Privacy Policy

This Privacy Policy explains how Grid Global B.V., trading as Far & Wide IO ("we," "us," or "our"), collects, uses, and protects your personal data when you visit our website at www.farandwide.io or use our services.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Dutch GDPR Implementation Act (Uitvoeringswet AVG, "UAVG").

Data Controller: Grid Global B.V., Pastoor Ohllaan 39, 3451CB Vleuten, Netherlands. KVK number: 84531401. Email: hello@farandwide.io.

We collect and process the following categories of personal data.

Information you provide directly:

• Email address (when you place an order; the report is delivered to this address)
• Brand name, brand website URL, and target market/region (necessary for delivering our services)
• Billing information (processed by Stripe; we do not store your payment card details)
• Name, company name, and any other information you voluntarily include in communications with us (e.g., contact forms, emails)

Information collected automatically:

• IP address and approximate location (country/region)
• Browser type, device type, and operating system
• Pages visited, time spent on pages, and referring URL
• Cookies and similar tracking technologies (see Section 7)

• Processing and delivering your order (AI Visibility Report, AEO Audit) — Performance of a contract (GDPR Art. 6(1)(b))
• Sending order confirmations and delivery notifications — Performance of a contract (GDPR Art. 6(1)(b))
• Responding to your enquiries — Legitimate interest (GDPR Art. 6(1)(f))
• Sending marketing emails and newsletters — Your consent (GDPR Art. 6(1)(a))
• Improving our website and services through analytics — Legitimate interest (GDPR Art. 6(1)(f))
• Complying with legal and tax obligations — Legal obligation (GDPR Art. 6(1)(c))
• Preventing fraud and securing our website — Legitimate interest (GDPR Art. 6(1)(f))

4.1. We only send marketing emails if you have given your explicit, freely given consent (opt-in). We never use pre-ticked checkboxes.

4.2. You can withdraw your consent at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us at hello@farandwide.io.

4.3. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

4.4. We do not sell, rent, or share your email address with third parties for their marketing purposes.

We may share your personal data with the following categories of recipients, only to the extent necessary:

• Stripe, Inc. — Payment processing (USA, EU Standard Contractual Clauses in place)
• HubSpot, Inc. — Customer relationship management (CRM), order management, and email communications (USA, EU Standard Contractual Clauses in place)
• Google LLC (Google Analytics) — Website analytics (USA, EU Standard Contractual Clauses in place)
• Meta Platforms, Inc. (Meta Pixel) — Advertising measurement and remarketing on Facebook and Instagram (USA, EU Standard Contractual Clauses in place)
• Squarespace, Inc. — Website hosting (USA, EU Standard Contractual Clauses in place)

We do not sell your personal data. When personal data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are in place, such as EU Standard Contractual Clauses (SCCs) or an adequacy decision by the European Commission.

• Order and billing records — 7 years (Dutch tax law requirement)
• Email marketing consent records — Until consent is withdrawn, plus 1 year for proof of consent
• Website analytics data — 26 months
• Contact form enquiries — 1 year after last communication

After the retention period, data is securely deleted or anonymised.

7.1. Our website uses cookies — small text files stored on your device — to ensure the website functions properly and to understand how visitors use our site.

Essential cookies are necessary for the website to function (e.g., session management, security). These do not require your consent.

Analytics cookies (such as Google Analytics) help us understand how visitors interact with our website. These are only placed after you give your explicit consent via our cookie banner.

Marketing cookies (such as Meta Pixel) are used to measure the effectiveness of our advertising campaigns and to show you relevant ads on Facebook and Instagram. These are only placed with your explicit consent.

7.2. You can change your cookie preferences at any time through our cookie settings on the website, or by adjusting your browser settings.

7.3. For more information about specific cookies we use, see our cookie banner settings.

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — You can request a copy of the personal data we hold about you.
• Right to rectification — You can ask us to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — You can ask us to delete your data, subject to legal retention obligations.
• Right to restrict processing — You can ask us to limit how we use your data in certain circumstances.
• Right to data portability — You can request your data in a structured, commonly used, machine-readable format.
• Right to object — You can object to processing based on legitimate interest, including profiling. You can object to direct marketing at any time.
• Right to withdraw consent — Where processing is based on your consent, you can withdraw it at any time.
• Right to lodge a complaint — You have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): www.autoriteitpersoonsgegevens.nl.

To exercise any of these rights, please contact us at hello@farandwide.io. We will respond within one (1) month of receiving your request, as required by the GDPR. This period may be extended by two further months if the request is complex, in which case we will inform you.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit
• Secure payment processing via Stripe (PCI DSS compliant)
• Access controls limiting data access to authorised personnel only
• Regular review of our data processing practices

No method of electronic transmission or storage is 100% secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

Our Services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of every website you visit.

We may update this Privacy Policy from time to time. Changes take effect upon publication on this page. The "Last updated" date at the top indicates when the most recent changes were made. For material changes, we will notify you by email or a prominent notice on our website.

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a complaint about how we handle your data, please contact us:

• Email: hello@farandwide.io
• Company: Grid Global B.V.
• KVK number: 84531401
• Address: Pastoor Ohllaan 39, 3451CB Vleuten, Netherlands

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): www.autoriteitpersoonsgegevens.nl.