Updated October 13, 2026. This policy describes how GROBYO handles information through this website. With Statistics consent, we use Google Analytics to measure website use and enquiry events. OpenAI advertising measurement requires both Statistics and Marketing consent.
Who we are
GROBYO is a DBA of Kettle Holdings Inc., 10588 Edgewater Drive, Kelseyville, CA 95451, United States. We are responsible for the personal information collected through this website and our business enquiries. For privacy questions or requests, email info@grobyo.com or write to the address above.
Information we collect
When you send an enquiry, we collect your first and last name, email address and project message. You may also provide your business name, website and the service you are interested in. If you contact us by email or phone, we receive the information you choose to share. Please do not send passwords, payment-card details or sensitive personal information through the enquiry form.
Our website and service providers may process technical information such as your IP address, browser and device details, pages requested, timestamps and security logs. Essential cookies and similar technologies may remember your privacy choices. When you allow Statistics cookies, Google Analytics receives online identifiers and information about page visits, form starts and successful enquiries, and phone-link clicks. Our Google Analytics enquiry tracking sends fixed event labels rather than names, email addresses, telephone numbers or message text.
How we use information
We use enquiry and contact information to respond to you, discuss your requirements, prepare proposals and manage our business relationship. We use technical information to operate and secure the website, prevent spam and investigate problems. We may also use information to meet legal obligations or establish, exercise or defend legal claims.
Submitting an enquiry does not subscribe you to a newsletter or marketing list. Analytics helps us understand which pages and channels lead to enquiries. We load Google Tag Manager and Google Analytics only after Statistics consent. You can withdraw that choice at any time using Cookie settings.
Cookies, analytics and your choices
Essential technologies support website operation, security and remembering your choices. With Statistics consent, we use Google Analytics to measure website use and enquiry events. OpenAI advertising measurement requires both Statistics and Marketing consent. You can use the enquiry form without accepting optional cookies.
Use Cookie settings to accept, reject or change optional categories at any time. You can also manage cookies in your browser. The Cookie Policy and preferences page describes the technologies listed for this website, their purposes and their lifetimes. Cookie lifetimes are separate from our retention of enquiry records.
The website is configured to respect Global Privacy Control and Do Not Track signals through its consent controls. These browser signals apply to the browser or device that sends them. You can also send a privacy request to us directly.
Who receives information
We use Exact Hosting to host the website and Google services for business communications. With Statistics consent, Google also processes website analytics on our behalf through Google Analytics. The WordPress contact form uses Gravity Forms and spam-protection tools. Enquiries are stored in the website and sent to our business email so we can respond. Providers process information as needed to deliver their services, subject to the arrangements and settings that apply to those services.
We may disclose information when required by law, to protect people or the security of our services, or in connection with a business transaction such as a merger or transfer of assets, subject to applicable protections.
Planned marketing and AI services
We plan to introduce newsletters, a CRM and AI-assisted automation for enquiry handling and follow-up. The providers have not yet been selected, and these integrations are not connected to this website. We will update this policy and assess the information shared, provider safeguards, retention and data-use settings before enabling them.
Google, Meta and LinkedIn advertising and remarketing are planned for a later phase. These advertising integrations are not enabled for the initial launch.
If advertising tools are introduced, they may receive online identifiers and information about visits or interactions to measure campaigns or personalise advertising. This may qualify as a sale or sharing of personal information under some privacy laws, even without payment. We will update the disclosures and relevant consent or opt-out controls before activation. Future marketing emails will offer an unsubscribe option; a minimal suppression record may be retained to respect an opt-out.
ChatGPT advertising measurement
We use OpenAI measurement for advertising in ChatGPT to help us understand whether an advertisement leads to a successful enquiry. Our current configuration requires both Statistics and Marketing consent before loading the OpenAI pixel. You can still send an enquiry without accepting either category.
With the required consent, OpenAI may receive the enquiry event, event time, website origin, advertising click reference, browser identifier and technical request information. Its automatic advanced matching may detect supported contact details, such as a name or email address entered on the website, and convert them into SHA-256 hashes in your browser before sending them with conversion events. Hashing does not make these identifiers anonymous. Our event code does not deliberately send your project message or other free-text enquiry content to OpenAI.
The pixel uses first-party cookies: __oppref stores an advertising click reference for up to 30 days after it is written, and __obref stores a browser reference for up to 365 days after creation. Browser restrictions or clearing cookies may shorten these periods. These cookie lifetimes are separate from our 180-day non-client enquiry retention rule.
Rejecting or withdrawing either required category stops future OpenAI measurement in our configuration. Withdrawal instructs the pixel to remove its measurement cookies; it does not retract events already sent. Our configuration also blocks this measurement when Global Privacy Control or Do Not Track is detected. We mark enquiry events to opt out of future user-level personalisation. Advertising measurement and matching may qualify as sale or sharing under applicable privacy laws, even where no money changes hands. Use Cookie Policy and preferences to manage your choices, and see OpenAI’s Privacy Policy for its handling of information.
How long we keep information
We delete or anonymise enquiries that do not become client relationships within 180 days of the last substantive contact, unless an ongoing discussion, a legal obligation or a dispute requires longer. This retention rule covers form entries and relevant business-email copies.
Other records are retained according to their purpose: client records for the relationship and applicable contractual or legal needs; accounting records for applicable tax and recordkeeping obligations; and security logs for operational and security needs. Backup copies may remain until the relevant backup cycle replaces or expires them. We do not promise that deleting an active record immediately removes every backup copy.
Your privacy rights
You may contact info@grobyo.com to request access to, correction of or deletion of your personal information. Depending on your location and which laws apply, you may also have rights to receive a portable copy, withdraw consent, object to or restrict certain processing, opt out of targeted advertising or sale/sharing, or appeal a decision about a request. California residents may have rights to know the categories and specific information collected and disclosed, and to limit certain uses of sensitive personal information where applicable.
Tell us what you are requesting and how we can contact you. We may ask for information reasonably needed to verify your identity or an authorised agent’s authority. We will explain relevant exceptions or reasons we cannot fulfil a request, and any applicable appeal route. We will not discriminate against you for exercising applicable privacy rights.
International processing, security and children
GROBYO operates in the United States and currently primarily serves US businesses. Providers may process information in the United States or other countries, where privacy laws may differ. We will assess additional requirements before expanding into new markets or introducing new providers.
We use safeguards appropriate to the information we handle, but no website, transmission or storage system is completely secure. Our services are intended for businesses and are not directed to children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.
Changes to this policy
We will revise this policy when our practices change and record the revision date. Where required, we will provide additional notice or obtain consent before using information for a materially different purpose. Contact info@grobyo.com with any questions.