PRIVACY POLICY

1. Who We Are (Data Controller)

Growth Giver Group L.L.C-FZ ("GrowthGiver", "we", "us", or "our") is a company registered in the Dubai Free Zone, United Arab Emirates. We operate the website ggiver.com (the "Website") and provide information about our bio-activator products for agricultural use.

We act as the data controller for personal data collected through this Website, meaning we determine the purposes and means of processing your personal data.

2. Scope and Applicability

This Privacy Policy applies to all personal data collected through ggiver.com, including:

• information you provide when filling in contact or inquiry forms;
• information collected automatically when you browse the Website (cookies, analytics);
• business contact information exchanged during commercial correspondence.

This Policy does not apply to third-party websites that may be linked from our Website. We are not responsible for the privacy practices of those sites.

3. Applicable Legal Framework

As a Dubai Free Zone entity serving a global audience — including partners and visitors from the European Union, the United Kingdom, and other jurisdictions with data protection regulations — we comply with the following legal frameworks:

• • UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations;
• • EU General Data Protection Regulation (GDPR) (Regulation 2016/679) — to the extent we offer products or services to individuals located in the European Economic Area, or monitor their behaviour;
• • UK GDPR and the UK Data Protection Act 2018 — for individuals located in the United Kingdom;
• • ePrivacy Directive (as implemented in EU member states) — for cookies and electronic communications.

Where provisions of multiple frameworks apply, we apply the stricter standard.

4. Personal Data We Collect

4.1 Data You Provide Directly

When you contact us or submit an inquiry through the Website, we may collect:

• Full name and job title;
• Business email address;
• Company name and country;
• Phone number (if provided);
• Content of your message or inquiry.

4.2 Data Collected Automatically

When you visit the Website, we and our service providers may collect:

• IP address and approximate geographic location (country/city level);
• Browser type, language, and version;
• Operating system and device type;
• Pages visited, time spent, and referring URL;
• Cookie identifiers and analytics data (see Section 7).

4.3 Data We Do Not Collect

We do not intentionally collect:

• Sensitive personal data (health, biometric, genetic, racial/ethnic origin, political opinions, religious beliefs, or sexual orientation data);
• Data from children under the age of 18. Our Website is directed exclusively at agricultural businesses and professionals. If we become aware that a minor has submitted personal data, we will delete it promptly.
• Financial payment information. All purchases and payments are handled directly via commercial invoicing; no payment card data is processed through the Website.

5. Purposes and Legal Basis for Processing

We process your personal data only where we have a lawful basis to do so. The table below sets out our processing activities, their purposes, and the applicable legal basis under the GDPR (Article 6) and the UAE PDPL.

6. Sharing of Personal Data

We do not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, only to the extent necessary:

• IT and hosting service providers (e.g. web hosting, email infrastructure) acting as data processors under our instructions;
• Analytics service providers (e.g. website traffic analysis tools);
• Professional advisers (lawyers, accountants, auditors) where required for legal or business purposes;
• Regulatory authorities or law enforcement, where we are legally required to disclose information.

We require all third-party processors to maintain appropriate technical and organisational security measures and to process data only in accordance with our documented instructions.

7. International Transfers of Personal Data

As a Dubai-based company using global technology infrastructure, your personal data may be transferred to and processed in countries outside the United Arab Emirates and the European Economic Area, including countries that may not provide the same level of data protection as your home jurisdiction.

Where such transfers occur from the EEA or UK, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) as adopted by the European Commission (2021/914) for transfers to processors in third countries;
• Adequacy decisions of the European Commission, where applicable;
• Transfer Impact Assessments where required under applicable law.

For transfers from the UAE, we comply with the requirements of the UAE PDPL regarding cross-border data transfers, including ensuring that recipient countries or organisations provide an adequate level of protection.

You may request further information about the specific safeguards applied to any transfer by contacting us at info@g-g.group.

8. Cookies, Analytics, and Tracking Technologies

Our Website uses cookies and similar tracking technologies. Cookies are small text files placed on your device. We use the following categories of cookies:

8.1 Google Analytics 4 — Enhanced Measurement

We use Google Analytics 4 (GA4), a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. With Enhanced Measurement enabled, GA4 automatically collects — in addition to standard pageview data:

• scroll events (depth of page scrolling);
• outbound link clicks;
• file download clicks;
• video engagement events.

GA4 uses cookies (including _ga, _ga_<container-id>) to assign a randomised, pseudonymous Client ID to each browser. IP addresses are truncated before storage (IP anonymisation is active by default in GA4).

Google processes this data as our data processor under a Data Processing Agreement (DPA). Data may be transferred to Google servers in the United States. Google LLC participates in the EU-US Data Privacy Framework; Standard Contractual Clauses (SCCs, 2021) are in place as an additional safeguard for EEA/UK transfers.

Google Privacy Policy: https://policies.google.com/privacy

8.2 Google Signals — Cross-Device and Audience Features

We have enabled Google Signals on our GA4 property. For users who are signed into a Google account and have enabled ad personalisation in their Google account settings, Google Signals allows Google to:

• link your sessions across multiple devices (cross-device reporting);
• provide us with aggregated demographic and interest data (age range, gender, interest categories) derived from your Google account;
• build cross-device remarketing audience lists.

This feature connects data from your activity on our Website with data held in your Google account. Under GDPR Article 4(4), this constitutes profiling. We only activate Google Signals-based reporting for users who have given explicit prior consent via our cookie consent mechanism. Users in the EEA and UK who have not consented are excluded from Signals-based audience features.

To opt out of Google Signals data collection:

• Adjust your Google Account ad personalisation settings: myaccount.google.com > Data & Privacy > Ad personalisation;
• Decline analytics and marketing cookies in our cookie consent banner;
• Install the Google Analytics Opt-out Browser Add-on: tools.google.com/dlpage/gaoptout.

Google EU User Consent Policy: https://www.google.com/about/company/user-consent-policy.html

8.3 User-ID and User-Provided Data

If you submit a contact form or inquiry on our Website, we may use the following GA4 features:

• User-ID: A pseudonymous identifier assigned to your sessions, enabling more accurate analysis of user journeys across sessions without identifying you by name.
• User-Provided Data: Hashed (cryptographically transformed, one-way) versions of identifiers you submit — such as your email address — may be passed to GA4 and linked Google Ads accounts to improve conversion tracking accuracy and audience matching.

Hashed identifiers cannot be reversed to reveal your identity directly. They enable probabilistic matching across sessions and with Google's own data. This processing occurs only where you have given prior consent. You may withdraw consent at any time by contacting us at info@g-g.group or via our cookie consent settings.

As the operator of this Website, we are the sole data controller for personal data collected through GA4 advertising features, and we accept full responsibility for compliance with applicable law in connection with such use, consistent with Google's Advertising Features Policy.

8.4 Managing Your Cookie Preferences

You may control your cookie preferences as follows:

• Cookie consent banner: On your first visit, you will be presented with a consent banner. You may accept or decline non-essential cookies by category. You can update your choices at any time by clicking the cookie settings link in the Website footer.
• Browser settings: Most browsers allow you to refuse or delete cookies. Note that disabling strictly necessary cookies may impair Website functionality.
• Google Analytics Opt-out Add-on: tools.google.com/dlpage/gaoptout — prevents GA4 from collecting visit data.
• Google Ad Settings: adssettings.google.com — manage interest-based advertising preferences.
• NAI Opt-out Tool: optout.networkadvertising.org — industry-wide opt-out.

Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal, and does not affect your ability to access the core functionality of the Website.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting obligations. The specific retention periods applicable to each processing activity are set out in Section 5 above.

When personal data is no longer required, we securely delete or anonymise it. In some cases, we may retain anonymised data for statistical purposes indefinitely, as it no longer constitutes personal data.

10. Your Rights as a Data Subject

Depending on your location and the applicable legal framework, you may have the following rights in relation to your personal data:

To exercise any of these rights, please contact us at: info@g-g.group. We will respond within 30 days of receiving your request. We may need to verify your identity before processing the request.

11. Supervisory Authorities and Right to Complain

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant supervisory authority:

• UAE — UAE Data Office (uaedataoffice.ae): the competent authority under the UAE PDPL;
• European Union — the data protection authority (DPA) in your EU country of residence or habitual establishment;
• United Kingdom — the Information Commissioner's Office (ICO) (ico.org.uk).

We would, however, appreciate the opportunity to address your concerns before you contact a regulator. Please reach out to us first at info@g-g.group.

12. Security of Personal Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encrypted data transmission (HTTPS/TLS) for all Website communications;
• Access controls limiting data access to authorised personnel only;
• Regular review of our data protection practices.

No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law (within 72 hours under GDPR).

13. Third-Party Websites

Our Website may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to read the privacy policies of any third-party websites you visit, as we have no control over their data practices and accept no responsibility for them.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this Policy periodically. Your continued use of the Website after changes are posted constitutes your acknowledgement of the updated Policy.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or our data protection practices, please contact us:

We aim to respond to all data protection requests within 30 days.

© 2026 Growth Giver Group L.L.C-FZ. All rights reserved.