Last updated: 30 October 2026
indiagrows.com (“India Grows”) is managed by Medicto Ltd, a company registered in England and Wales, United Kingdom (company number 10447946). Medicto Ltd (“we”, “us”) is the data controller for the personal data described in this policy. It explains what we collect when you use India Grows, why, who can see it and the choices you have.
1. What we collect
- Account details: your name and email address. We do not use usernames or passwords: you log in with a one-time code we email to you. We store only a scrambled (hashed) copy of each code, and codes expire after 20 minutes.
- Business profile: your company, profession, industry, country, mobile number and LinkedIn profile, and optionally your city, website and a short bio. We also record whether you have asked to receive updates on WhatsApp, and when. You also confirm that you are of Indian origin when you register.
- Professional profile (optional): if you join as a professional or list yourself later in our Professionals directory, your profession, professional title, company or practice, city, country, LinkedIn profile, a short profile and, if you add one, a photo. We record when you agreed to the profile being shown to members.
- Special offers (optional): if you post a discount on our Special offers page, the business name, discount, offer details, where it can be used (online or in store), country and city, and any business logo, discount code, web page and end date you give. We record when you confirmed that the offer is genuine.
- Contact form: if you use our Contact us form, your name, email address, company (if you give it) and message. It is emailed to our team so we can reply to you. To stop spam, we briefly keep a coded (hashed) copy of your IP address, for up to one hour.
- What you post and do: deals, special offers, reports you make, and private messages you send and receive.
- Security and technical data: when you log in we record your IP address and browser details against your session. We also use your IP address, in coded (hashed) form, to limit repeated sign-ups and failed logins. Our web server keeps standard access logs (IP address, browser, pages requested and time).
- How you use the site: Google Analytics collects information about the pages you visit and the device you use. Unless you accept analytics cookies, this is limited and anonymous, with no cookies. See section 6.
2. Why we use it, and our legal basis
- To provide the service you sign up for (performing our contract with you): creating and running your account, showing your deals, showing your special offers to members, showing your professional profile in our directory if you create one, delivering messages (including sharing your contact details with a deal owner or a professional when you contact them), and letting you edit or delete your content.
- To keep the community safe (our legitimate interests): reviewing new members’ registrations (we check the details you give us, such as your LinkedIn profile, before approving your account), reviewing deals, special offers and professional profiles before they go live, investigating reports, preventing spam, fraud and abuse, and securing the site.
- To meet legal obligations: for example responding to lawful requests from authorities.
- To contact you about your account: such as confirming your email address, sending the login codes you ask for, and decisions about your deals and special offers. We may also contact you about your account or a deal you posted using your mobile number. We do not send marketing without your consent.
- To send you deal alerts and updates on WhatsApp (your consent): only if you tick the WhatsApp box when you register or in My Account. You can untick it at any time, or reply STOP to any message, and we will stop.
- To understand how the site is used and improve it: Google Analytics. Analytics cookies are used only with your consent, given by clicking “Accept analytics” on our cookie banner. Without it, we rely on our legitimate interests to receive limited, cookieless measurements. See section 6.
We do not sell your personal data, and we do not use advertising cookies or show ads on India Grows.
3. Who can see your information
- The public: the deals you post. Deals are shown as posted by “an India Grows member”: your name, company and contact details are not shown with them, and your email address and phone number are never shown publicly. If you create a professional profile (when you join as a professional, or later from My Account), it is shown only to approved India Grows members, not to the general public or search engines: they can see your name, photo (if you add one), professional title, company, profession, city, country, LinkedIn profile and short profile until you remove it. Your email address and mobile number are not shown on it.
- Approved members (special offers): special offers you post are shown only to approved India Grows members, not to the general public or search engines, as offered by “an India Grows member”, with the business name, logo, discount, details, location, discount code and web page you give. Your own name, email address and mobile number are not shown with them. When you use someone else’s offer, we do not send your details to the business: if you follow a link to its website or give it a code, you deal with that business directly and its own privacy policy applies.
- Deal owners you contact: when you message the owner of a deal, we send them your name, company, profession, industry, city and country, email address, mobile number, LinkedIn profile and website (if you added one) with your message, so they can reply to you or contact you directly. Deal owners’ own names and details are not shared with you.
- Professionals you contact: when you message someone through their professional profile, we send them the same details with your message. Their email address and mobile number are not shared with you unless they choose to send them.
- Other members: the members you exchange private messages with see those messages. Messages are not public.
- Our team: administrators at Medicto Ltd can see account and profile details to run and moderate the site, and may read messages only when needed to investigate a report, prevent abuse or meet a legal obligation.
- Service providers: Cloudflare (security and content delivery), Amazon Web Services (hosting) Google Workspace (sending our emails, such as login codes), WhatsApp Ireland Limited, part of Meta (only for members who ask for WhatsApp updates) and Google Analytics (measuring how the site is used) process data on our behalf under contracts that require them to protect it.
- Authorities: where the law requires it, or where needed to protect people from fraud or harm.
4. International transfers
India Grows serves members around the world and our service providers operate internationally, so your data may be processed outside the UK. Where that happens we rely on appropriate safeguards, such as the UK International Data Transfer Agreement, adequacy regulations or the UK Extension to the EU-US Data Privacy Framework.
5. How long we keep it
- Your account and profile are kept while your account is open.
- If we cannot approve your registration, we email you and you can reply within 7 days if you think your account should be approved. If we have not approved it within 14 days, we delete your registration details.
- Messages sent through our Contact us form are kept in our email inbox for as long as we need them to deal with your enquiry and any follow-up, and then deleted.
- Your professional profile and photo stay visible to members until you remove them in My Account or your account is deleted. When a profile is removed, we delete it and its photo straight away.
- Deals expire automatically 90 days after they go live. Expired deals stay on the site, marked as expired, unless you or we delete them.
- Special offers end on their end date, or 90 days after they go live, whichever is sooner. Ended offers stay visible to members, marked as ended, unless you or we delete them. You can delete an offer, or remove its logo, at any time in My Account. When an offer is deleted, its logo is deleted too.
- If your account is deleted, your profile and special offers are deleted and your deals are removed. Messages you sent stay visible to the people who received them, shown as from a “Former member”.
- Login sessions end after 2 days, or after 30 days if you choose “Keep me logged in”. Coded IP records used to prevent abuse are kept for up to one hour.
- Google Analytics data is kept for 14 months. Your cookie choice is remembered for 12 months.
- Server logs and backups are kept for a limited period for security and recovery, and then deleted or overwritten.
6. Cookies and Google Analytics
Cookies are small text files that a website stores in your browser. This section is our cookie policy. It lists every cookie India Grows uses, and explains how we use Google Analytics.
Your choice
When you first visit, a banner asks whether you accept analytics cookies. Essential cookies are always on, because the site cannot work without them. Analytics cookies are only set if you click “Accept analytics”. If you click “Reject analytics”, or ignore the banner, no analytics cookies are set or read. We remember your choice for 12 months and then ask again.
You can change your mind at any time using the Cookie settings link at the bottom of every page. If you withdraw consent, Google Analytics stops using cookies and we delete its cookies from your browser. You can also block or delete cookies in your browser settings, but you will not be able to log in without the essential cookies.
Essential cookies (always on)
| Cookie | What it does | How long it lasts |
|---|---|---|
ig_session | Keeps you logged in and protects forms against misuse. Only set when you log in. | Until you close your browser, or 30 days if you choose “Keep me logged in” |
ig_login_email | Remembers the email address you entered while you type in your login code. | 1 hour, deleted as soon as you log in |
ig_consent | Remembers your cookie choice, so we don’t ask on every page. | 12 months |
__cf_bm, cf_clearance | Set by Cloudflare, our security provider, to tell people apart from bots and protect the site from attacks. cf_clearance is only set if you are shown a security check. | 30 minutes (__cf_bm); for the length of the security check (cf_clearance) |
wordpress_* | WordPress’s standard login cookies. Only for administrators who sign in to manage the site. | Until the administrator logs out, or up to 14 days |
Analytics cookies (only if you accept)
| Cookie | What it does | How long it lasts |
|---|---|---|
_ga | Google Analytics. A random number that tells one browser apart from another, so we can count visitors. | 13 months |
_ga_<ID> | Google Analytics. Keeps track of the pages you view during a visit. | 13 months |
How we use Google Analytics
- Who provides it: Google Analytics is provided by Google Ireland Limited (for visitors in the UK and Europe) and Google LLC. Google processes the data on our behalf, under Google’s data processing terms.
- Why we use it: to understand how people find and use India Grows, such as which pages are popular and where visitors get stuck, so we can improve the site. We see reports with totals and trends, not profiles of individual people.
- How it works with our cookie banner: we use Google’s “Consent Mode”. The Google Analytics tag is on every page, but until you accept analytics cookies it runs in a restricted mode: it does not set or read any cookies, and it sends Google only limited, cookieless signals about each page view (such as the page, the time, your browser and device type and your approximate location), without an identifier that links your visits together. Google uses these signals to estimate overall visitor numbers. If you accept, Google Analytics also uses its cookies, so it can recognise repeat visits.
- What it collects (if you accept): the pages you visit and how long you spend on them, the website or search that brought you here, your device type, browser, operating system and screen size, your approximate location (country and city) and the random identifier in the
_gacookie. Google Analytics 4 works out your approximate location from your IP address but does not log or store the IP address itself. - What it does not collect: we do not send Google your name, email address, messages, deals or any other account details. We have switched off Google signals and ad personalisation, and we do not use Google Analytics data for advertising.
- Legal basis: for analytics cookies, your consent, which you give by clicking “Accept analytics” and can withdraw at any time. For the cookieless signals sent before you choose, or after you reject, our legitimate interests in understanding, in general terms, how many people use the site and which pages they view.
- How long it is kept: Google Analytics data is kept for 14 months and then deleted automatically. The cookies themselves last up to 13 months.
- International transfers: Google may process the data in the United States and other countries. Google relies on the UK Extension to the EU-US Data Privacy Framework and on standard contractual clauses to protect it.
- More information and opting out: see how Google uses information from sites that use its services. As well as our Cookie settings link, you can install Google’s Google Analytics opt-out browser add-on.
We do not use advertising cookies, show ads, or allow other companies to track you on India Grows. If we ever add other non-essential cookies, we will update this policy and ask for your consent first.
7. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict how we use it, and to receive a copy of it in a portable format. Where we rely on your consent, such as for Google Analytics, you can withdraw it at any time using the Cookie settings link. You can update most of your details yourself in My Account. To exercise any other right, contact us using the details below. We will respond within one month.
If you are in the UK you can complain to the Information Commissioner’s Office (ico.org.uk). If you are in the EU or India, you can contact your local data protection authority. We would appreciate the chance to resolve your concern first.
8. Age
India Grows is for business use by adults. You must be 18 or over to register, and we do not knowingly collect data from children.
9. Keeping your data secure
We use encrypted connections (HTTPS), one-time login codes that expire quickly and are stored only in hashed form, secure session cookies and restricted administrator access. No online service is completely secure, so please keep your email account secure (login codes are sent there) and never share bank details or money with someone you have not verified.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page with its “Last updated” date. If we make significant changes, we will tell members on the site.
11. Contact
Medicto Ltd, company number 10447946, registered in England and Wales, United Kingdom. You can contact us by email at [email protected], by registering and messaging the India Grows team through the site, or by writing to Medicto Ltd at its registered office address, which is listed on the UK Companies House register under company number 10447946.