Privacy Policy

Who we are

GrowNexus is a 360° digital growth agency based in Kathmandu, Nepal. We deliver SEO, paid social, branding, web development, AI growth consulting, event marketing, and digital training for businesses across Nepal and global markets under one in-house contract. We operate the website at grow-nexus.com and provide marketing services to local SMBs and international founders. References to “we,” “us,” and “our” in this policy refer to GrowNexus.

Questions about this policy can be directed through our contact page. See also our Cookie Policy and Terms of Service.

What data we collect

We collect personal data only when you actively provide it or when it is generated by your use of the website.

Contact form submissions

When you submit a contact form or book a strategy call, we collect your name, email address, phone number (if provided), company name (if provided), and the message you send. We use this information solely to respond to your inquiry and conduct any follow-up you agree to.

Analytics data

With your consent, we use Google Analytics, Microsoft Clarity, Vercel Analytics, and Speed Insights to understand how visitors use the website. These tools collect anonymized data such as pages viewed, time on site, performance signals, referring sources, and general geographic region (country or city level). We do not collect personally identifiable analytics data. IP addresses are anonymized before storage. You can reject or withdraw optional analytics through “Privacy choices” at any time.

Cookies and similar technologies

Our website uses cookies for security and functionality, and optional analytics cookies only after consent. See our Cookie Policy for details on what we set and how to control it.

How we use your data

• To respond to inquiries submitted through the contact form
• To send information you have requested, such as a proposal or case study
• To analyze website performance and improve user experience
• To protect the contact form and newsletter signup from spam and automated abuse (via Cloudflare Turnstile)

We do not use your data for advertising targeting, profiling, or automated decision-making. We do not sell personal data to any third party.

Who we share data with

We share personal data only with the service providers necessary to operate this website and respond to inquiries:

• Sanity : content management and storage. Contact form submissions and newsletter signups are stored as records in our Sanity dataset so that an enquiry cannot be lost if email delivery fails. This is where your details are held; access is limited to our team.
• Resend : email delivery. Used to notify us of contact form submissions, and to send the welcome email and any newsletter issues to subscribers. Your name and email address are transmitted to Resend for these purposes.
• Google Analytics : anonymized website analytics after consent. No personally identifiable data is shared.
• Microsoft Clarity : consented session diagnostics used to understand usability and improve the website.
• Vercel : consented performance and traffic diagnostics through Vercel Analytics and Speed Insights.
• Cloudflare : security, CDN, and Turnstile form protection. Cloudflare processes requests to serve the website and protect it from automated abuse. When you submit the contact form or a newsletter signup, your IP address is sent to Cloudflare so it can assess whether the submission is automated.

These providers are bound by their own privacy policies and relevant data protection requirements. We do not share data with marketing networks or data brokers.

Data retention

• Contact form submissions : retained for up to 24 months unless you request earlier deletion.
• Newsletter subscribers : retained until you unsubscribe. Unsubscribing deletes your record outright rather than flagging it as inactive, so we stop holding your address rather than only stopping the emails.
• Analytics data : retained according to our Google Analytics configuration (13 months by default).

We review retained data periodically and delete records that are no longer needed.

Your rights

You have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent to communications at any time

Every email we send carries an unsubscribe link in its footer, and supports one-click unsubscribe in mail clients that offer it. Using either deletes your subscriber record. You do not need to contact us or explain why.

To exercise any of these rights, contact us through our contact page. We will respond within 30 days.

Security

We use HTTPS across the website, access controls on systems that hold contact data, and Cloudflare's network protection. No system is completely secure. If you have concerns about a specific data submission, contact us directly.

Governing law

This privacy policy is governed by the laws of Nepal. For clients and visitors based in the European Economic Area or United Kingdom, we process data in compliance with applicable international data protection standards.

Changes to this policy

We may update this policy when our practices change or legal requirements evolve. The “last updated” date at the top of this page reflects the most recent revision. Continued use of the website after an update constitutes acceptance of the revised policy.