Privacy Policy

1. Data Controller

Growth Ledger is a trading name operated as a sole trader based in England. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is Growth Ledger.

• Email: support@growthledger.ai
• Registered address: [To be confirmed upon incorporation]
• Company number: [To be confirmed upon incorporation]
• ICO registration: [To be confirmed upon registration]

2. Information We Collect

We collect personal data in the following ways:

Contact form

When you submit our contact form, we collect your name, email address, company name, sales channels, revenue range, and message.

Newsletter signup

When you subscribe to our newsletter, we collect your name and email address.

Automatically collected data

Our hosting provider (Vercel) automatically collects standard server log data, including your IP address, browser type, referring URL, and pages visited. This data is used for website security and performance monitoring.

Cookies

We use a small number of cookies. See Section 7 for full details.

3. How We Use Your Information

We process your personal data for the following purposes and on the following legal bases:

4. Data Sharing & Third-Party Processors

We do not sell your personal data. We may share your data with the following third-party processors who act on our behalf:

• Vercel Inc. — website hosting and edge network (USA, covered by the EU–US Data Privacy Framework)
• Calendly LLC — appointment booking system
• Email service provider — for delivering transactional and marketing emails (provider details to be confirmed)

Each processor is contractually required to handle your data securely and only for the purposes we specify.

5. Data Retention

We retain your personal data only as long as necessary:

• Contact form enquiries: 24 months from your last contact, then securely deleted.
• Newsletter subscribers: retained until you unsubscribe. Data deleted within 30 days of unsubscribing.
• Client engagement data: retained for 7 years after the engagement ends to meet regulatory and accounting obligations.
• Server logs: automatically purged by Vercel per their retention policy (typically 30 days).

6. Your Rights Under UK GDPR

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

• Right of access — request a copy of the personal data we hold about you (Subject Access Request).
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data where there is no compelling reason for continued processing.
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — request your data in a structured, commonly used, machine-readable format.
• Right to object — object to processing based on legitimate interest or for direct marketing purposes.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please email support@growthledger.ai with “Data Rights Request” in the subject line. We will respond within one calendar month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Information Commissioner's Office
• Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
• Tel: 0303 123 1113
• Website: ico.org.uk

7. Cookies

Cookies are small text files stored on your device when you visit a website. We use the following cookies:

We do not currently use analytics, advertising, or third-party tracking cookies. If this changes in the future, we will update this policy and request your consent before setting any non-essential cookies.

You can change your cookie preferences at any time using the cookie banner at the bottom of the page, or by clearing your browser's cookies and localStorage.

8. International Transfers

Some of our third-party processors (including Vercel and Calendly) are based in the United States. Where your data is transferred outside the UK, we ensure appropriate safeguards are in place, including:

• The EU–US Data Privacy Framework (where applicable)
• Standard Contractual Clauses approved by the ICO
• UK adequacy decisions where they exist

9. Children's Data

Growth Ledger provides B2B services to e-commerce businesses. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. Material changes will be communicated via a notice on our website. We encourage you to review this page periodically.

11. Contact

For any privacy-related enquiries, Subject Access Requests, or to exercise your data rights, please contact us at: support@growthledger.ai