Privacy policy

This is a translation for convenience. If there is any discrepancy, the Spanish version prevails.

This policy explains what personal data we process when you use this website, fill in one of its forms or write to us, what we use it for, on what legal basis and what rights you have. It is governed by Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and the Safeguarding of Digital Rights (LOPDGDD) and Law 34/2002 on information society services (LSSI).

Data controller

• Controller: MARKETING DE CRECIMIENTO EXPONENCIAL S.L.U. (BlueGrow).
• Tax ID (NIF): B44564110.
• Registered office: C/ La Trujilla, 15, escalera A, planta 0, puerta L9, 38640 Arona (Santa Cruz de Tenerife).
• Email: contacto@thebluegrow.com.
• Phone: +34 624 26 82 26.

We have not appointed a data protection officer because our activity does not require one. For any question about your data, use the email address above.

What data we process, why and on what legal basis

Your request (marketing audit, SEO audit, consultation and landing pages)

We process the data you give us in the form (name, email or phone number, website and your answers about your business) to deal with your request: preparing the marketing audit, the SEO audit or the consultation and talking to you about it.

Legal basis: taking steps at your request prior to entering into a contract (Article 6.1.b GDPR). The privacy checkbox confirms that you have read this policy.

Following up on your request if you don't hire us

If you don't go on to hire us, we keep your data so that we can pick up the conversation about what you asked us for.

Legal basis: our legitimate interest in following up on a request you made to us (Article 6.1.f GDPR). You can object at any time by writing to contacto@thebluegrow.com, and we will stop.

Marketing communications

We only send you news and marketing communications by email if you tick the optional box in the form that allows it, or if you are already a client. Every communication includes a way to unsubscribe.

Legal basis: your consent (Article 6.1.a GDPR and Article 21 LSSI) or, if you are a client, our existing relationship (Article 21.2 LSSI).

Clients

If you hire us, we process the data needed to provide the service and to invoice it.

Legal basis: performance of the contract (Article 6.1.b GDPR) and our tax and commercial obligations (Article 6.1.c GDPR).

Website technical support

If you are a client and open a ticket on the support page, we process the ticket data (client, email, phone, website and the description of the problem) to provide the support.

Legal basis: performance of the contract you have with us (Article 6.1.b GDPR).

If you write to us or call us

If you write to us by email or WhatsApp, or call us, we use your data to reply to you.

Legal basis: dealing with your request (Article 6.1.b GDPR) or our legitimate interest in replying to people who contact us (Article 6.1.f GDPR).

Where your visit came from and website analytics

If you accept analytics cookies, we store with your request which campaign or page you came from (UTM parameters, Google or Meta click identifiers, landing page and referring page), and we measure use of the website with Google Analytics. If you don't accept them, none of this is stored or measured. If you also accept advertising cookies, the Meta pixel records your visits and whether you send a request, so we know which Facebook and Instagram campaigns brought it in. In that case, when you send us a request, our server also passes it to Meta (Conversions API): your email and phone number converted into an irreversible code, your IP address, your browser and the pixel cookies, so that Meta can match it to its campaign. If you don't accept advertising cookies, nothing is passed to Meta. The details are in the cookie policy.

Legal basis: your consent (Article 6.1.a GDPR), which you can withdraw at any time from “Cookie settings” in the website footer.

We do not make automated decisions or build profiles that have effects on you.

Who your data is shared with

We do not sell or pass on your data to third parties, except where required by law. To provide the service we use providers that process data on our behalf, under a data processing agreement:

• Raiola Networks, S.L.: hosts the website and receives the forms, on servers in Spain. If our management tool isn't responding at that moment, the request is kept on that server for up to 90 days so that it isn't lost.
• Cloudflare, Inc.: the anti-spam check on the forms (Turnstile), only if it is enabled.
• Hostinger International Ltd. (n8n): hosts, on a server in Europe, the tool that sends each request to our CRM and notifies the team.
• HighLevel LLC and LeadConnector LLC (GoHighLevel): our CRM, where requests and sales follow-up are stored. It also runs the booking calendar on the support page.
• Google Ireland Limited: our email (Google Workspace) and, only with your consent, website analytics (Google Analytics).
• Meta Platforms Ireland Limited: WhatsApp, if you write to us there, and campaign measurement with the Meta pixel and Conversions API, only if you accept it in the cookie banner.

International transfers

HighLevel, and the Google, Meta and Cloudflare groups, have their headquarters or servers in the United States. They participate in the EU-US Data Privacy Framework, which the European Commission recognises as a sufficient safeguard; you can check this at dataprivacyframework.gov. The website and n8n are hosted in Europe.

How long we keep your data

• Requests that don't lead to a contract: until you ask us to remove you or you object, by writing to contacto@thebluegrow.com.
• Marketing communications: until you unsubscribe.
• Clients: for as long as the relationship lasts and, after that, for the periods set by law for tax and commercial obligations.
• Form backup on the server: 90 days at most.
• Analytics data: the periods set out in the cookie policy.

Your rights

You can ask us to give you access to your data, rectify it, erase it, object to its processing, restrict it or transfer it to another provider (portability), and you can withdraw your consent whenever you like, without affecting any processing carried out before. Write to us at contacto@thebluegrow.com saying which right you want to exercise; we will reply within one month. If we have doubts about your identity, we may ask you to prove it.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Minors

This website and its services are aimed at companies and professionals. We do not knowingly collect data from children under 14.

Security

The website uses an encrypted connection (https), and we apply technical and organisational measures to protect your data against loss, misuse or unauthorised access.

Changes to this policy

If we change the way we process your data, we will reflect it here with the date of the update. Last updated: 28 September 2026.