Legal
Privacy Policy
Last updated 19 September 2026
This page explains what GrowGrid collects through growgridco.com, why, and what you can do about it. Written in plain language on purpose — the short version is that we collect only what you give us through the contact form, and we never sell it.
Who we are
GrowGrid is a B2B SaaS growth agency. This policy covers growgridco.com and the contact and enquiry forms on it. It does not cover the internal systems we operate on behalf of clients under a separate engagement agreement.
What we collect
Directly from you, only when you submit a form on this site:
- Contact form: name, email address, company, and whatever you write in the message field.
- Attribution diagnostic request: name, work email, company, website, requested timeline, and the commercial and measurement answers shown in the diagnostic summary. The free audit itself runs in your browser; those answers are submitted only if you request the paid diagnostic.
- Standard technical data collected by our hosting provider for every visitor, whether or not you submit a form: IP address, browser type, pages visited, and referring URL, via server logs. We do not run analytics or advertising trackers on this site, and we don't use cookies for anything beyond what's strictly necessary to serve the page.
We do not collect payment information on this site — that happens separately, directly with a client, once an engagement is agreed.
Why we collect it
| Data | Purpose | Legal basis (GDPR/UK GDPR) |
|---|---|---|
| Contact form submission | To respond to your enquiry and, if you become a client, to deliver the work | Legitimate interest / contract performance |
| Attribution diagnostic request | To review fit, confirm scope, and provide the requested invoice and access checklist | Steps requested before entering a contract |
| Server logs | Security, abuse prevention, and diagnosing site issues | Legitimate interest |
Where it's stored
Form submissions are processed by Netlify, our hosting provider, and are visible to us in our Netlify account. We don't copy form data into a separate marketing database or CRM until we're actually in conversation with you about working together.
How long we keep it
Enquiries that don't turn into a client relationship are kept for up to 12 months, then deleted, unless you ask us to delete them sooner. If we do become an active service provider to you, the terms of that engagement govern retention instead of this page.
Who we share it with
Nobody, outside of the infrastructure providers that make this site work — currently Netlify (hosting and form processing) and Google Fonts (typefaces, loaded from Google's servers when you visit the page). We do not sell, rent, or trade your data, and we don't share it with data brokers or advertising networks.
Your rights
If you're in the UK or EU, you have rights under UK GDPR / GDPR to access, correct, delete, or export your data, and to object to how we use it. If you're in California, you have similar rights under the CCPA. In either case, email us and we'll act on it within 30 days. We don't charge for a reasonable request.
Cold outbound and this policy
Separately from this website, GrowGrid sends B2B cold outreach on behalf of itself and its clients to business contacts, based on legitimate interest under GDPR/UK GDPR and CAN-SPAM where applicable. Every outbound message includes a clear way to opt out, and opt-outs are honoured immediately and permanently. If you've received an email from us or a client campaign we ran and want off the list, reply "unsubscribe" or email us directly — either works.
Changes to this policy
If this policy changes materially, we'll update the date at the top of this page. We won't make quiet changes to how existing data is used.
Contact
Questions about this policy, or a request relating to your data, go to the contact page.