Who we are
This site is operated by Online Growth Private Limited, which trades as GrowthPanda. We provide digital marketing, AI and engineering services to businesses in the US, UK and Asia, with teams in Bangalore, London and Los Angeles.
This policy explains what information we collect through growthpanda.co, why we collect it, and what you can ask us to do with it.
Information we collect
When you submit a form on this site we collect the details you provide typically your name, work email, company, website, primary growth goal, a brief description of your challenge and, if you choose to share it, your phone number. We use this to respond to your enquiry and to deliver any audit or scan you requested.
We also collect standard analytics information about how the site is used, including pages viewed, referring source, approximate location, device and browser. This is used in aggregate to understand how the site performs.
Where you apply for a role with us, we collect your CV and the details in your application.
We may also receive information from advertising and analytics platforms, business data providers, and referrals from partners or clients.
We do not ask for sensitive information such as health, financial account or government identifier details through this site. Please do not send it through our forms.
How we use it
We rely on your consent for marketing, on the performance of our contract for client work, on our legitimate interest in running and improving the business for analytics and B2B outreach, and on legal obligation for tax and accounting records. Where we rely on consent, you can withdraw it at any time.
We do not sell your personal information, and we do not share it with third parties for their own marketing.
Cookies and analytics
This site uses cookies for four purposes: delivering the page and keeping it secure, remembering preferences such as light or dark mode, measuring how the site is used, and measuring conversions from our advertising campaigns.
Necessary cookies cannot be switched off. Where the law requires it, we ask for your consent before setting analytics or advertising cookies, and you can change that choice at any time through the cookie banner or your browser settings. Core pages will still work if you refuse them.
Service providers
We use third-party tools to run our business, including hosting, CRM, email, analytics, advertising, cloud storage and invoicing providers. These providers process data on our behalf under contract and are not permitted to use it for their own purposes. A current list is available on request.
We also disclose information where we are required to by law, court order or a valid regulatory request, and to our professional advisers where needed. If our business is reorganised or acquired, information may transfer as part of that transaction, subject to this policy.
Where your data is held
We operate from India and serve clients in the UK, the EU, the US and across Asia, so your information may be stored or processed outside the country you live in. When we transfer personal data out of the UK or the EEA we rely on an adequacy decision where one exists, or on Standard Contractual Clauses with additional safeguards. You can request a copy of the relevant safeguards by writing to us.
Client data during an engagement
Where an engagement gives us access to your advertising accounts, analytics, CRM or production systems, that access is used only to deliver the agreed work. In those cases we act as your processor and follow your instructions, under the terms of your services agreement or data processing addendum rather than this policy.
We do not use client data to train models, and we do not disclose client results publicly without written permission. This is why several case studies on this site are anonymized.
If you are a customer of one of our clients and want your data corrected or deleted, please contact that business directly. If you contact us, we will pass the request on and support them in answering it.
Artificial intelligence in our work
We use AI and automation inside our own delivery process for research, analysis, drafting and code generation. We do not put client confidential information or personal data into public consumer AI tools. We use enterprise tooling with retention controls where client material is involved, and a person reviews every output before it goes to a client or into production. We do not make decisions about you through automated processing alone.
Your rights
You can ask us to confirm what information we hold about you, correct it, delete it, transfer it to another provider, or stop using it for marketing. You can also object to or restrict certain processing, and withdraw consent where consent is what we relied on.
Email hello@growthpanda.co with the subject line “Data Request” and we will respond within 30 days. We may ask for information to confirm who you are.
If you are in the UK or the EU, you also have the right to complain to your data protection authority. If you are in California, you have the rights set out under the CCPA and CPRA, including the right to know, delete, correct, and opt out of sharing for cross-context behavioural advertising, which you can do through our cookie banner. If you are in India, you have the rights set out under the Digital Personal Data Protection Act, 2023, including the right to nominate someone to exercise those rights on your behalf.
Retention and security
We keep enquiry data for up to 24 months from our last contact with you, then delete it. Client and project records are kept for the term of the engagement plus seven years to meet Indian accounting and tax requirements. Job applications are kept for 12 months from the decision unless you ask us to hold them longer. Analytics data is kept for the period configured in the platform, typically 14 to 26 months.
We apply access controls, encryption in transit, multi-factor authentication, least-privilege practices and vendor due diligence to the systems holding this information. No system is completely secure, but if a breach occurs that is likely to affect you, we will notify you and the relevant authority within the timelines the law requires.
Children
This site and our services are built for businesses and are not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has given us personal data, write to us and we will delete it.
Links to other sites
We link to third-party sites and platforms for convenience. We do not control them and are not responsible for their content or their privacy practices.
Changes to this policy
We update this policy as our services, tools and legal obligations change. The date at the top reflects the current version. If a change materially affects how we use your information, we will make that clear on the site or contact you directly.
Contact
Questions about this policy, or to raise a grievance:
If we do not resolve your grievance, you may escalate to the Data Protection Board of India, or to your own supervisory authority if you are in the UK or the EU.