Who we are
Validgrow Digital ("we", "us") is the data controller for the personal data described on this page. We are registered in [COUNTRY] under company number [COMPANY REGISTRATION NUMBER], at [REGISTERED ADDRESS].
For anything on this page, including a request to access or delete your data, email validgrowdigital@gmail.com. A person reads that inbox — it is not a ticketing system.
What this website stores on your device
Two values, both kept in your browser’s local storage, both set only when you choose them:
- Your light or dark theme preference.
- Your currency preference, so prices stay in the currency you picked.
Cookies
These public pages set no cookies of any kind — not for analytics, not for advertising, not for sessions.
The client portal sets exactly one, and only once you sign in: a session cookie that keeps you signed in and is deleted when you sign out. It carries no information about you, cannot be read by any other website, and is never used to track you here or anywhere else. It is what the law calls strictly necessary — the sign-in would not work without it — which is why you are not asked to consent to it and there is no banner.
Local storage is not a cookie: it is never transmitted to us or to anyone else. It stays on your device and you can clear it at any time through your browser settings.
What we do not do
Stated explicitly, because most privacy policies bury it:
- No analytics of any kind. We do not know how many people visit this site, which pages they read, or where they came from.
- No tracking pixels, advertising tags, or remarketing.
- No third-party scripts. Every script and font on this site is served from our own domain.
- No profiling and no automated decision-making.
- We never sell, rent, or trade personal data. There is no circumstance in which we would.
How your region is detected
To show prices in a sensible currency, the site reads the time zone your browser reports and picks a default from it. This happens entirely on your device. We do not look up your IP address, use a geolocation service, or record where you are — and you can override the choice at any time with the currency switcher.
The contact form
The form on our contact page does not send anything to us. When you submit it, your browser assembles the details into a message and opens it in your own email application. Nothing is transmitted by this website, and nothing is stored by it.
That means you can see exactly what is being sent before it leaves, and you can edit or discard it. If you would rather not use email, the WhatsApp link is an alternative.
When you contact us
If you email us, message us on WhatsApp, or send an enquiry, we receive whatever you choose to include — typically your name, your email address or phone number, and a description of your project.
We use it for one purpose: to reply to you, scope the work, and send a quote. Our lawful basis is taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
We keep enquiries for [RETENTION PERIOD, e.g. 24 months] and then delete them, unless the enquiry became a project, in which case the records are kept for as long as we are required to keep business records under [APPLICABLE TAX/COMPANY LAW].
Third parties
This site itself sends your data to nobody. Three things are worth knowing anyway:
- Hosting — our host, [HOSTING PROVIDER], processes requests to serve these pages and keeps standard server logs (IP address, browser user-agent, requested URL, timestamp) for [LOG RETENTION PERIOD]. We use those only for security and diagnosing faults.
- WhatsApp — if you use a WhatsApp link, that conversation happens on WhatsApp and is governed by WhatsApp’s (Meta’s) own privacy policy, not ours.
- Email — a message you email us travels through your email provider and ours, each with their own policies.
International transfers
Our hosting and email providers may process data outside [COUNTRY]. Where that happens we rely on [TRANSFER MECHANISM, e.g. standard contractual clauses] to keep the protection equivalent.
Your rights
Under the Indonesian Personal Data Protection Law (UU No. 27 of 2022) and, where it applies to you, the UK/EU GDPR, you have the right to:
- Ask what personal data we hold about you, and get a copy of it.
- Have inaccurate data corrected.
- Have your data deleted.
- Object to processing, or ask us to restrict it.
- Withdraw consent at any time, where we relied on consent.
- Receive your data in a portable format.
- Complain to a supervisory authority — in Indonesia, the authority designated under the PDP Law; in the EU/UK, your national data protection regulator.
Exercising those rights
Email validgrowdigital@gmail.com and say what you want. We will respond within 30 days, and we will not charge you for it. Because we hold so little, most requests are answered quickly — often the honest answer is that we hold nothing beyond an email thread.
Security
This site is served over HTTPS with a strict content security policy, and it holds no database, no accounts, and no payment details — there is no store of personal data on it to breach.
For enquiry correspondence we hold in email, if a breach occurs that risks your rights, we will notify you and the relevant authority within 72 hours, as the PDP Law requires.
Children's data
This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, email us and we will delete it.
Changes to this policy
If we change how this site handles data — adding analytics, for instance, or a form that actually submits — we will update this page and change the date at the top before the change goes live, not after.