Privacy Policy

1. Introduction

GrowthMetric is a digital marketing agency based in India, providing services that include SEO, Local SEO, Technical SEO, Google Ads Management, Meta Ads, Social Media Marketing, Website Design & Development, Landing Page Design, Content Marketing, and Digital Marketing Consulting to small businesses, startups, local businesses, and enterprises in India and abroad.

This Privacy Policy explains what personal data we collect through our website (https://growthmetric.in) and in the course of providing our services, why we collect it, how we use and protect it, and what rights you have over it.

We built this Policy to comply with the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 (“DPDP Act”) applicable in India, and — because our clients and website visitors include individuals in the European Union, United Kingdom, and elsewhere — with the General Data Protection Regulation (“GDPR”) and, where relevant, the California Consumer Privacy Act (“CCPA”).

This Policy applies to all services listed above and to any new digital marketing, web development, or consulting service we introduce in the future. We may update specific sections as our service offerings grow, without needing to rewrite this entire document.

By using our website or engaging our services, you agree to the practices described in this Policy. If you do not agree, please do not use our website or services.

2. Information We Collect

We collect only the information reasonably necessary to run our business, deliver our services, and improve your experience with us.

2.1 Personal Information

Information that identifies you as an individual, such as:

• Full name
• Email address
• Phone number / WhatsApp number
• Job title or designation
• Billing address and payment details (processed securely via our payment partners)
• Any information you share with us in emails, forms, calls, or meetings

2.2 Business Information

Since we serve businesses, we also collect information about your organisation, such as:

• Business/company name and website URL
• Industry or business category
• Marketing budget range and business goals (shared voluntarily during consultations)
• Access credentials to advertising or analytics accounts (e.g., Google Ads, Meta Business Manager, Google Search Console) that you grant us for campaign management — always with your explicit authorisation and access-level control
• GST number and business registration details, where required for invoicing

2.3 Technical Information

Collected automatically when you visit our website:

• IP address (used, among other things, to approximate general location such as city/country)
• Browser type and version
• Device type and operating system
• Referring website or source (e.g., how you found us — Google search, an ad, a referral)
• Pages visited, time spent on pages, and click behaviour
• Approximate geographic location (city/country level, not precise GPS location)

2.4 Cookies

Small text files stored on your device that help our website function properly and help us understand how visitors use it. See Section 16 (Cookies Policy) and Section 17 (Cookie Types) for full details.

2.5 Analytics Data

Aggregated and behavioural data collected through tools such as Google Analytics and Microsoft Clarity, including session duration, bounce rate, scroll depth, navigation paths, and heatmap/click patterns. This data is generally analysed in aggregate and is not used to identify you personally.

Summary Table

3. How We Collect Information

3.1 Directly From You

When you fill out a contact or lead form, request a free SEO audit, email us, message us on WhatsApp, book a consultation call, or sign a service agreement with us.

3.2 Automatically

When you browse our website, through cookies, analytics tools, tracking pixels, and server logs (as described in Sections 7–11).

3.3 From Third Parties

Occasionally, we may receive limited information from:

• Referral partners who introduce you to us (e.g., “John from XYZ Agency recommended we speak with you”)
• Advertising platforms (Google, Meta, LinkedIn) that provide us with aggregated, non-identifying campaign performance data
• Publicly available business sources (e.g., your company website or LinkedIn business page) when we’re researching a prospective client before outreach

4. Purpose of Data Collection

5. Legal Basis for Processing (GDPR)

For visitors and clients in the EU/UK/EEA, we rely on the following legal bases under Article 6 of the GDPR:

You may withdraw consent at any time where consent is our basis for processing (see Section 18).

6. Data Sharing & Third Parties

We do not sell your personal data. We share it only in the following situations:

6.1 Service Providers (“Data Processors”)

We work with trusted third parties who process data on our behalf, including:

• Website hosting and cloud storage providers
• Email marketing platforms (e.g., for newsletters)
• CRM and project management tools
• Payment gateways
• Analytics and tracking providers (Google, Microsoft, Meta)
• Scheduling tools (e.g., Calendly)
• Accounting and invoicing software

These providers are contractually required to protect your data and use it only for the purpose we’ve engaged them for.

6.2 Legal & Regulatory Disclosures

We may disclose information if required by law, court order, or government authority, or to protect our legal rights, prevent fraud, or ensure the safety of our team and users.

6.3 Business Transfers

If GrowthMetric is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

6.4 What We Never Do

7. Google Analytics

We use Google Analytics (GA4) to understand how visitors interact with our website — pages viewed, time on site, traffic sources, and general location. This data is collected via cookies and is primarily used in aggregated, non-identifiable form.

You can opt out using the Google Analytics Opt-out Browser Add-on. Google’s own practices are governed by the Google Privacy Policy.

8. Google Ads

We run Google Ads campaigns for our own marketing and for our clients. On our website, Google Ads conversion tracking and remarketing tags may be used to:

• Measure the effectiveness of our ad campaigns
• Show you relevant GrowthMetric ads on other websites after you’ve visited ours (remarketing)

You can manage your ad personalisation preferences through Google Ads Settings.

9. Meta Pixel

We may use the Meta Pixel (Facebook/Instagram) on our website to measure ad performance and build remarketing audiences — for example, showing our ads to visitors who previously viewed our services page. Meta processes this data under its own Privacy Policy. You can manage your ad preferences through your Meta Ad Settings.

10. Microsoft Clarity

We may use Microsoft Clarity to record anonymised session replays and heatmaps, helping us see how visitors navigate our website (e.g., where they click or scroll) so we can improve usability. Clarity automatically masks sensitive form fields (like passwords) by default. Data collected is governed by Microsoft’s Privacy Statement.

11. Google Tag Manager

We use Google Tag Manager (GTM) to organise and deploy the tracking tags described above (Google Analytics, Google Ads, Meta Pixel). GTM itself does not collect personal data — it acts as a container that loads other tags, which are each individually governed by the sections above.

12. Contact Forms

When you submit a form on our website (e.g., “Get a Free SEO Audit” or “Request a Quote”), we collect the information you provide — typically your name, email, phone number, business name, and message. This is used solely to respond to your enquiry and, if you proceed, to onboard you as a client. We do not add form submissions to marketing lists without your separate consent.

13. Newsletter & Email Marketing

If you subscribe to our newsletter or marketing emails, we collect your name and email address. We use a double opt-in process where applicable and send marketing emails only with your consent. Every email includes an unsubscribe link, and you can withdraw consent at any time by clicking it or emailing us directly.

14. WhatsApp Communication

We may communicate with prospects and clients via WhatsApp (including WhatsApp Business API) for enquiries, project updates, and support. Information shared in these chats (your number, name, and message content) is stored to maintain a record of our conversation and service history. WhatsApp’s own data handling is governed by WhatsApp’s Privacy Policy. By messaging us on WhatsApp, you consent to us contacting you back through the same channel regarding your enquiry.

15. Calendly / Meeting Booking Tools

For scheduling consultations and meetings, we may use third-party booking tools such as Calendly (current or future equivalents). When you book a meeting, information such as your name, email, and meeting purpose is shared with that provider to confirm and manage the booking. This is governed by the respective provider’s own privacy policy in addition to this Policy.

16. Cookies Policy

Cookies are small text files placed on your device when you visit our website. We use them to:

• Keep our website functioning properly
• Remember your preferences
• Understand how visitors use our site
• Deliver and measure relevant advertising

You will see a cookie consent banner when you first visit growthmetric.in, allowing you to accept or manage non-essential cookies. You can also control or delete cookies at any time through your browser settings — though disabling essential cookies may affect site functionality.

17. Cookie Types

18. Your Privacy Rights

18.1 Rights Under GDPR (EU/UK/EEA Individuals)

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure (“right to be forgotten”) — request deletion of your data, subject to legal exceptions
• Right to restrict processing — limit how we use your data in certain situations
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or direct marketing
• Right to withdraw consent — at any time, without affecting prior lawful processing
• Right to lodge a complaint — with your local data protection supervisory authority

18.2 Rights Under CCPA (California Residents), Where Applicable

• Right to know what personal information we collect, use, and disclose
• Right to delete personal information, subject to certain exceptions
• Right to opt out of sale/sharing — note that GrowthMetric does not sell personal information
• Right to non-discrimination for exercising your privacy rights

18.3 Rights Under India’s Digital Personal Data Protection Act, 2023

• Right to access information about the personal data we hold and how it is processed
• Right to correction and erasure of your personal data
• Right to grievance redressal — raise concerns with us directly, and escalate to the Data Protection Board of India if unresolved
• Right to nominate another individual to exercise your rights in the event of death or incapacity
• Right to withdraw consent at any time, as easily as it was given

19. Data Security

We take reasonable technical and organisational measures to protect your data, including:

• SSL/TLS encryption for data transmitted through our website
• Restricted, role-based access to client data within our team
• Secure storage of ad account credentials, shared only with authorised team members working on your account
• Regular software and security updates
• Confidentiality obligations for all team members and contractors

While we work hard to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

20. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by law.

21. Children’s Privacy

Our website and services are directed at businesses and professionals, not children. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have inadvertently collected such data, we will delete it promptly. If you believe a child has provided us with personal data, please contact us.

22. International Data Transfers

As an India-based agency serving international clients, and because some of our service providers (such as Google, Meta, and Microsoft) operate servers outside India, your data may be transferred to and processed in other countries, including the United States.

• Under the DPDP Act, 2023 (Section 16): cross-border transfer of personal data is permitted, except to countries specifically restricted by the Central Government of India. As of this Policy’s date, no such restricted list has been notified.
• Under GDPR: where we transfer personal data of EU/UK/EEA individuals outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or transfers to providers operating under recognised data protection frameworks.

We take reasonable steps to ensure any such transfer maintains a comparable level of data protection.

23. Third-Party Links

Our website may contain links to third-party websites, tools, or client case study references. We are not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policy of any third-party site you visit.

24. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, technology, or legal requirements — including as we add new digital marketing services in the future. Material changes will be reflected by updating the “Last Updated” date at the top of this page, and, where appropriate, communicated to active clients directly. We encourage you to review this Policy periodically.

25. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We aim to acknowledge all privacy-related requests within a reasonable timeframe and in accordance with the DPDP Act, GDPR, and other applicable laws.