Privacy Policy

Last updated: January 2026

1. Introduction

Growthcart Limited ("we", "us", "our", or "Growthcart") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at growthcart.co.uk (the "Website") or engage with our digital marketing services.

We are registered in England and Wales under company number 14987192, with our registered office at 128 City Road, London, EC1V 2NX, United Kingdom.

This policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Data Controller

Growthcart Limited is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at:

  • Email: dpo@growthcart.co.uk
  • Post: Data Protection Officer, Growthcart Limited, 128 City Road, London, EC1V 2NX

3. Information We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

  • Identity Data: First name, last name, job title, company name
  • Contact Data: Email address, telephone number, business address
  • Communication Data: Content of emails, contact form submissions, and other correspondence
  • Marketing Preferences: Your preferences for receiving marketing communications
  • Service Data: Information provided in connection with our marketing services

3.2 Information Collected Automatically

  • Technical Data: IP address, browser type and version, operating system, device type, screen resolution
  • Usage Data: Pages visited, time spent on pages, navigation paths, referral source
  • Location Data: General geographic location based on IP address
  • Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy below)

3.3 Information from Third Parties

  • Analytics Providers: Aggregated data from Google Analytics and similar services
  • Business Partners: Contact information provided by referral partners with your consent
  • Public Sources: Publicly available business information from Companies House, LinkedIn, or company websites

4. How We Use Your Information

We process your personal data for the following purposes:

4.1 To Provide Our Services

  • Delivering SEO, digital marketing, and related services
  • Managing client relationships and communications
  • Processing payments and invoicing
  • Providing customer support

Legal Basis: Performance of a contract or steps prior to entering into a contract

4.2 To Improve Our Website and Services

  • Analysing website usage and performance
  • Identifying technical issues and improving user experience
  • Conducting research and development

Legal Basis: Legitimate interests in improving our services

4.3 To Communicate With You

  • Responding to enquiries and support requests
  • Sending service-related notifications
  • Providing updates about changes to our services or policies

Legal Basis: Performance of a contract or legitimate interests

4.4 For Marketing Purposes

  • Sending newsletters, insights, and promotional content
  • Personalising marketing communications
  • Conducting surveys and gathering feedback

Legal Basis: Consent (for direct marketing to individuals) or legitimate interests (for B2B marketing)

4.5 For Legal and Compliance Purposes

  • Complying with legal obligations
  • Protecting our legal rights and interests
  • Preventing fraud and ensuring security

Legal Basis: Legal obligation or legitimate interests

5. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your experience and analyse website traffic. Cookies are small text files stored on your device that help us recognise your browser and remember certain information.

5.1 Types of Cookies We Use

  • Essential Cookies: Required for the Website to function properly. These cannot be disabled.
  • Analytics Cookies: Help us understand how visitors interact with our Website (e.g., Google Analytics).
  • Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness.
  • Preference Cookies: Remember your settings and preferences.

5.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling certain cookies may affect Website functionality.

6. Data Sharing and Disclosure

We may share your personal data with:

6.1 Service Providers

Third-party vendors who assist us in operating our business, including:

  • Cloud hosting providers (e.g., Vercel, AWS)
  • Email service providers
  • Analytics providers (e.g., Google Analytics)
  • Payment processors
  • CRM and marketing automation platforms

6.2 Professional Advisers

Lawyers, accountants, and auditors who provide professional services to us.

6.3 Legal Requirements

We may disclose your data if required by law, regulation, legal process, or governmental request.

6.4 Business Transfers

In connection with any merger, acquisition, or sale of company assets, your data may be transferred to the acquiring entity.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office
  • Transfers to countries with adequacy decisions
  • Binding Corporate Rules where applicable

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

  • Client Data: For the duration of our business relationship plus 7 years for legal and accounting purposes
  • Marketing Data: Until you unsubscribe or withdraw consent, plus a suppression list to honour your preferences
  • Website Analytics: Aggregated data retained indefinitely; individual data typically retained for 26 months
  • Enquiry Data: 2 years from last contact if no business relationship is established

9. Your Rights

Under UK data protection law, you have the following rights:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data in certain circumstances
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to processing based on legitimate interests or for direct marketing
  • Rights Related to Automated Decision-Making: We do not make solely automated decisions with legal or significant effects

To exercise any of these rights, please contact us at dpo@growthcart.co.uk or submit a request via our Data Removal Request page.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Access controls and authentication mechanisms
  • Regular security assessments and monitoring
  • Staff training on data protection
  • Secure data centres with physical security controls

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our Website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

12. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. For significant changes, we may notify you by email or through a notice on our Website.

14. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve your concern. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Telephone: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

15. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us: