Privacy Notice

Who is responsible

Drake Dereniowski, trading as Design & Grow, is responsible for the personal data described in this notice.

This notice covers heycalvin.io and enquiries and discovery calls arranged through it.

Visiting the website

Netlify hosts this website and processes technical request information, such as IP addresses, requested pages, request times and browser information, to deliver and protect it. We rely on our legitimate interest in operating a reliable and secure website (Article 6(1)(f) GDPR).

Fonts, images and scripts are served from this website. We use no analytics or advertising tools. Booking and WhatsApp are links to separate services, with no embedded widgets. These pages do not change their behaviour in response to browser Do Not Track signals.

Booking and contacting us

Bookings take place on Cal.com. We use your name, email address, appointment details and booking answers to arrange and prepare for the call, respond to your enquiry and follow up on requested next steps. Google Workspace handles our email and calendar, including invitations and booking details.

For a possible contract with you personally, we rely on steps taken at your request before entering a contract (Article 6(1)(b) GDPR). For contacts acting for another business and other enquiries, we rely on our legitimate interest in responding to requests and communicating with prospective clients (Article 6(1)(f) GDPR).

Fields marked as required on Cal.com must be completed to book there. You can also contact us by email. Cal.com processes information for its own service purposes as explained in its privacy policy.

If you follow the WhatsApp link, WhatsApp receives information when you open its service, and we receive the contact details and messages you send us. WhatsApp also processes information under its privacy policy. We use your message to handle your enquiry on the legal bases above. You can email us instead.

Discovery calls and AI notes

We use Zoom for calls. With your permission, we use Zoom AI and Granola to transcribe and summarise what is said, helping us capture your requirements and agreed next steps. Transcripts, summaries and enquiry notes are also handled in Notion.

We rely on your consent for this optional transcription and AI processing (Article 6(1)(a) GDPR). We ask before starting it, and you can have the call without it. You can withdraw consent by telling us during the call or emailing us. Withdrawal does not affect processing already carried out lawfully. We ask separately before making an audio or video recording.

Necessary enquiry notes are used to handle your request on the legal bases described above.

Providers and international transfers

Our website, booking, email, calendar, call and note providers are Netlify, Cal.com, Google Workspace, Zoom, Granola and Notion. WhatsApp processes information when you choose that service.

These services involve processing outside the European Economic Area, including in the United States.

Unfinished: this paragraph will state the safeguards that actually apply to each transfer and how to obtain a copy. It is not verified yet and must be completed before publication.

You can contact drake@designandgrow.co for information about the safeguards relevant to your data.

Retention

We keep enquiry and booking information while arranging the call, answering your enquiry and handling requested next steps. Once those purposes are complete, we delete information no longer needed. If you become a client, we retain information needed for that engagement and applicable legal obligations.

We keep raw transcripts and any separately permitted recordings while checking the notes and resolving outstanding questions from the call. When those purposes are complete, we delete the copies we control, including copies in Notion. Necessary enquiry notes follow the criteria above.

Where a legal obligation or a specific legal claim requires relevant records, we keep the information needed for that purpose. German tax rules generally require invoices to be retained for eight years and relevant business correspondence for six years, calculated from the end of the relevant calendar year, subject to applicable extensions. Our bases are compliance with legal obligations (Article 6(1)(c) GDPR) and our legitimate interest in establishing, exercising or defending legal claims (Article 6(1)(f) GDPR).

Our providers also retain technical logs and backup copies for their security, recovery and legal purposes under their applicable retention arrangements.

Your rights

Subject to the GDPR’s conditions, you can request access and a copy, correction, erasure, restriction of processing and data portability. Where we rely on legitimate interests, you can object on grounds relating to your particular situation. You can withdraw consent at any time.

Contact drake@designandgrow.co to exercise your rights. We normally respond within one month; where the GDPR permits an extension, we will inform you and explain why within that month.

You can complain to a data protection supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information.

US visitors can use the same contact address for privacy requests. We do not sell enquiry or booking information or use it for targeted advertising.

Changes to this notice

We post changes here and update the date above. Where a change requires direct notice, we provide it before the relevant new processing begins.