Legal Documents
Respondent's Consent for Personal Data Processing
Version 1.0, effective September 15, 2025
Whose data is processed
This consent is provided by You (the Respondent), a natural person participating in an Activity.
An Activity is a specific research/marketing event conducted by gro.now or a Partner and described in the invitation/card/rules of the activity. Examples of Activities: survey/questionnaire, in-depth interview, focus group, UX test, diary/panel, product experiment, contest/prize draw.
If you are 16-17 years old, consent is provided by your legal representative (parent, guardian). Please show them this text so they can read it and decide on providing consent.
By confirming your participation, you affirm that you have reached the required age and have provided accurate information; gro.now is entitled to rely on this affirmation until reasonable doubts arise. If a discrepancy is found, participation is suspended until the required confirmations are received.
An Activity is a specific research/marketing event conducted by gro.now or a Partner and described in the invitation/card/rules of the activity. Examples of Activities: survey/questionnaire, in-depth interview, focus group, UX test, diary/panel, product experiment, contest/prize draw.
If you are 16-17 years old, consent is provided by your legal representative (parent, guardian). Please show them this text so they can read it and decide on providing consent.
By confirming your participation, you affirm that you have reached the required age and have provided accurate information; gro.now is entitled to rely on this affirmation until reasonable doubts arise. If a discrepancy is found, participation is suspended until the required confirmations are received.
Who processes the data
Controller: LLP "Gro.now" (brand gro.now), BIN 241040012133, RK, Almaty, Satpaev St., 90/54, apt. 5, 050000; e-mail: hi@gro.now; website: https://gro.now/ (hereinafter – "gro.now", "Controller").
In specific Activities, the controller may be the Partner indicated in the card/rules; then gro.now processes data on behalf of the Partner as a processor.
For more details on the status and powers of the Partner, see the User Agreement and the Privacy Policy, as well as the terms of the specific Activity.
In specific Activities, the controller may be the Partner indicated in the card/rules; then gro.now processes data on behalf of the Partner as a processor.
For more details on the status and powers of the Partner, see the User Agreement and the Privacy Policy, as well as the terms of the specific Activity.
Your consent
You (your legal representative) give this consent to the processing of personal data by gro.now when you perform at least one of the following actions (depending on the channel):
- check the 'box'/click 'Agree/Participate/Accept/Continue';
- submit a form/questionnaire/answers or authorize/register;
- in a messenger, press /start or the 'Start/Participate/Rate' buttons or send the first message after the card with a link to this Consent;
- scan a QR code and send the first reply/form;
- continue to use the site (https://gro.now/) after a banner with a link to the Cookie Policy is displayed.
We record the fact of consent (date/time, channel, version, identifier) in our electronic log for evidentiary purposes.
Documents
The processing of your personal data is governed by:
- Privacy Policy,
- The Cookie Policy,
- The User Agreement,
- this Consent,
- The Activity Rules (if the rules establish special processing conditions)
In case of discrepancies, the special rules/consents of the Activity take precedence.
What we process and why
Categories: account/contact data; answers and attachments in surveys; data on rewards (including IIN and details for cash payments); technical data/logs and cookies/SDKs; communication history; settings and preferences.
Purposes: conducting activities and anti-fraud checks; accruing/paying rewards/points; support and notifications; analytics and service improvement (on anonymized datasets); compliance with legal requirements (taxes/accounting/AML at payment partners); security.
Expanded details of the data for which consent is given, including the category, purpose, and methods of processing, are defined in the Privacy Policy and the Cookie Policy.
Purposes: conducting activities and anti-fraud checks; accruing/paying rewards/points; support and notifications; analytics and service improvement (on anonymized datasets); compliance with legal requirements (taxes/accounting/AML at payment partners); security.
Expanded details of the data for which consent is given, including the category, purpose, and methods of processing, are defined in the Privacy Policy and the Cookie Policy.
Data transfer to third parties and Partners
You agree to the transfer of your personal data to third parties and Partners.
We only transfer data to the extent necessary for conducting the Activity and operating the service. Recipients may include:
We only transfer data to the extent necessary for conducting the Activity and operating the service. Recipients may include:
- IT infrastructure (hosting/cloud/CDN/monitoring),
- communication services (e-mail, SMS, messengers, call center),
- providers of payments/rewards and prize delivery,
- anti-fraud/security and analytics services,
- consultants under NDA (lawyers, auditors),
- government bodies – as required by law,
- the Partner-organizer of the Activity (as a rule, aggregated statistics; personal data – only if provided for by the terms of the Activity/your consent and on the principle of minimization).
You can familiarize yourself with the specific categories, legal grounds, terms, and the current list of sub-processors in the Privacy Policy, the Cookie Policy, and the List of sub-processors (provided upon your separate request).
Cross-border transfer
Part of the infrastructure and contractors may be located outside the Republic of Kazakhstan.
You agree to the cross-border transfer of your data.
The transfer is carried out with the application of contractual and technical safeguards (minimization, encryption, access control).
Your rights and the procedure for their implementation are in the Privacy Policy. The list of key recipients/countries and the protective measures used are in the Privacy Policy, the Cookie Policy, and the List of sub-processors (provided upon your separate request).
You agree to the cross-border transfer of your data.
The transfer is carried out with the application of contractual and technical safeguards (minimization, encryption, access control).
Your rights and the procedure for their implementation are in the Privacy Policy. The list of key recipients/countries and the protective measures used are in the Privacy Policy, the Cookie Policy, and the List of sub-processors (provided upon your separate request).
Term of validity, withdrawal of consent, and consequences
Consent is valid until the processing goals are achieved, the Activity is completed, and/or you withdraw it. You can withdraw consent partially or fully:
- through profile settings/the 'Unsubscribe' link/a command in the bot;
- by writing to hi@gro.now (specify the channel and which part of the consent you wish to withdraw: marketing, non-essential cookies/SDKs, participation in a specific Activity, etc.).
The withdrawal is effective for the future and does not affect processing that has already been lawfully carried out. Upon full withdrawal, we cease participation and related operations (e.g., communications and accrual of new rewards). If a service is technically impossible without processing certain data (identification for prize payment/delivery, fraud prevention), the corresponding functions will become unavailable.
In this case:
In this case:
Your rights
You have the right to:
- access your data and a copy of it;
- request the correction of inaccurate data;
- request the deletion of data or restriction of processing – in cases provided by law;
- object to processing (where applicable), withdraw consent (including separate consents for marketing, non-essential cookies/SDKs);
- request data portability — for data you provided to us that is processed automatically, where applicable;
- manage subscriptions and cookie/SDK settings;
- file a complaint with the authorized body for the protection of the rights of personal data subjects of the RK and/or in court.
How to exercise your rights: through the account interface (if available), in the bot, or by e-mail to hi@gro.now. To protect data, we may request identity verification and clarifying information (what exactly is requested, for which channel, for what period). We respond to requests within the timeframes established by law and specified in the Privacy Policy, the Cookie Policy. Requests that are clearly excessive or repetitive may be processed on a paid basis within reasonable limits.
Limitations: we do not delete or restrict data that we are required to store by law or that is necessary for the establishment, exercise, or defense of legal claims. The full procedure for exercising rights and exceptions is in the Privacy Policy, the Cookie Policy.
Limitations: we do not delete or restrict data that we are required to store by law or that is necessary for the establishment, exercise, or defense of legal claims. The full procedure for exercising rights and exceptions is in the Privacy Policy, the Cookie Policy.