Who is responsible
TheGroves, trading as The Groves, is a sole proprietorship registered in the Netherlands under KVK number 42140006. Our business address is Leemkuilenpad 8, 5683 NJ Best, Netherlands. You can contact us at hello@thegroves.eu.
The Groves is responsible for deciding how personal information is used for this website and our business correspondence (the data controller). For privacy questions or requests, email privacy@thegroves.eu or write to our business address above.
This notice covers the public website and related enquiries. It does not describe a live Rooted or GroveSpeak account service. Product access and any new use of customer data will need their own applicable terms and privacy information.
What information is involved
- Website requests: your IP address and technical request information, such as the requested page, browser information and time of access, are sent when a page or file loads.
- Correspondence: if you email us, we receive your email address, message and any name, business details or attachments you choose to include, together with email delivery information.
The website uses email links for demo, training and support enquiries. A click opens your email application; it does not submit a form, create a lead record or send an automatic confirmation. Providing information is voluntary, but we need a reply address and enough context to answer. Please avoid sending passwords, payment details or sensitive personal data.
Why we use it and our legal bases
- Delivering and protecting the website: our legitimate interest in making information available, maintaining reliable service and preventing abuse (GDPR Article 6(1)(f)).
- Answering general, business and support enquiries: our legitimate interest in responding to people who contact us and keeping relevant correspondence (Article 6(1)(f)).
- Arranging a service you request: taking steps at your request before entering into a contract, or performing that contract, where applicable (Article 6(1)(b)).
- Meeting legal duties: handling privacy requests and retaining records where the law requires it (Article 6(1)(c)).
An enquiry does not subscribe you to marketing. We do not sell enquiry information, use this website for advertising profiles or make decisions with legal or similarly significant effects through automated processing.
Providers and international processing
Website hosting: Firebase Hosting, provided by Google, delivers these pages and processes request information. Google uses global infrastructure, so processing can occur outside the European Economic Area (EEA). Google documents its participation in the EU–US Data Privacy Framework and its contractual data-processing terms in its Firebase privacy information.
Business email: Purelymail, operated by Add Rabbit LLC, receives, stores and sends our correspondence. This includes email addresses, message content and delivery information. Its servers are in the United States, as described in the Purelymail FAQ. See its privacy policy for its own handling of information.
We have not yet confirmed the contractual EU data-transfer safeguards applicable to our use of Purelymail. We do not claim that this email service stores data only in the EEA or that a particular transfer agreement is in place. You can contact us by post at the address above if you prefer not to send a request through this email service.
Information may also be disclosed to professional advisers or public authorities where necessary to meet a legal obligation or establish, exercise or defend a legal claim. External websites and your own email provider operate under their own privacy practices.
How long information is kept
Our policy is to keep correspondence while an enquiry or agreed follow-up is open, and then review whether it is still needed. We retain relevant messages where they form part of an ongoing service, record an agreement, support an unresolved complaint or are required for legal or accounting obligations. Information with no remaining purpose should be deleted. The relevant obligation or unresolved matter determines any longer retention; an enquiry alone is not a reason for indefinite storage.
Google states that Firebase Hosting retains IP data for a few months. Purelymail states that deleted emails can remain in its backups for one month and that its diagnostic logs are removed after about one month. These provider periods are separate from how long we retain active correspondence. See the Firebase information above and Purelymail's security documentation.
Your privacy rights
Depending on the circumstances, you can ask for access to your personal information, correction, deletion, restriction of processing or a portable copy. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of processing before withdrawal.
Send your request to privacy@thegroves.eu or our postal address. We may ask for proportionate information to confirm your identity; please do not send an identity-document copy unless it is necessary and we have discussed a suitable way to provide it. We will respond within one month. If a lawful extension is needed because of complexity or the number of requests, we will explain it within that first month. Requests are normally free of charge.
You may complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, or another competent data-protection authority, including one where you live or work. You do not have to contact us first.
Cookies and changes to this notice
This public website does not set cookies or use local or session storage for tracking. See our cookie information. We will update this notice when the website or our handling of information changes, and show the revision date at the top of the page.