Privacy policy
This policy explains what Growth Creator Lab collects when you visit the site, join the weekly letter or send us a message, why we collect it, who helps us process it, and the rights you have.
At a glance
What we collect
Your email if you subscribe, your message if you write to us, and statistics about how the site is used.
Who helps
Five service providers: Cloudflare, Vercel, Google Analytics, MailerLite and Resend. They act only on our instructions.
What we never do
We never sell, rent, trade or share your personal data with anyone for their own use. No ad networks, no data brokers.
Your controls
Unsubscribe in one click, and ask us at any time to see, correct, export or delete your data.
01Who we are
In plain words: We are the people responsible for your data here, and you can always reach us.
Growth Creator Lab ("Growth Creator Lab", "we", "us" or "our") is a weekly letter and website for creators and coaches, published by LinoDash. We are the controller of the personal data described in this policy, which means we decide why and how it is processed and we are responsible for it.
This policy applies to growthcreatorlab.si, any domain that replaces it, the weekly letter, and the contact form (together, the "Services"). It does not apply to other websites you reach through links on the Services; those sites have their own policies.
For anything about your data, write to contact@linodash.com or use the contact form and choose "Privacy or data request".
02What we collect
In plain words: Only what you give us, plus the basic technical data every website receives.
When you join the weekly letter
- Your email address.
- The date and time you subscribed and confirmed, and the IP address used at the time, kept as a record of your consent.
- Whether letters are delivered, opened and which links are clicked, together with the device type and approximate location these events reveal.
When you send us a message
- Your name, email address, the topic you choose and the content of your message.
- Any replies we exchange afterwards.
A contact message is never added to the mailing list. You join the letter only by subscribing yourself.
When you visit the site
- Technical data sent by your browser: IP address, browser and device type, operating system, language, the page you came from, and the date and time of the request.
- Usage statistics through Google Analytics: pages viewed, time on page, approximate location (country or city level), device type and how you arrived. See Cookies and analytics.
We do not ask for, and ask you not to send, sensitive data such as health information, financial account details, government identification numbers or passwords.
03Why we use it
In plain words: To send the letter you asked for, answer you, keep the site safe, and make it better.
| Purpose | Data used | Legal basis |
|---|---|---|
| Sending the weekly letter and confirming your subscription | Email address, consent record | Your consent, which you can withdraw at any time |
| Understanding which letters and topics are useful | Delivery, open and click data | Your consent, given when you subscribe |
| Replying to your message and handling requests | Name, email, topic, message | Our legitimate interest in answering people who write to us, or steps you ask for before entering an agreement |
| Measuring how the site is used | Usage statistics and analytics cookies | Your consent where the law requires it, otherwise our legitimate interest in improving the site |
| Delivering the site securely and stopping abuse and spam | Technical data, IP address | Our legitimate interest in keeping the Services available and safe |
| Meeting legal obligations and defending legal claims | Whatever data the obligation or claim concerns | Legal obligation, or our legitimate interest in protecting our rights |
We do not use your data for automated decisions that have legal or similarly significant effects on you, and we do not build advertising profiles.
04Who processes it
In plain words: Five companies help us run the Services, and they may use your data only to do that job.
These service providers process personal data on our behalf, under written data processing terms that require them to follow our instructions, keep the data confidential and protect it. They are not allowed to use it for their own purposes.
| Provider | What it does for us | Data it handles |
|---|---|---|
| Cloudflare | Domain name system, content delivery and protection against attacks | Technical data, IP address |
| Vercel | Hosts the website and runs the sign-up and contact form functions | Technical data, IP address, form submissions in transit |
| Google Analytics | Measures site usage | Usage statistics, analytics cookie identifiers |
| MailerLite | Stores the subscriber list and sends the weekly letter | Email address, consent record, delivery, open and click data |
| Resend | Delivers contact form messages to our inbox | Name, email address, topic, message |
Messages you send are then stored in our email inbox, which is held with our email provider under the same kind of confidentiality and processing terms. If we add or replace a provider, we will update this list before the change takes effect.
05Our no-sharing promise
In plain words: Your data is not for sale, and nobody else gets it.
We do not sell, rent, trade, license or otherwise share your personal data with any third party for that party's own purposes, including for advertising, marketing or data enrichment. We have not done so in the past twelve months. Under California law, we do not "sell" or "share" personal information, and we do not use or disclose sensitive personal information.
The only disclosure we may make outside the providers listed above is when we are legally compelled to, for example by a valid court order. In that case we will disclose only what is strictly required and, unless the law forbids it, tell you first so you have a chance to object.
If Growth Creator Lab is ever transferred to a new owner, we will email subscribers before any personal data moves, and you will be able to delete your data first.
07International transfers
In plain words: Our providers work across borders, and the law protects your data when it moves.
Our service providers operate internationally, so your data may be processed in countries other than your own, including the United States and member states of the European Union. These countries may have different data protection laws from yours.
Whenever data is transferred out of the European Economic Area, the United Kingdom or Switzerland, we rely on a recognised safeguard: an adequacy decision (including the EU-US Data Privacy Framework where the provider is certified), or the European Commission's Standard Contractual Clauses and the UK Addendum, together with additional measures where needed. You can ask us for a copy of the relevant safeguards.
08How long we keep it
In plain words: Only as long as it is useful to you, then we delete it.
- Newsletter data: until you unsubscribe. We then delete your subscriber record within 30 days, keeping only your email address on a suppression list so we never email you again by mistake. Ask us and we will remove that too, with the understanding that you could then be re-added only by subscribing again yourself.
- Unconfirmed sign-ups: deleted within 30 days if the confirmation email is never clicked.
- Contact messages: up to 24 months after our last exchange, then deleted. Privacy requests and our responses are kept for up to 3 years as a record that we handled them.
- Analytics data: 14 months, after which Google Analytics deletes it automatically.
- Security and server logs: kept by Cloudflare and Vercel for short periods, typically days to a few weeks, under their own retention schedules.
We may keep data longer only where the law requires it or where it is needed to establish, exercise or defend a legal claim, and only for as long as that need lasts.
09Your rights
In plain words: It is your data, so you can see it, fix it, take it or have it deleted.
Depending on where you live, and in any case as a matter of our own policy, you have the right to:
- Access the personal data we hold about you and get a copy.
- Correct data that is wrong or incomplete.
- Delete your data.
- Export your data in a common machine-readable format.
- Object to or restrict processing based on our legitimate interests.
- Withdraw consent at any time, for example by unsubscribing, without affecting processing done before you withdrew.
- Not be discriminated against for using any of these rights.
- Complain to a data protection authority, in particular where you live or work. We would appreciate the chance to fix the issue first.
To use a right, email contact@linodash.com or use the contact form. We will answer within 30 days, free of charge. If a request is complex we may extend this by a further period allowed by law and will tell you why. We may ask you to confirm you own the email address involved, so that we never hand your data to someone else. You may use an authorised agent, who must show us your signed permission.
10Security
In plain words: We lock things down and collect as little as possible.
The Services are served only over encrypted HTTPS connections, with strict security headers. API keys stay on the server and never reach your browser. Form submissions are validated, rate-limited and protected against spam. Access to the subscriber list and inbox is limited to the people who run Growth Creator Lab and protected with strong authentication.
No system is perfectly secure. If a breach affects your data and is likely to put your rights at risk, we will notify you and the relevant authority without undue delay, as the law requires.
11Children
In plain words: This is for adults building businesses.
The Services are not directed to anyone under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
12Changes to this policy
In plain words: If this changes in a way that matters, you will hear about it first.
We may update this policy as the Services or the law change. The date at the top always shows the latest version. If a change materially affects how we use your data, we will email subscribers at least 14 days before it takes effect, and where the law requires it we will ask for your consent again. Earlier versions are available on request.
13Contact us
In plain words: A real person answers.
Questions, requests or complaints about this policy or your data go to contact@linodash.com, or through the contact form.