Privacy Policy | Merigrove

Privacy Policy

Last updated: 8 August 2026

This Privacy Policy explains how Kacper Wiloch, trading as Merigrove, collects, uses, stores, and protects your personal data, including data collected through our website, our lead forms, and our SMS/text messaging programme.

1. Who we are

Kacper Wiloch (trading as "Merigrove", "we", "us", "our") is the data controller responsible for your personal data. We are a revenue operating system advisory and consulting firm serving founder led businesses.

Data controllerKacper Wiloch, sole trader (jednoosobowa działalność gospodarcza)
Trading name (DBA)Merigrove
Registered business name (CEIDG)Ethos Revenue Group Kacper Wiloch
Registered addressOsiedle na Wzgórzu 9, 84-353 Lubowidz, Poland
Tax identifiersNIP 8411742776 · VAT-EU PL8411742776 · REGON 542495275
Telephone+48 500 080 682
Contact emailadmin@merigrove.com
Websitehttps://merigrove.com
Governing jurisdictionPoland (European Union)

For any questions about this policy or about how your data is handled, contact us at admin@merigrove.com or call +48 500 080 682, Monday to Friday, 09:00 to 18:00 CET.

2. Scope of this policy

This policy applies to personal data we process about:

  • visitors to our website and pages hosted on the merigrove.com domain;
  • individuals who submit a lead form, enquiry, or contact request;
  • clients and prospective clients of our advisory and consulting services;
  • individuals who opt in to receive text messages (SMS) from us.

3. What data we collect

We collect the following categories of personal data:

CategoryExamplesSource
Identity and contact data Name, email address, mobile telephone number, company name, job title You, via our lead forms and correspondence
Mobile opt-in and consent data Your mobile telephone number, the record of your opt-in to SMS, the date and time of consent, the specific form and page on which consent was given, the wording of the consent you agreed to, and your IP address at the time of consent Collected automatically at the point of opt-in
Communications data Content of messages you send us, including SMS replies, emails, and enquiry text You
Transaction data Records of services purchased, payment status (payment card details are handled by our payment processor, not by us) You and our payment processor
Technical and usage data IP address, browser type, device information, pages viewed, referral source Collected automatically via cookies and similar technologies

We do not intentionally collect special category data (such as health, racial or ethnic origin, or political opinions), and we ask that you do not submit such data to us through our forms or messages.

We do not purchase, rent, or otherwise acquire telephone numbers from lead lists, data brokers, or affiliate networks. Every mobile number in our messaging programme has been provided directly by the individual concerned, on a form hosted on the merigrove.com domain.

4. How we use your data and our lawful bases

Under the EU General Data Protection Regulation (GDPR), we must have a lawful basis for each use of your personal data. Our uses and bases are:

PurposeLawful basis (GDPR)
Responding to enquiries and providing our consulting and advisory servicesPerformance of a contract, or steps taken at your request prior to entering a contract
Sending the guides, resources, or materials you have requested by emailConsent, and steps taken at your request prior to entering a contract
Sending appointment bookings, confirmations, and reminders by SMSConsent, and performance of a contract
Sending two-factor authentication and verification codes by SMSLegitimate interests (securing your account and our services)
Responding conversationally to inbound leads and enquiries by SMSConsent, and steps taken at your request prior to entering a contract
Client onboarding communications by SMSConsent, and performance of a contract
Maintaining records of consent and opt-out to evidence complianceLegal obligation, and legitimate interests
Maintaining records, accounting, and legal complianceLegal obligation, and legitimate interests
Securing and improving our websiteLegitimate interests

Where we rely on consent, you may withdraw that consent at any time (see sections 5 and 9). Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

5. SMS and mobile messaging programme

Your mobile opt-in data is never shared for marketing.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service, is permitted. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5.1 Programme name and description

Our messaging programme is called Merigrove Client Messaging. It is operated by Kacper Wiloch, trading as Merigrove. The programme is transactional and operational only. If you opt in, we may send you text messages for the following purposes:

  • appointment bookings, confirmations, and reminders;
  • two-factor authentication and security verification codes;
  • conversational replies in response to enquiries you have made as an inbound lead;
  • client onboarding communications.

We do not send marketing or promotional text messages under this programme. Our messaging is limited to the operational purposes listed above.

5.2 How you opt in

You opt in to receive text messages by submitting your mobile telephone number and separately ticking an SMS consent box on a lead form embedded on a page of the merigrove.com domain. The consent box is not pre-ticked, and ticking it is not required in order to submit the form. Consent to receive text messages is not a condition of purchasing any goods or services. We record the date, time, page, IP address, and the exact consent wording you agreed to.

The consent wording you agree to reads as follows:

"I consent to receive transactional text messages from Kacper Wiloch trading as Merigrove at the phone number provided, covering appointment bookings, confirmations and reminders, security and verification codes, replies to enquiries I have made, and client onboarding. Message frequency varies. Message and data rates may apply. Reply HELP for help or STOP to opt out."

5.3 Message frequency, rates, and carriers

Message frequency varies depending on your interaction with us, for example the number of appointments you book. Message and data rates may apply, depending on your mobile carrier and plan. Carriers are not liable for delayed or undelivered messages.

5.4 How to opt out (STOP) and get help (HELP)

You can cancel the SMS service at any time by replying STOP to any of our text messages. We also accept UNSUBSCRIBE, END, QUIT, CANCEL, and STOPALL. After you send an opt-out keyword, we will send you a single confirmation message and will then stop sending you text messages. You will no longer receive SMS messages from us unless you opt in again.

If you want more information at any time, reply HELP to any message. You can also reach our customer care team by email at admin@merigrove.com or by telephone on +48 500 080 682, Monday to Friday, 09:00 to 18:00 CET.

5.5 Age restriction

You must be 18 years of age or older to opt in to our SMS programme.

6. Who we share data with

We use a small number of trusted third-party service providers ("sub-processors") to operate our business. These providers process data only on our documented instructions and only to provide their service to us. They are not permitted to use your data for their own purposes, and they are not permitted to use it for marketing.

ProviderPurpose
HighLevel (GoHighLevel / LeadConnector)Customer relationship management, lead forms, and message delivery
StripePayment processing
SkoolCommunity and programme delivery platform
MicrosoftWebsite analytics and session replay (Microsoft Clarity)

We may also disclose data where required by law, to enforce our terms, or to protect our rights, property, or safety.

We do not sell your data.

We do not sell, rent, or trade personal data, and we do not disclose personal data to third parties for their own marketing purposes. Engaging a sub-processor to deliver a service on our behalf, under contract and on our instructions, is not the same as sharing or selling your data. As stated in section 5, mobile opt-in data and consent are never shared with any third party for marketing or promotional purposes.

7. International data transfers

We are established in Poland (European Union). Some of our sub-processors are located outside the European Economic Area (EEA), including in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision, to ensure your data receives an equivalent level of protection.

8. Data retention

We keep your personal data only for as long as necessary for the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Specifically:

Record typeRetention period
Enquiry and lead data where no engagement follows24 months from last contact, then deleted or anonymised
Client records, contracts, and accounting recordsAs required by Polish tax and accounting law, currently 5 years from the end of the relevant tax year
SMS opt-in and consent recordsFor as long as you remain opted in, and for 4 years afterwards, to evidence that consent was validly obtained
SMS opt-out records10 years from the date of opt-out, so that we can continue to honour your opt-out and evidence that we have done so
Website technical and usage data26 months

When data is no longer required, we securely delete or anonymise it.

9. Your rights

9.1 Rights under GDPR (for individuals in the EU/EEA and UK)

You have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate or incomplete data;
  • request erasure of your data ("right to be forgotten");
  • restrict or object to our processing of your data;
  • data portability (receive your data in a structured, machine-readable format);
  • withdraw consent at any time where we rely on consent;
  • lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), https://uodo.gov.pl.

9.2 Rights for United States residents

Depending on your state of residence (for example, under the California Consumer Privacy Act, as amended), you may have the right to:

  • know what categories of personal data we collect and how we use them;
  • request access to the specific personal data we hold about you;
  • request deletion of your personal data;
  • opt out of the sale or sharing of your personal data. We do not sell your personal data, and we do not share your mobile opt-in data with third parties for their marketing purposes;
  • not be discriminated against for exercising these rights.

9.3 How to exercise your rights

To exercise any of these rights, email us at admin@merigrove.com or write to us at Kacper Wiloch, Osiedle na Wzgórzu 9, 84-353 Lubowidz, Poland. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on your request.

10. Cookies and tracking

Our website uses cookies and similar technologies to operate the site, remember your preferences, and understand how the site is used. You can control cookies through your browser settings. Where required by law, we ask for your consent before setting non-essential cookies.

Analytics — Microsoft Clarity. We use Microsoft Clarity, an analytics and session-replay service provided by Microsoft Corporation, to understand how visitors use our website — for example, which pages are viewed and how our forms and quiz are used — so that we can improve it. Clarity sets cookies and may capture interactions such as mouse movement, clicks, scrolling and page navigation. This is a non-essential analytics technology, so we load it only after you give consent through our cookie banner. If you decline, Clarity is not loaded and none of its cookies are set. Text you enter into form fields (such as your name, email address and phone number) is masked and is not recorded. Our lawful basis for this processing is your consent, which you may withdraw at any time by clearing the cookies in your browser. Microsoft processes this data as described in the Microsoft Privacy Statement (https://privacy.microsoft.com/privacystatement)

11. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, but we work to protect your data using industry-standard safeguards and by limiting access to those who need it.

12. Children

Our services and messaging programme are intended for individuals aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at admin@merigrove.com and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated where appropriate. We encourage you to review this policy periodically.

14. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, contact:

Kacper Wiloch (trading as Merigrove)
Osiedle na Wzgórzu 9, 84-353 Lubowidz, Poland
Telephone: +48 500 080 682
Email: admin@merigrove.com

Kacper Wiloch, trading as Merigrove. Osiedle na Wzgórzu 9, 84-353 Lubowidz, Poland. NIP 8411742776. This Privacy Policy is provided for transparency and compliance purposes and does not constitute legal advice.