Privacy Policy

Last updated: 11 August 2026

Note: this notice accurately describes how the site currently works and reflects Croatian and EU law, but it has not been reviewed by a lawyer — please have it checked if you want full assurance.

This policy explains how B2B Growth Lab ("we", "us") collects and uses personal data when you visit b2bgrowthlab.net or get in touch with us. We are committed to handling your information carefully and transparently.

Who we are

The data controller responsible for your personal data is B2B Growth Lab, located in the Republic of Croatia.

For any privacy question or request, contact Nadezhda directly at nadezhda@b2bgrowthlab.net.

What we collect

We only collect personal data that you choose to give us, plus limited technical data created automatically when any website is visited.

Data	When we get it	Why
Name, email address, company name, and the details you write about your business challenge	When you submit the contact form	To reply to your enquiry and discuss whether we can help
Name, email address and any details you provide when booking	When you book a call through Calendly	To schedule and prepare for the call
IP address, browser type, pages requested, timestamps	Automatically, in standard server logs	Security, troubleshooting and keeping the site running

Cookies and tracking

This website does not use cookies, analytics or advertising trackers. We do not profile visitors, and we do not share your data with advertising networks. Because no non-essential cookies are set, there is no cookie banner.

One thing worth noting for transparency: our pages load fonts from Google Fonts, which means your browser makes a request to Google's servers and your IP address is visible to Google as part of that request.

Legal basis for using your data

Legitimate interests — responding to enquiries you send us, and keeping our website secure and functioning.
Consent — where you have actively given it, for example by submitting the contact form or booking a call. You can withdraw consent at any time.
Contract — where we are delivering services to you or taking steps at your request before entering into a contract.

Who processes your data

We keep the number of third parties deliberately small. Those we do use are:

Netlify — website hosting and contact form handling.
Calendly — scheduling, if you book a call.
Google Fonts — font delivery, as described above.
Our email provider — receiving and replying to your enquiry.

Some of these providers operate outside the European Economic Area. Where personal data is transferred outside the EEA, it is protected by appropriate safeguards under Chapter V of the GDPR — typically Standard Contractual Clauses or an adequacy decision by the European Commission.

We do not sell your personal data, and we never will.

How long we keep it

Enquiries that don't lead to a working relationship are kept for up to 24 months, so we have context if you come back to us, and then deleted. Records relating to clients are kept for as long as we work together and afterwards only as long as tax and legal obligations require. Server logs are retained for a short period by our hosting provider.

Your rights

Under the EU General Data Protection Regulation (GDPR) and the Croatian Act on the Implementation of the General Data Protection Regulation, you have the right to:

Access the personal data we hold about you
Have inaccurate data corrected
Have your data erased
Restrict or object to how we use it
Receive your data in a portable format
Withdraw consent at any time

Email nadezhda@b2bgrowthlab.net and we will respond within one month. Exercising these rights is free.

If you are unhappy with how we have handled your data, you can lodge a complaint with the Croatian Personal Data Protection Agency — Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr. If you are based elsewhere in the EU, you may also complain to the supervisory authority in your own country.

Security

The site is served entirely over HTTPS, and we apply security headers to reduce common web risks. Access to enquiry data is limited to those who need it to reply to you. No system is perfectly secure, but we take reasonable and proportionate measures to protect your information.

Children

This is a business-to-business website and is not intended for anyone under 18. We do not knowingly collect data relating to children.

Changes to this policy

If we change how we handle personal data, we will update this page and revise the date at the top.