Privacy Policy

Last updated: August 2026

This Privacy Policy explains how BRAVA collects, uses and protects personal data through bravagrowth.com and its subdomains (the “Site”).

This policy covers data collected through the Site. Personal data processed in the course of a client engagement is governed by the confidentiality and data protection provisions of the applicable services agreement.

1. Who we are

BRAVA is a strategic growth firm operating across Central America, Mexico and the United States through four units: BRAVA Growth, BRAVA Media, BRAVA Retail Labs and BRAVA Ventures. Depending on your location and the entity you engage with, your personal data is controlled by BRAVA, Sociedad por Acciones Simplificada de Capital Variable (“BRAVA, S.A.S. de C.V.”), NIT 0623-040725-117-0, San Salvador, El Salvador; or BRAVA Media México, S.A. de C.V., RFC BMM250827HT1, Cuidad de México, Mexico. Enquiries submitted through this Site are received by BRAVA, S.A.S. de C.V. and shared internally with the entity responsible for your market. Data protection contact for all jurisdictions: hello@bravagrowth.com.

2. What we collect

When you complete a form, book a call, subscribe to Insights or contact us directly, we collect your name, email address, company, role, and any information you choose to include in your message or in a qualifying questionnaire.

When you visit the Site we collect IP address, browser and device type, operating system, pages viewed, time on page, referring source, and date and time of access. We do not collect payment information through the Site. We do not knowingly collect sensitive personal data, and we ask that you do not submit it through the Site.

3. Cookies and tracking

The Site uses essential cookies required for the Site to function, analytics cookies through Google Analytics 4 and Google Tag Manager, and advertising cookies through Meta Pixel and Google Ads. Non essential cookies are set only with your consent. You can withdraw or change your consent at any time through the cookie preferences control on the Site, and you can block or delete cookies through your browser settings.

4. Why we process your data

We process personal data to respond to enquiries and evaluate whether an engagement is a fit, schedule discovery calls, send Insights and communications you have subscribed to, measure and improve Site performance and marketing effectiveness, and comply with legal, tax and accounting obligations. Where the GDPR applies, legal bases include consent, legitimate interest and legal obligation. Where Mexican law applies, this policy constitutes the privacy notice required under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares.

5. Who we share it with

We do not sell personal data. We share data with service providers who process it on our behalf, under contract and only for the purposes described above: Framer, Google, Meta, Calendly, Google Workspace and monday.com. Personal data may also be shared between BRAVA, S.A.S. de C.V. and BRAVA Media México, S.A. de C.V. where necessary to respond to your enquiry or serve your market.

6. International transfers

BRAVA operates across multiple jurisdictions and uses service providers located in the United States and the European Union. Where personal data is transferred outside your jurisdiction, we rely on Standard Contractual Clauses or an equivalent transfer mechanism recognized under applicable law.

7. How long we keep it

Enquiries that do not result in an engagement are retained for 24 months from last contact. Marketing subscribers are retained until you unsubscribe, plus 12 months. Analytics data is retained for 14 months, per the retention setting configured in Google Analytics. Records required for legal, tax or accounting purposes are retained for the period required by applicable law in El Salvador and Mexico.

8. Security

We apply reasonable technical and organizational measures appropriate to the nature of the data we hold, including encrypted transmission (TLS), access controls limiting personal data to personnel who require it, and reputable service providers with their own security programs. No method of transmission or storage is completely secure. We do not guarantee absolute security, and we ask that you not transmit confidential business information through Site forms or unsecured email.

9. Your rights

Depending on your jurisdiction, you may have the right to access the personal data we hold about you, request correction or deletion, object to or restrict processing, withdraw consent, receive your data in a portable format, and lodge a complaint with your local data protection authority. If you are in Mexico, you may exercise your ARCO rights and revoke your consent at any time by writing to hello@bravagrowth.com. If you are a California resident, you may request disclosure, deletion, and opt out of the sharing of personal information for cross context behavioural advertising. BRAVA does not sell personal information. We respond within 30 days and may need to verify your identity before acting on a request.

10. Marketing communications

We send Insights and related communications only to people who have subscribed or requested them. Every message includes an unsubscribe link, and you can also unsubscribe by writing to hello@bravagrowth.com.

11. Third party sites

The Site links to third party websites and platforms, including scheduling tools and social networks. We are not responsible for their privacy practices.

12. Children

The Site is directed to business professionals and is not intended for anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, write to hello@bravagrowth.com and we will delete it.

13. Changes

We may update this policy. The version published on the Site is the version in force, and the date at the top reflects the most recent revision. Where changes are material, we will provide notice through the Site or by email to subscribers.

14. Contact

hello@bravagrowth.com