1. Introduction
This Advertising Platform Privacy Policy ("Policy") explains how GrowZar Pte Ltd ("we," "our," or "us") collects, uses, and shares personal information in connection with our advertising activities on various platforms including Facebook (Meta), Google, TikTok, Snapchat, Pinterest, Twitter, LinkedIn, and other digital advertising networks.
This Policy supplements our main Privacy Policy and specifically addresses data collection and usage practices related to advertising platform verification and compliance requirements.
GrowZar Pte Ltd
Address: 20A Tanjong Pagar Road, Singapore 088443
Email: privacy@growzar.com
2. Information We Collect for Advertising
2.1 Data Collected Through Our Platform
- Account Information: Name, email address, company details, billing information
- Usage Data: Platform interactions, feature usage, session duration, click-through rates
- Analytics Data: E-commerce metrics, sales data, marketing performance data
- Technical Data: IP address, browser type, device information, operating system
- Cookies and Tracking: Advertising cookies, conversion tracking pixels, analytics cookies
2.2 Data from Third-Party Integrations
- E-commerce Platforms: Shopify, WooCommerce, Magento, BigCommerce transaction data
- Marketing Platforms: Campaign performance, audience data, conversion events
- Email Platforms: Klaviyo, Mailchimp engagement metrics
- Payment Processors: Stripe, PayPal transaction confirmations
2.3 Google User Data
When you connect your Google account (e.g., Google Ads, Google Analytics, Gmail, YouTube), we may access specific data with your consent. Examples include:
- Google Ads campaign and conversion data
- Google Analytics website performance metrics
- Gmail metadata for reporting (if enabled)
- YouTube channel and campaign performance metrics
We use Google user data only to provide and improve GrowZar’s functionality. We do not transfer Google user data to third parties except as necessary to provide the service, and we never use it for unrelated advertising purposes.
3. Platform-Specific Data Usage
Data Shared with Meta:
- Customer email addresses (hashed) for Custom Audiences
- Website visitor behavior via Meta Pixel
- Conversion events (purchases, sign-ups, form submissions)
- Audience demographics and interests (aggregated)
Purpose:
Advertising targeting, lookalike audience creation, conversion optimization, and performance measurement.
Legal Basis:
Legitimate interest for business analytics and marketing optimization, with user consent where required.
Data Shared with Google:
- Website analytics data via Google Analytics
- Search query performance data
- Conversion tracking data via Google Ads
- Customer lifetime value data (aggregated)
- Remarketing audience data
Purpose:
Search advertising optimization, website analytics, audience targeting, and ROI measurement.
Google-Specific Compliance:
- We comply with the Google EU User Consent Policy.
- We obtain user consent for storing and accessing cookies or identifiers where legally required.
- We comply with the Google API Services User Data Policy and Limited Use restrictions.
- Google user data is never sold, shared outside the service context, or used for unrelated advertising.
Data Shared with TikTok:
- Website events via TikTok Pixel
- Custom audience data (hashed email addresses)
- Conversion events and purchase data
- App usage analytics (if applicable)
Purpose:
Advertising campaign optimization, audience targeting, conversion tracking, and performance analytics.
Data Retention:
Data shared with TikTok is retained according to TikTok's data retention policies and our legitimate business needs.
Data Shared with Snapchat:
- Conversion data via Snap Pixel
- Customer list data for targeting (hashed)
- Website visitor behavior and engagement metrics
- Purchase events and revenue data
Purpose:
Ad targeting, conversion optimization, audience insights, and campaign performance measurement.
Additional Platforms We May Use:
- Pinterest Business: Conversion tracking, audience targeting
- Twitter Ads: Website activity tracking, tailored audiences
- LinkedIn Campaign Manager: B2B targeting, lead generation tracking
- Microsoft Advertising: Search advertising, audience targeting
- Amazon DSP: Product advertising, audience insights
For each platform, we share only the minimum necessary data for advertising purposes and maintain compliance with platform-specific policies.
4. How We Use Data
- Provide Services: Enable analytics, campaign tracking, and reporting functionality
- Improve Services: Develop new features and optimize ad performance
- Advertising Optimization: Targeting, conversion tracking, attribution (non-Google data)
- Compliance: Verify accounts and meet regulatory requirements
We do not use Google user data for advertising targeting beyond what the user has explicitly consented to, and we do not combine it with other personal data for unrelated purposes.
4.1 Analytics and Insights
- Performance reporting and dashboard creation
- Customer lifetime value analysis
- Marketing mix modeling and attribution
- Predictive analytics for growth optimization
5. Data Sharing and Third Parties
5.1 Advertising Partners
We share data with advertising platforms as described above, including but not limited to:
- Meta (Facebook, Instagram)
- Google (Google Ads, YouTube)
- TikTok for Business
- Snapchat Ads
- Pinterest Business
- Twitter Ads
- LinkedIn Campaign Manager
- Microsoft Advertising
5.2 Service Providers
- Analytics Providers: Google Analytics, Mixpanel, Amplitude
- Customer Data Platforms: Segment, mParticle
- Email Service Providers: Sendgrid, Mailchimp
- Attribution Providers: AppsFlyer, Adjust, Branch
5.3 Data Protection Measures
- All personally identifiable information is hashed before sharing
- Data sharing agreements include privacy and security requirements
- Regular audits of third-party data handling practices
- Implementation of data minimization principles
6. Legal Basis for Processing
6.1 GDPR Compliance (EU Users)
- Consent: For personalized advertising and non-essential cookies
- Legitimate Interest: For analytics, fraud prevention, and business optimization
- Contract Performance: For service delivery and customer support
- Legal Obligation: For compliance with applicable laws
6.2 CCPA Compliance (California Users)
California residents have specific rights regarding their personal information, including the right to know, delete, and opt-out of the sale of personal information. We do not sell personal information as defined by CCPA.
7. Your Rights and Choices
7.1 Advertising Preferences
- Opt-out of Targeted Ads: Contact us or use platform-specific opt-out mechanisms
- Cookie Management: Adjust browser settings or use our cookie preference center
- Email Marketing: Unsubscribe using links in our emails
7.1b Managing Google Data Access
You may revoke GrowZar’s access to your Google account at any time via your Google Security Settings. Revoking access immediately stops our ability to process your Google data.
7.2 Platform-Specific Opt-Outs
- Facebook: Ad Preferences in your Facebook settings
- Google: Ads Settings and My Activity controls
- TikTok: Privacy and Safety settings in your TikTok account
- Snapchat: Ad Preferences in Snapchat settings
7.3 Data Subject Rights
- Right to access your personal data
- Right to rectify inaccurate data
- Right to erase your data
- Right to restrict processing
- Right to data portability
- Right to object to processing
8. Data Security and Retention
8.1 Security Measures
- Encryption of data in transit and at rest
- Regular security audits and penetration testing
- Access controls and authentication requirements
- Staff training on data protection practices
- Incident response procedures
8.2 Data Retention
- Customer Data: Retained for the duration of the business relationship plus 7 years for legal compliance
- Marketing Data: Retained for 3 years or until consent is withdrawn
- Analytics Data: Aggregated data retained for business insights, typically 5 years
- Cookie Data: Varies by cookie type, typically 1-24 months
9. International Data Transfers
We may transfer your personal data to countries outside your jurisdiction, including the United States, where our advertising partners are located. We ensure adequate protection through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions by relevant data protection authorities
- Binding Corporate Rules where applicable
- Specific consent for transfers when required
10. Children's Privacy
Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.
11. Updates to This Policy
We may update this Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated Policy on our website
- Sending email notifications to registered users
- Displaying prominent notices on our platform
- Requiring acknowledgment for significant changes
12. Contact Information
If you have questions, concerns, or requests regarding this Policy or our data practices, please contact us:
Email: hello@growzar.com
Address: GrowZar Pte Ltd, 20A Tanjong Pagar Road, Singapore 088443
EU Representative: [To be appointed if required]
UK Representative: [To be appointed if required]
We will respond to your inquiry within 30 days of receipt, or as required by applicable law.
13. Regulatory Compliance
13.1 Platform Verification Requirements
This Policy satisfies verification requirements for:
- Facebook Business Verification
- Google Ads Advertiser Verification
- TikTok for Business Account Verification
- Snapchat Ads Account Verification
- Other advertising platform compliance requirements
13.2 Industry Standards
We adhere to industry standards and frameworks including:
- IAB Europe Transparency & Consent Framework
- Network Advertising Initiative (NAI) Code of Conduct
- Digital Advertising Alliance (DAA) Self-Regulatory Principles
- ePrivacy Directive compliance