and respecting your privacy rights.
Contact Us