Last updated: 5 October 2026
This privacy policy explains which personal data Growdude collects when you visit growdude.com, order from us or download our grow guide, why we do that, how long we keep it and what your rights are. We keep it as short and clear as we can.
1. Who we are
Growdude is a brand of GDM online, a company registered with the Dutch Chamber of Commerce (KvK) and based in the Netherlands. GDM online is the “controller” for the personal data described here. Questions about privacy? E-mail us at growdudegrow@gmail.com.
2. What data we collect and why
Visiting the website
Like every website, our hosting server receives technical data such as your IP address, browser type and the pages you request. This is needed to show the website and keep it secure (legitimate interest). Server logs are kept by our hosting provider for a short period only.
Age check
Our shop is for adults only. When you confirm that you are 18 or older, we store that choice in a small cookie so we don’t ask again on every page. We do not ask for or store your date of birth.
Orders and customer account
When you order, we need your name, delivery and billing address, e-mail address, phone number (optional), the products you order and your payment status. We use this to process and deliver your order, to send order and shipping e-mails and to handle returns or questions (necessary to perform the contract). We keep order records because Dutch tax law requires it (legal obligation). If you create an account, we also store your login details and order history so you can view them.
Grow Bible download and e-mail list
When you download our free grow guide (the “Grow Bible”), we ask for your e-mail address. We store your e-mail address, whether you ticked the box to receive grow tips, the page you downloaded from, and the date and number of your downloads. We do not store your IP address for this. We use this information to give you the download and to keep track of who received it.
Only if you ticked the box do we also send you occasional grow tips and offers by e-mail (legal basis: your consent). You can withdraw your consent at any time via the unsubscribe link in each e-mail or by e-mailing us. Without your consent we do not send you marketing e-mails.
Strain requests
Under our shop you can tell us which strain you are missing. We store the strain name, the page you sent it from and the date. If you also fill in your e-mail address, we store that too and use it only to tell you once when that strain is available (legal basis: your request). We do not store your IP address for this and we do not add you to a mailing list. You can ask us to delete your request at any time.
Contact by e-mail
If you e-mail us, we use your e-mail address and the content of your message to answer you (legitimate interest, or performance of a contract if it concerns an order).
Statistics (Google Analytics)
We use Google Analytics 4 via Google Tag Manager to understand how visitors use our website, for example which pages are visited and where visitors leave the shop, so we can improve it. Analytics cookies are only placed after you give permission (consent). Without your permission, Google may receive limited, cookieless signals (for example that a page was viewed) that contain no cookies or identifiers. Google Analytics 4 does not store IP addresses.
We do not use advertising cookies, we do not show ads and we do not sell your data.
3. Cookies
Cookies are small files that a website stores in your browser. We use:
| Cookie | Purpose | Type | Kept for |
|---|---|---|---|
| gd_age_ok | Remembers that you confirmed you are 18+ | Necessary | Limited period |
| woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_* | Shopping cart and checkout | Necessary | Session up to 2 days |
| wordpress_logged_in_*, wordpress_sec_* | Keeps you logged in to your account | Necessary | Session or up to 14 days |
| cmplz_* | Remembers your cookie choices | Necessary | Up to 1 year |
| _ga, _ga_* | Google Analytics statistics | Analytics (only with consent) | Up to 2 years |
You can change or withdraw your cookie choices at any time via the cookie settings on our website, or delete cookies in your browser settings.
4. Who we share data with
We only share personal data when needed for the purposes above, with service providers that process data on our behalf, under their data processing terms:
- Strato (website hosting, Germany/EU)
- Google (Google Analytics, Google Tag Manager and Google Search Console for statistics; Gmail for e-mail)
- Delivery company that ships your order (name and address only)
- Payment provider, once online payment is available: processes your payment; we never see or store your full card or bank details. We will name the provider here when it is added.
- Accountant / tax authorities where Dutch law requires it
5. Data outside the EU
Our website is hosted in the EU. Google may process data in the United States. Google is certified under the EU-US Data Privacy Framework, which the European Commission recognises as offering adequate protection.
6. How long we keep your data
| Data | How long |
|---|---|
| Order and invoice records | 7 years (Dutch tax law) |
| Customer account | Until you ask us to delete it |
| Grow Bible e-mail list | Until you unsubscribe or ask us to delete it |
| E-mail conversations | As long as needed to handle your question, at most 2 years unless related to an order |
| Google Analytics statistics | As set in our Google Analytics account, at most 14 months |
7. Security
We take appropriate technical and organisational measures to protect your data, such as an encrypted connection (https), restricted access to our systems, strong passwords and keeping our software up to date.
8. Your rights
Under the GDPR (AVG) you have the right to:
- see the personal data we hold about you
- have incorrect data corrected
- have your data deleted
- restrict or object to how we use your data
- receive your data in a common format (data portability)
- withdraw your consent at any time, without affecting what happened before
To use any of these rights, e-mail growdudegrow@gmail.com. We answer within one month. We may ask you to confirm your identity first.
9. Adults only
Our website and shop are intended for people aged 18 and older. We do not knowingly collect data from anyone under 18.
10. Changes to this policy
We may update this policy, for example when we add a payment provider or new service. The date at the top shows the latest version. Important changes will be announced on the website.
11. Questions or complaints
Questions about privacy? E-mail growdudegrow@gmail.com. We would like to hear from you first, but you also have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.