The Growth Files
PRIVACY

Privacy Policy

Last updated Aug 23, 2026

This page explains what The Growth Files actually collects, why, and how you can control it — including cookie consent for analytics.

Who operates The Growth Files

The Growth Files is the personal marketing practice of Orling Benavides, based in Amsterdam, the Netherlands. It currently operates as an individual practice — no separate registered company name, business registration number, or postal address is published beyond the contact details listed in Contact below.

Information visitors provide

Some information is only collected when you choose to provide it — by submitting the contact form or subscribing to the newsletter. The sections below describe exactly what each of those collects and why.

Contact form

The contact form may process:

  • Name
  • Email address
  • Company (optional)
  • Subject
  • Message
  • Opportunity type (the option you select describing the kind of project or role)

Submitting the form sends this information, by email, to Orling Benavides via Resend (see Email processing), with your email address set as the reply-to address so a response can reach you directly.

Newsletter

Subscribing to the newsletter collects your email address, which is stored in a Resend Audience (a mailing list managed through Resend, the email platform this site uses). It's retained until you unsubscribe or request deletion — no more specific retention period is currently configured beyond that.

Technical / security processing

The contact and newsletter forms use your IP address to apply a short-term rate limit, to reduce spam and abuse. This is held only in server memory for the duration needed to enforce that limit — it isn't written to a database or log, isn't retained afterward, and isn't shared with any third party.

Analytics

This site can use Google Analytics 4, loaded through Google Tag Manager (see below), to understand how visitors use the site — for example, which pages are viewed, approximate location derived from IP address, device and browser type, and on-site actions such as viewing a case study or blog post. Analytics only runs if you grant Analytics consent through the cookie banner or Cookie settings; it does not run before that choice is made.

Google Tag Manager

Google Tag Manager is tag-management infrastructure — it doesn't collect data on its own, but it's the mechanism this site uses to load Google Analytics (and any future analytics or marketing tag) in a centrally managed, consent-aware way, rather than adding separate scripts for each one.

Hosting

This site is hosted on Vercel. Like any hosting provider, Vercel processes standard web request data (such as IP address and request metadata) as part of serving the site's pages and assets.

Content infrastructure

Editorial content — blog posts and case studies — is managed in Sanity, a headless content management system, and images are served through Sanity's image CDN. This infrastructure stores and delivers site content; it isn't used to collect information about visitors.

Email processing

Resend is the email platform used to deliver contact-form submissions and to manage the newsletter Audience described above.

Data retention

  • Contact-form submissions: retained as needed to respond to your inquiry, as an email.
  • Newsletter email addresses: retained until you unsubscribe or request deletion.
  • Cookie consent preference: retained for 12 months, or until you change it.
  • Rate-limiting IP data: in-memory only, cleared automatically; never persisted.
  • Analytics data (when consented to): subject to Google Analytics' own retention settings, which are configurable independently of this site's code.

Third-party processors

  • Vercel — hosting
  • Sanity — content management and image delivery
  • Resend — contact-form email delivery and newsletter management
  • Google (Tag Manager, Analytics) — tag management and, with consent, analytics

International data transfers

Some of the providers listed above may process data outside the European Economic Area, including in the United States. Where that happens, these providers generally rely on their own appropriate safeguards — such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses — as part of their standard compliance programs.

Your rights

Depending on your location, you may have the right to:

  • Access the personal data held about you
  • Correct inaccurate data
  • Request erasure of your data
  • Restrict or object to certain processing
  • Receive your data in a portable format
  • Withdraw consent at any time, without affecting processing that already took place
  • Lodge a complaint with your local data protection supervisory authority

Contact

For questions about this policy or to exercise any of the rights above, contact Orling Benavides at benavidesorling@gmail.com.