Your Data Rights by Region

Last updated: 13 October 2026

We apply one standard of care everywhere and honour the stronger rights that the law gives you where you live. To use any right, email hello@thegrowingai.com with the subject "Privacy request" and tell us which region you are in. We reply within one month, or the shorter period the law sets.

United Arab Emirates

Under Federal Decree Law No. 45 of 2021 on the Protection of Personal Data, you can ask for access, correction, deletion, restriction, portability and to object to processing, and you can withdraw consent. For the financial free zones, DIFC and ADGM have their own data protection laws with similar rights, and we honour them for people in those zones. Data transfers out of the UAE follow the safeguards these laws require.

United States

Residents of California, Colorado, Connecticut, Virginia, Texas and other states with privacy laws can ask to know, access, correct, delete and port their personal information and can opt out of sale, sharing, targeted advertising and profiling. We do not sell or share personal information for advertising. We do not discriminate against you for using these rights. You may use an authorised agent, and we will verify the request. If we deny a request you can appeal by replying with the word "Appeal". Our messaging follows the TCPA and CAN SPAM Act. Reply STOP to any text or WhatsApp message to opt out.

United Kingdom

Under the UK GDPR and the Data Protection Act 2018 you have the rights of access, rectification, erasure, restriction, portability and objection, rights about automated decisions, and the right to withdraw consent. Marketing messages follow the Privacy and Electronic Communications Regulations. You can complain to the Information Commissioner's Office at ico.org.uk, and we would welcome the chance to fix the issue first.

European Union and EEA

The EU GDPR gives you the same set of rights as above. You can complain to the supervisory authority in your country. Where required, we rely on standard contractual clauses for transfers to India and other countries.

India

Under the Digital Personal Data Protection Act, 2023, you can ask for a summary of your data and who it is shared with, correction, completion, updating and erasure, you can nominate someone to exercise your rights if you cannot, and you can use our grievance route first, which is the email on this page. If we cannot resolve it, you can approach the Data Protection Board of India.

Data processing addendum

If you are a client and we handle personal data for you, we sign a data processing addendum covering instructions, security, sub processors, assistance with rights requests, breach notice and return or deletion. Ask for it at hello@thegrowingai.com.

How we verify requests

We match the request to the email or phone number we hold and may ask one extra question. We never ask for a password.