When you share your website, analytics, or business goals with an SEO agency, you are trusting that agency with information that matters to your business. This Privacy Policy explains what Growfactor collects, why we collect it, and how we protect it.
It applies to growfactorllc.com, our email and WhatsApp conversations, our free SEO audits, and every client engagement we deliver in Pakistan and internationally.
Growfactor collects only the information needed to answer your enquiries, deliver SEO services, and improve our website, and we never sell personal data. Client analytics and platform access are used only for the agreed project and can be revoked at any time. You can request access, correction, or deletion of your data by emailing info@growfactorllc.com.
This policy is issued by GrowFactor LLC, trading as Growfactor (“Growfactor”, “we”, “us”, or “our”). We are a white-hat SEO agency serving e-commerce brands, local service businesses, SaaS companies, B2B firms, and healthcare practices.
Growfactor is the controller of personal data collected through this website and our sales conversations. You can learn more about the team behind Growfactor on our About page.
Detail | Information |
|---|---|
Company | GrowFactor LLC (Growfactor) |
DHA Office | 46-C, 11th Jami Commercial Street, Phase 7, DHA, Karachi 75500, Pakistan |
Gulistan-e-Johar Office | 3rd Floor, Karam Tower, SB-09 Munawar Chowrangi Road, Block 12, Gulistan-e-Johar, Karachi 75290, Pakistan |
info@growfactorllc.com | |
Phone and WhatsApp | +92 332 0231132 |
Working Days | Monday to Saturday |
This policy covers personal data we collect from the following people and channels:
It does not cover third-party websites we link to. It also does not cover data our clients collect from their own customers, which is governed by each client’s own privacy policy.
We collect three types of information: what you give us, what our website collects automatically, and what we gather from public or third-party sources.
When you choose one of our SEO packages and pricing plans, we collect the billing details needed to invoice you. Payments are processed through banks or payment providers, and we do not store full card numbers or bank login credentials on our website.
We do not knowingly collect sensitive personal data through this website, such as health records, religious beliefs, biometric data, or CNIC numbers. Please do not send this information through our forms, email, or WhatsApp.
If you run a healthcare or dental practice, we work only with your website and marketing data. We never request or access patient records.
We use your information only for clear business purposes. For visitors in the EU and UK, the table also shows the legal basis we rely on under the GDPR and UK GDPR.
Purpose | Examples | Legal Basis (EU/UK) |
|---|---|---|
Respond to enquiries | Replying by email or WhatsApp, preparing your free SEO audit and proposal | Steps before a contract; legitimate interests |
Deliver SEO services | Strategy, content, technical fixes, link building, and reporting | Performance of a contract |
Billing and administration | Invoices, payment records, and account management | Contract; legal obligation |
Improve our website | Analysing traffic, page performance, and user journeys | Consent (for non-essential cookies); legitimate interests |
Marketing communications | Newsletters, SEO insights, and service updates | Consent; legitimate interests with easy opt-out |
Security and fraud prevention | Spam filtering and protecting our forms and systems | Legitimate interests |
Legal compliance | Tax records, lawful requests, and resolving disputes | Legal obligation |
If you request a free SEO audit, we use your website URL and contact details only to prepare your audit and follow up about it. We do not use your data for automated decisions that have legal or similarly significant effects on you.
Delivering our SEO services in Pakistan and abroad often requires access to your platforms. We treat that access as confidential and limit it to what your project needs.
Depending on your project scope, we may ask for access to the following:
Your analytics and store dashboards may contain data about your own customers, such as orders or locations. We do not export, copy, or reuse that data beyond what reporting requires, and we never use it to market to your customers.
During technical SEO audits, we crawl your public pages with tools such as Screaming Frog. These crawls collect page-level data, not personal data about your visitors. Where required, we can sign a data processing agreement (DPA) with you.
We use AI tools to support research and content drafting, and every output is reviewed by our team. We do not enter confidential client data, login credentials, or your customers’ personal data into public AI tools without your written permission.
Cookies are small text files stored on your device that help a website work and help us understand how visitors use it. We use the following types:
Cookie Type | Purpose | Examples | Can You Refuse? |
|---|---|---|---|
Strictly necessary | Site security, form submission, and core functions | WordPress and Elementor session cookies | No, the site needs them to work |
Analytics | Understanding traffic and page performance | Google Analytics 4 (_ga, _ga_*) | Yes |
Functional | Loading fonts, maps, and embedded content | Google Fonts, Google Maps embeds | Yes, some features may not load |
Marketing | Measuring and improving ad campaigns | Meta Pixel, Google Ads (if active) | Yes |
You can accept or refuse non-essential cookies through our cookie banner, and change your choice at any time in your browser settings. To see how Google uses data from sites that use its services, you can review Google’s own policy.
Some browsers send “Do Not Track” signals. Because there is no common standard for these signals, our website does not respond to them, but you can still refuse non-essential cookies.
We do not sell, rent, or trade your personal data. We share it only in the situations below:
Service | Purpose | Data Involved |
|---|---|---|
Google Analytics 4 | Website traffic analysis | Cookie IDs, device data, pages viewed |
Google Search Console | Website and client search performance | Search and page data, not visitor identities |
WhatsApp Business (Meta) | Client and prospect conversations | Name, phone number, messages |
Website hosting and WordPress | Running growfactorllc.com and storing form entries | Form submissions, IP addresses, server logs |
Ahrefs, SEMrush, Screaming Frog | SEO research and audits | Public website and ranking data |
Email provider | Business email and client communication | Names, email addresses, message content |
Growfactor is based in Pakistan, and many of the tools we use store data on servers in the United States, Europe, and other countries. If you are in the EU, UK, or GCC, your data may be transferred outside your country.
For transfers from the EU or UK, we rely on safeguards such as our providers’ Standard Contractual Clauses or equivalent legal mechanisms.
We keep personal data only as long as we need it for the purposes above, then delete or anonymise it.
Type of Data | How Long We Keep It |
|---|---|
Enquiries and audit requests that do not become projects | Up to 24 months after our last contact |
Client project files and reports | For the engagement plus 3 years |
Client platform access | Removed within 30 days of the engagement ending, or sooner on request |
Billing and tax records | As required by tax law, currently 6 years under Pakistan’s Income Tax Ordinance, 2001 |
Website analytics data | 14 months in Google Analytics 4 |
Job applications | 12 months, unless you ask us to delete them sooner |
Marketing list details | Until you unsubscribe |
We use practical technical and organisational safeguards to protect your information:
No method of sending or storing data online is completely secure. We review our safeguards regularly and improve them as risks change.
If a breach affects your personal data and is likely to put your rights at risk, we will notify you without undue delay. Where the law requires it, such as the GDPR and UK GDPR, we will also notify the relevant authority within 72 hours.
Wherever you are based, you can ask us to do the following with your personal data:
Pakistan has not yet enacted a comprehensive data protection law, but the Prevention of Electronic Crimes Act, 2016 protects against unauthorised access to and misuse of personal data. We extend all the rights above to users in Pakistan as a matter of policy, and we will update this page when new legislation takes effect.
If you are in the EU or UK, you have rights under the GDPR and UK GDPR. You can also complain to your local data protection authority or, in the UK, the Information Commissioner’s Office (ICO).
If you are in the UAE, Saudi Arabia, or another GCC country, local data protection laws may give you additional rights. These include the UAE Personal Data Protection Law and Saudi Arabia’s Personal Data Protection Law, and we honour requests made under them.
California residents have the right to know, correct, and delete personal information, and to opt out of its sale or sharing. We do not sell personal information, and you can turn off advertising cookies at any time through our cookie banner.
Email info@growfactorllc.com with the subject line “Privacy Request” and tell us what you would like us to do. We may ask you to verify your identity, and we will respond within 30 days.
We send marketing emails or WhatsApp messages only when you have asked for them or already work with us. We do not send bulk unsolicited messages.
You can opt out at any time by clicking “unsubscribe” in any email or replying “STOP” on WhatsApp. Opting out of marketing does not affect messages about an active project.
We publish case studies to show real results, but we never name a client or publish identifiable data without written permission. That is why results like our e-commerce fragrance retailer (1,100 to 18,400 monthly visitors in 8 months) are shared by industry, not by brand name.
Testimonials appear only with the client’s consent, and we remove them promptly on request.
Our website and services are designed for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children, and we delete it promptly if we learn it was submitted.
Our blog and service pages link to tools, resources, and websites we do not control. Their privacy practices are their own, so please review their policies before sharing data with them.
We review this policy at least once a year and whenever our tools, services, or applicable laws change. The “Last Updated” date at the top shows the current version, and we will email active clients about any material changes.
These answers cover the privacy questions we hear most often from business owners.
No. Growfactor does not sell, rent, or trade personal data to anyone. We share data only with service providers who help us deliver our work, or when the law requires it.
A first audit uses publicly available data, so we usually need only your website URL, name, and email or WhatsApp number. We may later ask for Google Search Console access for a deeper review, but sharing it is always your choice.
In Google Search Console, open Settings, then Users and Permissions, and remove our user. In Shopify, open Settings, then Users, and remove our collaborator account, or simply ask us and we will remove our access ourselves.
Enquiry data is kept for up to 24 months after our last contact, and client project files for the engagement plus 3 years. Billing records are kept as long as tax law requires.
Yes. Email info@growfactorllc.com with the subject “Privacy Request” and we will delete your data within 30 days, except records we must keep by law.
WhatsApp messages are end-to-end encrypted by Meta in transit. We keep chat records only as long as needed for your enquiry or project, and we never share them outside our team.
For questions about our services rather than your data, visit our general SEO FAQs.
Have a question about this policy or a request about your data? Our team handles privacy requests directly, so you speak to the people who actually manage your information.
Talk to our team about your privacy request or chat with us on WhatsApp at +92 332 0231132.
