Privacy Policy

GrowFitFL, LLC is a Florida limited liability company. We are the controller of the personal information described in this Privacy Policy.

Mailing address: GrowFitFL, LLC, PO Box 90382, Lakeland, FL 33804
Email: contact@growfitfl.com
Phone: (305) 209-8128

For privacy-related questions, requests, or complaints, write to us at contact@growfitfl.com with "Privacy" in the subject line.

We collect three categories of information.

Information you provide directly to us:

When you create an account, your name, email address, and password (passwords are stored as one-way hashes, never in plain text).

When you subscribe to a plan, your name, billing address, and payment card information. Payment card information is collected and processed by Stripe, our payment processor. We do not store full payment card numbers on our servers.

When you set up your member profile, optional information such as your city, state, county, climate zone, gardening experience level, and profile photo.

When you participate in the Plan community, posts, comments, photos, garden journal entries, harvest logs, and other content you choose to share.

When you contact us, any information you include in your message, including support tickets, refund requests, and general correspondence.

When you apply for the GFC-1 credential, completion records of the masterclass curriculum and any optional information you provide for your public registry entry.

When you accept The Apothecary acknowledgment, we record your account email, the date and time of acceptance, and the version of the notice accepted.

Information collected automatically when you use the Service:

Device and browser information including IP address, browser type, operating system, device type, screen resolution, and language preferences.

Usage information including pages visited, content viewed, time spent, clicks, search queries within the Plan, course progress, and dates and times of access.

Location information including approximate geographic location derived from your IP address. We do not collect precise GPS location.

Cookies and similar technologies, described in Section 7 below.

Information from third parties:

Stripe (payment processor) shares payment status, billing country, and partial card information with us so we can manage your subscription.

If you sign in using a third party identity provider (such as Google), that provider shares your name, email, and profile photo with us.

Klaviyo (email service provider) shares email engagement data such as opens, clicks, and unsubscribes with us.

We use your information for the following purposes:

• To create and manage your account.
• To provide the content, features, and services.
• To process payments, manage subscriptions, and prevent payment fraud.
• To deliver the GFC-1 credential, maintain the public registry, and recognize your achievements.
• To communicate with you about your account, your subscription, your credential, product updates, and customer support.
• To send you marketing emails about new content, courses, programs, and offers from GrowFitFL, subject to your communication preferences and applicable law.
• To personalize the Plan experience, including recommending content and surfacing seasonal information based on your location and climate zone.
• To analyze usage and improve the Service, including identifying bugs, measuring performance, and developing new features.
• To enforce our Terms of Service and protect the rights, property, and safety of GrowFitFL, our members, and others.
• To comply with legal obligations, respond to lawful requests from public authorities, and protect against legal claims.

If you are located in the European Economic Area or the United Kingdom, we process your personal information under the following legal bases:

We do not sell your personal information. We share information only with the following categories of recipients:

GrowFitFL is based in the United States, and your information will be processed in the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in a country whose data protection laws differ from those of your country.

If you are located in the European Economic Area or the United Kingdom, transfers of your personal information to the United States are made under the European Commission's Standard Contractual Clauses or another lawful transfer mechanism. You may request a copy of the safeguards we have in place by contacting us at contact@growfitfl.com.

We use cookies and similar technologies to operate the Service, remember your preferences, analyze how the Service is used, and deliver relevant communications.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

We send three types of email:

You can unsubscribe from educational and marketing emails at any time using the unsubscribe link at the bottom of every such email, or by contacting us at contact@growfitfl.com. We honor opt-out requests within ten business days.

Our emails comply with the CAN-SPAM Act of 2003. Every commercial email we send includes our physical mailing address, accurately identifies us as the sender, uses non-deceptive subject lines, and provides a clear way to opt out of future marketing.

We retain your personal information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements.

When you cancel your membership, we retain your account information for up to three years to allow re-activation, address tax and accounting requirements, and respond to potential legal claims. After that period, we delete or anonymize your information unless we are required by law to retain it longer.

If you earn the GFC-1 credential, we retain your credential record and public registry entry indefinitely unless you request its removal. Revoked credentials are removed from the public registry but retained in our internal records.

You can request earlier deletion of your information at any time, subject to the limitations described in Section 11.

The Service is not intended for children under the age of 18 and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will promptly delete it. Parents or guardians who believe their child has provided us with personal information can contact us at contact@growfitfl.com.

You have the following rights with respect to your personal information. Some rights apply only to residents of certain regions.

General Rights (All Members)

• You can access and update your account information at any time through your account settings.
• You can request a copy of your personal information by contacting us at contact@growfitfl.com.
• You can request that we correct inaccurate information.
• You can request that we delete your account and associated personal information.
• You can opt out of marketing emails at any time.
• You can object to or restrict certain uses of your information.

Additional Rights for California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act give you the following rights:

To exercise your California rights, contact us at contact@growfitfl.com with "California Privacy Request" in the subject line. We will verify your identity by matching information you provide against information in our records. You may also designate an authorized agent to make a request on your behalf.

Additional Rights for Residents of Other U.S. States

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and other states with comprehensive consumer privacy laws have rights similar to California residents, including the right to access, correct, delete, and obtain a portable copy of their personal information, and the right to opt out of targeted advertising, sale of personal information, and certain profiling. To exercise these rights, contact us at contact@growfitfl.com.

Additional Rights for EU and UK Residents (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom, the General Data Protection Regulation gives you the following rights:

To exercise these rights, contact us at contact@growfitfl.com. We will respond within thirty days. We may need to verify your identity before fulfilling certain requests.

We use commercially reasonable physical, technical, and administrative measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit using TLS, encryption of payment information in transit and at rest through Stripe, password hashing, access controls, and routine security reviews.

No method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security. If you become aware of a security issue, please notify us at contact@growfitfl.com.

In the event of a personal data breach that creates a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law.

The Service contains links to third party websites and services, including Amazon (through our Amazon Associates participation), Patreon, Stripe, YouTube, and others. We are not responsible for the privacy practices of those third parties. Their use of your information is governed by their own privacy policies, which we encourage you to review.

Some browsers offer a "Do Not Track" setting. Because there is no widely accepted standard for how to respond to these signals, we do not currently respond to Do Not Track signals. You can opt out of analytics and marketing cookies through your browser settings and our cookie controls.

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will notify active members by email and update the "Last updated" date at the top of this page. Your continued use of the Service after the effective date of any change constitutes your acceptance of the updated Privacy Policy.

For any privacy question, request, or complaint, contact us at:

We will respond to verified requests within thirty days, or within forty-five days if extended for complex requests, in accordance with applicable law.