Privacy policy — growifylsy

Definitions

Key terms used in this policy are defined below to clarify what types of information and processing activities are referenced throughout the document.

Personal data means any information that identifies or can be used to identify an individual, such as name, contact details, device identifiers, or usage data tied to a user account.
Processing refers to any operation performed on personal data, including collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, or erasure.
User refers to a visitor, purchaser, device owner, or account holder interacting with growifylsy services, website, or devices.
Service includes the sale, distribution, setup guidance, remote support, and ongoing maintenance of AI home devices offered by growifylsy.
Cookies are small text files placed on a device by a website to store preferences, session identifiers, and analytics information to improve site function and user experience.

Data collection

growifylsy collects information directly from users, automatically through devices and website interactions, and from third-party service providers when necessary to deliver and improve services.

Data provided directly by users

When creating an account, purchasing a device, or requesting support, users may provide the following types of data:

Contact information: name, email address, phone number
Shipping and billing addresses, payment transaction references (payment processors may store full payment data)
Account credentials and preferences for device configuration
Support communications and diagnostic reports shared during troubleshooting
Optional profile data such as device location or household composition supplied for service convenience
Marketing preferences and consent choices

Data collected automatically

Some information is collected automatically from devices and website usage to enable functionality and improve services:

Device identifiers and model information
Usage data and operational logs (e.g., cleaning schedules, temperature settings)
IP address, cookies and analytics data from website interaction
Performance metrics and error reports from devices
Location data when explicitly enabled by the user for device features
Aggregation and anonymized usage statistics

Third-party sources

growifylsy may receive data from third parties to facilitate service delivery and verify information provided by users.

Payment processors and logistics providers for order fulfillment
Device manufacturers for warranty and firmware updates
Analytics and hosting providers for website operation and diagnostics

Purposes of processing

Personal data is processed for specific, limited purposes necessary to provide products and support services and to comply with applicable laws.

Order processing, delivery coordination, and billing
Device setup, configuration, and remote diagnostics
Customer support and technical assistance
Security, fraud prevention, and integrity of services
Service improvements, product development, and aggregated analytics
Legal compliance and response to lawful requests
Marketing communications where consent has been obtained
Provision of firmware updates and compatibility information

Legal bases for processing

Processing is based on legitimate operational needs and, where required, user consent or compliance with legal obligations.

Performance of a contract: processing necessary to fulfill orders and provide services
Legal obligation: processing required to comply with applicable laws
Legitimate interests: processing for service security, fraud prevention, and business operations
Consent: where processing is optional and consent is obtained for marketing or analytics

Data subject rights and compliance

For users in jurisdictions covered by data protection laws similar to the GDPR, growifylsy provides mechanisms to exercise rights related to personal data.

Right to access: request a copy of personal data processed about you
Right to rectification: correct inaccurate or incomplete information
Right to erasure: request deletion of personal data where applicable
Right to restrict processing or object to certain uses of data
Right to data portability for applicable categories of information
Right to withdraw consent where processing is based on consent

Cookies and similar technologies

growifylsy uses cookies and similar technologies to enable website functionality, measure performance, and provide relevant content.

Types of cookies include essential cookies for site operation, preference cookies to remember settings, analytics cookies for usage measurement, and marketing cookies for content relevance.

Cookies are categorized as essential, performance/analytics, functional, and advertising/marketing. Essential cookies cannot be disabled without affecting site function.

Users can manage cookie preferences via their browser settings and through any cookie preference tool presented on the website. Disabling certain cookies may limit functionality.

Cookie policy details

Data sharing and disclosures

growifylsy shares data with trusted service providers and partners to deliver products and required services. Sharing is limited to what is necessary for the specified purpose.

Logistics and delivery partners for shipping and returns
Payment processors for transaction handling
Device manufacturers and technical partners for firmware and support
Analytics and hosting providers for website and service delivery
Law enforcement or regulators when required by law
Third parties that provide customer service or warranty support on behalf of growifylsy

International transfers

Some service providers and technical partners may be located outside Thailand. Where personal data is transferred internationally, growifylsy seeks appropriate safeguards such as contractual measures and accepted transfer mechanisms.

Transfers are governed by contractual safeguards, data processing agreements, and where applicable, legal mechanisms recognized for international data transfers.

Data retention

Personal data is retained only for as long as necessary to fulfill the purpose for which it was collected, to comply with legal obligations, or to resolve disputes.

Account and order information is generally retained for the period needed to provide services and for statutory accounting and warranty obligations, typically several years depending on local requirements.

Support communications and diagnostic logs are retained for the period required to respond to and resolve the relevant issue, and to analyze service reliability.

Operational logs and analytics data are retained in aggregated or anonymized form where possible; raw logs retained for security and troubleshooting are stored for a limited period aligned with technical needs.

We retain personal data only as long as necessary to provide services, comply with legal obligations, resolve disputes and enforce agreements. Retention periods vary by data type: transactional records and purchase invoices are kept for statutory accounting periods applicable in Thailand; device warranty registrations and support logs are retained for the duration of the relevant support period plus a limited archival period. You may request deletion of your personal data; such requests are processed in accordance with applicable law and subject to data retention requirements that cannot be overridden for legal or operational reasons.

Data security and handling

growifylsy applies administrative, technical and physical measures designed to protect personal data against unauthorized access, alteration, disclosure or destruction. Security practices are reviewed periodically and adapted to current risk assessments. Access to personal data is limited to personnel and service providers with a legitimate need to process it.

Access controls and role-based permissions to limit who can view or modify personal data.
Encryption of data in transit using TLS and encryption at rest for sensitive records where appropriate.
Regular software updates, vulnerability scans and incident logging to detect and address potential issues promptly.

User rights

Depending on applicable law, you may have rights in relation to your personal data. growifylsy aims to make it straightforward to exercise these rights and responds to requests in a timely manner.

Right to access a copy of personal data we hold about you.
Right to correct or update inaccurate or incomplete personal data.
Right to request deletion of personal data, subject to legal and operational retention requirements.
Right to request restriction of processing or to object to certain processing activities.
Right to receive a machine-readable copy of personal data for portability where applicable.
Right to withdraw consent where processing is based on consent, without affecting processing prior to withdrawal.
Right to lodge a complaint with an appropriate data protection authority if you believe your rights have been violated.
Right to be informed about automated decision-making and profiling that has legal or similarly significant effects.

How to make a rights request

To exercise any rights listed above, contact our data protection team with a clear description of the request and relevant identity verification. Provide sufficient details to allow us to locate the data and process the request efficiently. We may ask for additional information to verify identity before fulfilling requests.

[email protected]

We aim to acknowledge receipt of rights requests within 7 business days and to provide a substantive response within 30 calendar days. Complex requests or requests requiring coordination with external providers may take longer; you will be informed if an extension is necessary.

Marketing communications

With your consent or where permitted by law, growifylsy may send information about product updates, new smart device categories, service notices and promotions related to AI-enabled home devices. Marketing communications are designed to be relevant and respectful of user preferences and frequency.

You can opt out of marketing communications at any time using the unsubscribe link in emails, through account settings or by contacting [email protected]. Opting out does not affect service messages necessary for order processing, device updates or security notices.

Children's data

Our products and services are intended for general consumer use and are not directed to children under the age of 13. We do not knowingly collect personal data from children under applicable age limits without parental consent. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information promptly.

Links to third-party services

The growifylsy site and device interfaces may include links to third-party websites, cloud services and smart home integrations. These links are provided for convenience; we do not control the privacy practices of third parties. Review third-party privacy notices before sharing personal information with them.

Changes to this privacy information

We may update our privacy practices to reflect changes in legal requirements, technology or our services. Material changes will be communicated via the growifylsy website and, where appropriate, direct notice to affected users. Review the effective date on this page to see when the policy was last updated.

Privacy policy overview