Privacy Policy

1. Who we are and what this Policy covers

GrowDVM Inc. (“GrowDVM,” “we,” “us,” or “our”) is a marketing services company headquartered at 35111 Newark Blvd, STE F, Newark, CA 94560. We provide marketing, advertising, search engine optimization, website development, social media management, and related services to independently owned veterinary clinics in the United States and Canada.

This Privacy Policy describes how we collect, use, disclose, and otherwise process personal information in connection with our website at growdvm.com and any related subdomains (the “Site”) and the services we provide to our clients (the “Services”). It also describes the privacy rights available to you and how to exercise them.

This Policy applies to information we collect about visitors to our Site, prospective clients who interact with us, and clients who engage our Services. It does not apply to information our clients independently collect from their own customers or website visitors; those clients maintain their own privacy policies.

2. Categories of personal information we collect

The categories of personal information we have collected from California residents in the preceding twelve months, and that we generally collect on an ongoing basis, are listed below. These categories correspond to the categories enumerated in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, “CCPA”).

We do not knowingly collect sensitive personal information as defined under the CCPA (such as social security numbers, driver's license numbers, government-issued identifiers, account login credentials with passwords, precise geolocation, racial or ethnic origin, religious beliefs, biometric data, health information, or sexual orientation). If you voluntarily provide such information in correspondence, we will treat it as confidential and use it only for the purpose for which you provided it.

3. Sources of personal information

We collect personal information from the following sources:

• Directly from you when you visit our Site, fill in a form, book a strategy call, email or text us, sign up for our newsletter, or engage our Services.
• Automatically through cookies, pixels, web beacons, and similar tracking technologies when you visit our Site or interact with our online advertising.
• From third parties such as analytics providers, advertising platforms, lead-generation partners, publicly available sources (LinkedIn, business directories), and our service providers.
• From our clients in connection with the Services we provide to them.

4. How we use personal information

We use personal information for the following business and commercial purposes:

• Operating, maintaining, and improving our Site and Services
• Responding to inquiries, scheduling and conducting calls, and providing the Services you request
• Communicating with prospective and current clients, including marketing communications (where permitted and not opted out)
• Performing analytics, measuring engagement, and optimizing the performance of our Site, marketing campaigns, and content
• Personalizing your experience and tailoring content, offers, and advertisements
• Conducting advertising and marketing, including cross-context behavioral advertising through services such as Meta Ads, Google Ads, and similar advertising platforms; creating custom audiences and lookalike audiences from interactions on our Site to retarget you across third-party platforms
• Detecting, preventing, and responding to security incidents, fraud, and illegal activity
• Complying with applicable law, legal process, and our policies
• Performing internal research for business planning and improvement

We will not use personal information for materially different, unrelated, or incompatible purposes without providing you notice.

5. Cookies, pixels, and tracking technologies

We and our advertising and analytics partners use cookies, pixels, web beacons, software development kits, and similar tracking technologies on our Site. These technologies collect information about your device, browsing behavior, and interactions with our content, and may set persistent or session identifiers that allow us and our partners to recognize you on return visits and across different websites and platforms.

5.1 Categories of cookies and trackers we use

• Strictly necessary. Required for the Site to function. These cannot be disabled without affecting site usability.
• Performance and analytics. Help us understand how visitors interact with the Site, including page views, session duration, scroll depth, and feature use. These include Google Analytics (GA4) and similar tools.
• Functionality. Remember choices you make to improve the Site experience.
• Advertising and targeting. Used to deliver advertisements relevant to your interests and to measure ad performance, build audiences, and conduct cross-context behavioral advertising. These include the Meta Pixel, Google Ads tracking, and similar platforms.

5.2 Specific third-party tracking technologies in use

At the time of publication, our Site uses the following tracking technologies. We may add, remove, or change vendors from time to time; the current list is reflected in our Cookie Policy, which is updated as our stack changes.

• Google Tag Manager (Google LLC), a tag-management system that orchestrates the loading of other tracking technologies. Google Privacy Policy.
• Google Analytics 4 (GA4) (Google LLC) measures site usage and conversions. We use IP anonymization where supported.
• Google Ads conversion tracking and remarketing (Google LLC) measures advertising performance and supports remarketing audiences.
• Meta Pixel (Meta Platforms, Inc.) measures advertising performance on Facebook and Instagram; supports custom and lookalike audiences and retargeting. Meta Privacy Policy.
• TikTok Pixel (TikTok Inc.), where deployed, measures advertising performance on TikTok and supports retargeting audiences. TikTok Privacy Policy.
• GoHighLevel (HighLevel Inc.) supports our booking widget, CRM, and marketing automation. GoHighLevel Privacy Policy.

5.3 Your choices regarding cookies and trackers

You can manage your cookie preferences at any time through our Cookie Preferences link. You may also use your browser settings to refuse or delete cookies, opt out of advertising cookies through the NAI opt-out and DAA WebChoices, and configure platform-specific advertising preferences in your Meta, Google, and TikTok accounts.

We honor the Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of personal information. If your browser sends a GPC signal when you visit our Site, we will treat it as your opt-out request and disable cross-context behavioral advertising tags for that session and (where we can associate the signal to you) for future visits.

6. Selling and sharing of personal information

Under the CCPA, “sale” means disclosing personal information to a third party for monetary or other valuable consideration. “Sharing” means disclosing personal information to a third party for cross-context behavioral advertising, regardless of whether money changes hands.

We do not sell personal information for monetary consideration. However, we do share personal information for cross-context behavioral advertising. When you visit our Site, certain identifiers (such as device IDs, cookie IDs, and IP address) are made available to advertising platforms (Meta, Google, and where deployed TikTok) so that we and they can deliver advertisements to you on those platforms based on your activity on our Site, build custom and lookalike audiences, and measure the effectiveness of our advertising.

In the preceding twelve months, we have shared the categories of personal information listed in Section 2 with the categories of third parties listed in Section 7 for cross-context behavioral advertising purposes.

7. Other disclosures to third parties

In addition to the sharing described above, we disclose personal information to:

• Service providers and processors who perform services on our behalf and are contractually limited to using personal information only to provide those services. These include hosting providers, payment processors, email and marketing service providers, CRM platforms, analytics providers, customer support tools, and call recording providers.
• Professional advisors such as accountants, lawyers, and consultants.
• Government authorities, regulators, and law enforcement where required by law, in response to lawful requests, or to protect our rights, the safety of users, or others.
• Acquirers or successors in the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy. In such transactions, personal information generally is among the assets transferred. We will notify you and require the successor to honor this Policy.

8. Data retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, including to provide our Services, comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and purpose:

• Site analytics and advertising data: generally retained for the platform's default retention period (typically 14 to 26 months for GA4; up to 2 years for ad platforms), unless aggregated.
• Inquiry and contact records: retained for up to 3 years after last interaction, unless we have a longer business or legal reason to keep them.
• Client engagement records: retained for the duration of the engagement and 7 years thereafter for accounting, tax, and contractual purposes.
• Marketing email subscriber records: retained until you unsubscribe, plus a brief suppression period afterward to honor your opt-out.

When retention is no longer required and we have no other lawful basis to keep the information, we will delete or de-identify it.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include access controls, encryption in transit, vendor due diligence, and limiting access to personal information to personnel who need it. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

If we learn of a security breach affecting your personal information, we will notify you in accordance with applicable law.

10. Your California privacy rights

If you are a California resident, you have the following rights under the CCPA, subject to certain exceptions:

• Right to know. The right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collection, and the categories of third parties to whom we disclose or sell or share personal information.
• Right to delete. The right to request that we delete personal information we have collected from you, subject to certain exceptions (such as completing transactions, security, legal compliance, and exercise of free speech).
• Right to correct. The right to request that we correct inaccurate personal information.
• Right to opt out of sale or sharing. The right to direct us to stop selling or sharing your personal information. We do not sell personal information; we do share it for cross-context behavioral advertising as described above, and you may opt out of that sharing at any time.
• Right to limit use of sensitive personal information. As noted, we do not knowingly collect sensitive personal information, but to the extent any such information is provided to us, you have the right to direct us to limit our use of it to permitted purposes.
• Right to non-discrimination. The right not to receive discriminatory treatment for exercising any of these rights.

11. How to opt out of sale or sharing

You can opt out of the sharing of your personal information for cross-context behavioral advertising in any of the following ways:

1. Cookie Preferences. Use our Cookie Preferences link in the footer of every page and disable the “Advertising and Targeting” category.
2. Do Not Sell or Share My Personal Information. Visit our dedicated “Do Not Sell or Share My Personal Information” page.
3. Global Privacy Control. Enable the Global Privacy Control signal in your browser. We honor GPC as a valid opt-out request.
4. Email us at privacy@growdvm.com with the subject line “Do Not Sell or Share, Opt-Out Request.”

12. How to submit a rights request

To exercise any of the rights described in this Policy, you (or an authorized agent acting on your behalf) may submit a verifiable consumer request by:

• Emailing us at privacy@growdvm.com with the nature of your request
• Mailing us at GrowDVM Inc., Attn: Privacy Officer, 35111 Newark Blvd, STE F, Newark, CA 94560
• Calling us at +1 (650) 374-5868

We will need to verify your identity before responding. We may request information sufficient to reasonably confirm that you are the person about whom we collected information. We will not use personal information collected for verification purposes for any other purpose.

An authorized agent may submit a request on your behalf with your signed permission. We may also ask the agent to provide proof that you provided the agent permission, and we may ask you to verify your identity directly.

We will respond to verifiable requests within the timelines required by law (generally within 45 days, with the ability to extend by an additional 45 days when reasonably necessary).

13. Non-discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge different prices or rates, provide a different level or quality of services, or suggest that you will receive a different price or quality of services, because you exercised your rights, unless that difference is reasonably related to the value provided by your personal information.

14. Children's privacy

Our Site and Services are directed to businesses, not children. We do not knowingly collect personal information from children under the age of 16. If we become aware that we have collected personal information from a child under 16 without verified parental consent, we will delete that information. If you believe we may have collected personal information from a child under 16, please contact us at privacy@growdvm.com.

15. Privacy rights for residents of other US states

Residents of certain other US states (including but not limited to Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others as state laws come into effect) may have similar rights to know, correct, delete, opt out of targeted advertising, and limit the processing of sensitive data. We extend the protections in this Policy to residents of those states and will respond to verifiable requests in accordance with the law applicable to your state of residence. To exercise any such right, please contact us as described in Section 12.

16. Changes to this Policy

We may update this Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. If we make material changes, we will provide additional notice (such as adding a banner on our Site or sending you an email). Your continued use of the Site or Services after the changes take effect constitutes acceptance of the updated Policy.

17. Contact us

If you have questions about this Policy or our privacy practices:

GrowDVM Inc.
Attn: Privacy Officer
35111 Newark Blvd, STE F
Newark, CA 94560
Email: privacy@growdvm.com
Phone: +1 (650) 374-5868