Privacy Policy

Privacy Policy

Last Updated: May 19, 2025

Welcome to Graf Growth Partners LLC ("we," "us," or "our"), a consulting business registered in Tennessee. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website www.grafgrowthpartners.com (the "Website") or interact with our services. This policy applies to all users, including those in the United States, Canada, Mexico, and the European Union.

1. Information We Collect

We collect personal information you voluntarily provide through our Website’s contact form, including:

Name

Email address
Phone number

We use analytics tools to collect anonymized data about Website usage, such as page views and visitor behavior, to improve our services.

We also collect payment information (e.g., credit card details) through our third-party payment processor, Stripe, when you make payments for our services. We do not store or process payment information directly on our servers.

2. How We Use Your Information

We use the information we collect to:

Respond to your inquiries and provide consulting services
Communicate with you about our services
Process payments through Stripe
Analyze Website usage to improve our Website and services
Comply with legal obligations

3. Legal Basis for Processing (EU Residents)

For users in the European Union, we process your personal information based on the following legal grounds under the General Data Protection Regulation (GDPR):

Consent: When you submit the contact form, you consent to us processing your data to respond to your inquiry.
Contract: Processing is necessary to perform a contract (e.g., providing consulting services).
Legitimate Interests: We process anonymized analytics data to improve our Website and services, where such interests do not outweigh your rights.
Legal Obligation: To comply with applicable laws.

4. Data Sharing

We do not sell or share your personal information with third parties except as follows:

Stripe: Payment information is processed securely by Stripe, which has its own privacy policy (https://stripe.com/privacy).
Service Providers: We use Google Workspace and GoHighLevel to store and manage contact form data. These providers are contractually obligated to protect your data.
Contracted Clients: After a contract is signed, we may share data with third parties as explicitly agreed in the contract.
Legal Requirements: We may disclose information to comply with legal obligations, such as responding to a court order.

5. Data Storage and Security

We store your personal information securely in our CRM, Google Workspace, and GoHighLevel, using industry-standard measures to protect against unauthorized access, loss, or misuse. However, no system is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain personal information collected through the contact form indefinitely, unless you request deletion or as required by law.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you.
Rectification: Correct inaccurate or incomplete data.
Deletion: Request deletion of your data, subject to legal exceptions.
Restriction: Limit how we process your data in certain cases.
Portability: Receive your data in a structured, machine-readable format.
Objection: Object to processing based on legitimate interests.
Withdraw Consent: Withdraw consent where processing is based on consent.

To exercise these rights, contact us at [email protected]. We will respond within the timeframes required by law (e.g., 30 days under GDPR, 45 days under CCPA).

8. International Data Transfers

Your data is primarily processed in the United States. If you are located in Canada, Mexico, or the EU, your data may be transferred to the U.S. We ensure such transfers comply with applicable laws, such as GDPR’s requirements for international data transfers (e.g., through standard contractual clauses).

9. Children’s Privacy

Our Website is not intended for individuals under 16. We do not knowingly collect personal information from children. If we learn such data has been collected, we will delete it promptly.

10. Analytics

We use analytics tools to collect anonymized data about Website usage. This data helps us understand how visitors interact with our Website and improve our services. You may opt out of analytics tracking through your browser settings or by contacting us.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. Please review this policy periodically.