Privacy Policy
Last updated: 29 September 2026
1. Who we are
This website (growdent.io) is operated by KOYA sp. z o.o., ul. Marsz. Józefa Piłsudskiego 74/320, 50-020 Wrocław, Poland (“Growdent”, “we”, “us”).
We are the data controller for personal data collected through this website and in the course of our business. Contact for all privacy matters: art@growdent.io.
We have not appointed a Data Protection Officer, as we are not required to.
2. Scope
This policy covers visitors to our website, people who contact us or book a call, our clients’ contact persons, newsletter subscribers and suppliers.
It does not cover patient or customer data we may process on behalf of our clients (for example, ad conversion data). In that role we act as a processor, and it is governed by our data processing agreements with each client and by the client’s own privacy policy.
3. What we collect
Information you give us
- Enquiry and contact forms: name, practice or business name, email, phone number, website, and anything you write in your message.
- Call bookings: name, email, phone number, preferred time, and answers to booking questions.
- Clients: contact details of your team, billing details, contract information, and account access you grant us (for example, to Google Ads or Meta Business Manager).
- Newsletter: email address and name.
Information collected automatically (only where you have consented, see section 5)
- IP address, browser and device type, operating system, pages viewed, time on site, referring URL, approximate location.
- Cookie and advertising identifiers, and how you interact with our ads.
We do not ask for, and ask you not to send us, health information or other special category data through our website.
4. Why we use it and our legal basis
| Purpose | Legal basis (GDPR Art. 6(1)) |
|---|---|
| Replying to enquiries and booking calls | Steps before a contract (b), or our legitimate interest in responding to business enquiries (f) |
| Providing our services to clients | Performance of a contract (b) |
| Invoicing, accounting, tax records | Legal obligation (c) |
| Newsletter and marketing emails | Consent (a) |
| Following up with business contacts about related services | Legitimate interest (f) – you can object at any time |
| Website analytics and A/B testing | Consent (a) |
| Remarketing and ad conversion measurement | Consent (a) |
| Security, fraud prevention, defending legal claims | Legitimate interest (f) |
How we contact you
When you submit your details through our website, including contact, enquiry and booking forms, we may contact you by email or phone using the details you provided to respond to your request, arrange or follow up on calls, and provide information relevant to your enquiry.
If you provide your mobile number and separately opt in to receive text messages from Growdent, we may send you SMS messages relating to your enquiry or Practice Growth Session, including confirmations, reminders, rescheduling information and follow-ups. We do not use this SMS opt-in to send marketing or promotional text messages.
Message frequency varies. Message and data rates may apply. You can opt out of text messages at any time by replying STOP. For help, reply HELP or email art@growdent.io.
You can opt out of marketing emails or other marketing communications at any time by clicking unsubscribe where available or emailing art@growdent.io.
We do not use your data for automated decision-making that has legal or similarly significant effects on you.
Mobile information and SMS opt-in consent will not be sold or shared with third parties or affiliates for marketing or promotional purposes. We may share this information with service providers solely where necessary to deliver and manage our text messaging service.
5. Cookies and tracking
When you first visit our website, a cookie banner asks for your consent. Only strictly necessary cookies load without it. Analytics and advertising cookies load only after you opt in, and we use Google Consent Mode v2 to respect your choice. You can change or withdraw your consent at any time via the cookie settings link in the footer of our website.
Services we use:
- Google Tag Manager (Google Ireland Ltd / Google LLC) – loads our other tags. Does not itself set tracking cookies.
- Google Analytics 4 – measures website traffic and behaviour, including, where enabled, advertising reporting and demographics and interests reports. Opt out of Google Analytics.
- Google Ads – conversion tracking and remarketing. Manage your Google ad settings.
- Meta Pixel (Meta Platforms Ireland Ltd) – conversion tracking and remarketing on Facebook and Instagram. Manage your Meta ad preferences.
6. Who we share data with
We do not sell or rent your personal data. We share it only with:
- Service providers acting as processors, under written agreements, including website hosting, email and newsletter delivery, customer relationship management, call scheduling, and invoicing and payment providers.
- Advertising and analytics platforms listed in section 5, where you have consented.
- Professional advisers such as accountants and lawyers.
- Authorities, where required by law.
- A buyer or successor, if our business or its assets are sold or merged.
A current list of our processors is available on request.
7. Transfers outside the EEA
Some providers (including Google and Meta) may process data in the United States. We rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses. You can request a copy of the relevant safeguards by emailing us.
8. How long we keep it
- Enquiries and call bookings that don’t lead to a contract: up to 24 months after last contact.
- Client records: for the length of the contract, then as required by Polish tax and accounting law (generally 5 years from the end of the relevant tax year).
- Newsletter data: until you unsubscribe.
- Analytics data: up to 14 months.
- Cookies: as set out in our cookie banner.
After that, we delete or anonymise the data.
9. Your rights
Under GDPR you have the right to:
- access your data and get a copy;
- correct inaccurate data;
- have your data deleted;
- restrict how we use it;
- object to processing based on legitimate interest, including direct marketing (we will always stop marketing on request);
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing already carried out.
Email art@growdent.io to exercise any right. We will reply within one month, and may ask you to verify your identity.
You can also complain to the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl – or to the authority in the EU country where you live or work.
10. US residents
If you live in a US state with a consumer privacy law, you may have rights to know, access, correct and delete your personal data, and to opt out of targeted advertising. We do not sell personal data. To opt out of targeted advertising, decline advertising cookies in our cookie settings. To make a request, email art@growdent.io. We will not discriminate against you for exercising your rights.
11. Children
Our website and services are for businesses and are not directed at anyone under 16. We do not knowingly collect their data. If you believe we have, contact us and we will delete it.
12. Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, and two-factor authentication on the platforms we use. No method of transmission or storage is completely secure, but we will notify you and the authorities of a breach where the law requires.
13. Changes to this policy
We may update this policy. The date at the top shows when it last changed. We will notify clients and subscribers of material changes by email.
14. Contact
KOYA sp. z o.o. ul. Marsz. Józefa Piłsudskiego 74/320 50-020 Wrocław, Poland art@growdent.io