Privacy Policy
Privacy Policy
Last updated: 15 October 2026
This policy explains what personal data Growtoria collects through growtoria.whop.site and our Whop store, why, who receives it, how long we keep it and how you can use your rights.
1. Who is responsible for your data
The data controller is Zakaria MAMOUMI, EI, trading as Growtoria (full details in our Legal Notice). Contact for any privacy question or request: contact@growtoria.com. The same person is our privacy officer.
Whop, Inc. runs this website, the checkout, the payments and your Whop account. For the data you give to Whop (your Whop account, checkout and payment details), Whop acts as an independent controller under its own Privacy Policy.
2. What we collect and why
| Purpose | Data | Legal basis | How long we keep it |
|---|---|---|---|
| Orders and subscriptions | Name, email, country, products bought, order and subscription details shared with us by Whop | Performing the contract; legal obligation (accounting) | Accounting records: 10 years. Other order data: 3 years after your last purchase. |
| Payments | Payment status and transaction references (card data is handled by Whop and its payment partners, never by us) | Performing the contract; legal obligation (accounting) | Transaction records: 10 years (accounting). Card data: not stored by us. |
| Customer support (email, WhatsApp, forms) | Your messages and contact details | Legitimate interest (answering you); performing the contract | 3 years after our last exchange. |
| Newsletter, free resources and free tools results by email | Email, first name, signup date and source, proof of consent (these forms send your details to our growtoria.com system) | Consent | Until you unsubscribe, or 3 years after your last interaction. |
| Security and site operation | IP address, technical logs (processed by Whop and Cloudflare, which host the site) | Legitimate interest (security) | Up to 12 months. |
We do not make decisions about you based solely on automated processing, and we do not sell your personal data.
3. Who receives your data
Your data is only accessible to Growtoria and to the providers below, which process it for us or, for Whop and payment providers, as independent controllers under their own privacy policies:
| Provider | Role |
|---|---|
| Whop (USA) | Website hosting, checkout, payments (with its payment partners), customer accounts and access to purchases |
| Cloudflare (USA) | Content delivery and protection against attacks |
| Hostinger (Cyprus) | Hosting of growtoria.com, which receives the newsletter, free resources and free tools forms |
| Brevo (France) | Sending emails (newsletters, free resources) |
| Google (Ireland / USA) | Web fonts on some pages (your IP address is sent to Google when the page loads the fonts) |
| Meta (Ireland / USA) | WhatsApp, if you contact us there |
We may also share data with authorities when the law requires it.
4. Transfers outside Europe
Some providers are located outside the European Economic Area and the UK (mainly in the United States). Your data is then protected by an adequacy decision (such as the EU-U.S. Data Privacy Framework and the UK Extension for certified companies) or by the European Commission’s standard contractual clauses (and their UK equivalents). Your data may therefore be accessible to authorities of those countries under their laws.
5. How long we keep your data
See the table in section 2. At the end of these periods, data is deleted or anonymised.
6. Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. You can withdraw your consent at any time (for example by unsubscribing), without affecting what was done before. Under French law, you can also give instructions about what happens to your data after your death. To use your rights, write to contact@growtoria.com; we may ask you to confirm your identity. We answer within one month. For the data held by Whop, you can also use the settings of your Whop account or contact Whop.
7. Complaints
If you are not satisfied, tell us first at contact@growtoria.com: we acknowledge every privacy complaint within 30 days and tell you the outcome. You can also complain to a data protection authority: in France the CNIL (cnil.fr), in the UK the ICO (ico.org.uk), in Canada the Office of the Privacy Commissioner, in Australia the OAIC, or the authority of your country.
8. Emails and marketing
Whop sends you the emails linked to your purchase (receipt, access, subscription). We only send newsletters and promotional emails if you subscribed. Every marketing email identifies Growtoria and contains a one-click unsubscribe link; unsubscribe requests are processed within 5 business days. We have switched off open tracking for our newsletters.
9. Cookies and trackers
This site does not run our own analytics or advertising trackers. Whop, which hosts the site and runs the checkout, uses its own cookies under its own policy. Details: Cookie Policy.
10. Information for specific countries
- United Kingdom: we process your data under the UK GDPR as described above; you can complain to the ICO.
- California (CalOPPA): the categories of data and recipients are listed in sections 2 and 3; you can review and correct your data by contacting us; changes to this policy are announced on this page with a new “last updated” date. We do not sell or share personal information for money.
- Canada: your data may be processed and stored outside Canada (in the EU and the USA). Our privacy officer is Zakaria MAMOUMI, contact@growtoria.com.
- Australia: you can contact us about privacy at contact@growtoria.com and complain to the OAIC.
11. Children
This website is not directed to children under 16 (under 13 in the United States), and we do not knowingly collect their data. If you think a child has given us personal data, contact us and we will delete it.
12. Security
Connections to this site are encrypted (HTTPS), and access to customer data is restricted. No system is perfectly secure; if a breach affects your data in a way that creates a risk for you, we will inform you and the authorities as required by law.
13. Changes
We may update this policy; the date at the top shows the latest version. Important changes will be announced on this website.