Data Privacy & Cookie Policy

Effective Date: 17 May 2025 Last Reviewed: 9 October 2025

1. Who We Are

This website (https://growthack.io) is operated by Growthack Ltd, a company registered in England and Wales (No. 12868240, VAT Reg GB392684357).

Registered office: 31 Park Row, Nottingham NG1 6FQ.
Growthack Ltd is the data controller for all personal data collected through this site.
ICO registration number: ZB229968
Contact email: [email protected]

2. Introduction

Growthack Ltd is committed to protecting your privacy and complying with the UK GDPR and Data Protection Act 2018. This policy explains how we collect, use, store and share personal data when you visit our website or engage with our services.

3. Information We Collect

3.1 Personal Data You Provide

• Comments / Forms: Name, email address, message content and IP address (for spam detection).
• Contact / Project Enquiries: Name, email, phone number, organisation and details you supply.
• Orders / Payments: Name, address, email, phone number and payment details (processed securely via Stripe or another provider).

3.2 Automatically Collected Data

Cookies and similar technologies collect information about your browser, device, pages viewed and time on site.

4. How We Use Your Information

• Provide, manage and improve our services.
• Respond to enquiries and deliver customer support.
• Process orders and payments.
• Personalise and enhance the user experience.
• Comply with legal and regulatory obligations.

5. Legal Bases for Processing

• Consent: e.g. marketing subscriptions.
• Contractual necessity: performing an agreement with you.
• Legal obligation: record keeping and tax purposes.
• Legitimate interests: website improvement and security.

6. Data Storage and Security

• Personal data is stored within the UK and EEA on secure, ISO 27001-certified cloud platforms (Google Workspace, HubSpot, QuickBooks Online, ClickUp).
• Data is encrypted in transit and at rest.
• Access is restricted to authorised staff using multi-factor authentication and least-privilege principles.
• Security controls are reviewed regularly as part of our Cyber Essentials certification.

7. Data Retention

We retain personal data only as long as necessary to fulfil its purpose and meet legal or accounting requirements. Full details are set out in our Record Retention & DSAR Procedure.

8. Sharing Your Information

We do not sell or rent personal data. We share it only with:

• Service providers acting under contract (e.g. Stripe, HubSpot, Google Workspace).
• Professional advisers and legal authorities where required by law.

9. Your Rights

Under the UK GDPR you have the right to:

• Access your data and receive a copy.
• Request correction or deletion.
• Restrict or object to processing.
• Request data portability.

To exercise any right, email [email protected].
If you are unsatisfied with our response, contact the Information Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint/.

10. Cookies and Tracking

10.1 Purpose

Cookies help the site function and improve performance.

10.2 Types of Cookies

• Necessary: Core functionality.
• Analytics: Google Analytics 4 and Microsoft Clarity to analyse traffic and usage.
• Marketing: Google Ads, Facebook Pixel and LinkedIn for advertising and conversion tracking.

10.3 Consent and Control

You can manage cookie preferences via our banner or your browser settings at any time.

10.4 Retention

Analytics cookies expire within 13 months. Marketing cookies expire within 6 months unless renewed by consent.

11. Third-Party Services and Transfers

We use trusted providers including Google, Microsoft, Meta, LinkedIn, HubSpot, YouTube and Elevar. Where data may transfer outside the UK or EEA, appropriate safeguards such as Standard Contractual Clauses ensure an equivalent level of protection.

12. Children’s Privacy

Our website and services are not intended for children under 16, and we do not knowingly collect data from anyone under that age.

13. Changes to This Policy

We review this policy at least annually and update it if our practices change. The latest version will always appear on this page.

Contact Us

Growthack Ltd, 31 Park Row, Nottingham, NG1 6FQ

• Email: [email protected]
• Registered in England and Wales No. 12868240
• VAT Reg GB392684357
• ICO Registration ZB229968