Privacy Policy
Privacy Policy
Last updated: 12 October 2026
Who we are
GrowthBox is a trading name of GrowthBox Consulting Limited (company number 13604629), 18 School Lane, Bishopthorpe, York, YO23 2RE. We're the data controller for the information described here. If you have any questions, contact Jim Bulmer at hello@growthbox.co.uk.
What this policy covers
GrowthBox works with businesses, not individual consumers. Even so, the details of the people we deal with at those businesses, such as names and email addresses, are personal information. This policy explains how we handle it.
What we collect
• Contact details: name, job title, business email address and phone number.
• Information about your business: your answers to the GrowthPlan diagnostic, your weekly updates, and any files, photos or voice notes you send us.
• Account and performance information: content and results data from channels you give us access to, so we can report on what is working.
• Website information: how visitors use growthbox.co.uk, collected through cookies and analytics tools.
• Correspondence: emails and messages between us.
How we use it, and why
• To deliver our services (KickStart and Managed), because this is needed to carry out our agreement with your business.
• To respond to enquiries and diagnostic submissions, and to send your plan and quick wins, because you have asked us to.
• To send occasional emails about GrowthBox to business contacts, based on our legitimate interest in telling businesses about our services. Every email includes a way to opt out.
• To understand and improve our website, using analytics cookies only where you have agreed to them.
We don't sell personal information.
Who we share it with
We use trusted service providers to run GrowthBox. They only use your information to provide their service to us. They include:
• Wix (website hosting and forms)
• Airtable (content planning and records)
• Metricool and Zapier (content scheduling)
• Google (email, documents and website analytics)
• AI tools, including Anthropic's Claude, to help draft and review content
Some of these providers store data outside the UK, including in the United States. Where they do, we rely on the safeguards UK data protection law requires, such as approved contract terms or adequacy arrangements.
How long we keep it
We keep client information for as long as we work together, and for 12 months afterwards in case you return or have questions. We keep invoices and financial records for six years, as UK law requires. Enquiry and diagnostic information from businesses that don't become clients is deleted after 24 months.
Your rights
You can ask us to give you a copy of your information, correct it, delete it, restrict how we use it, or stop using it for marketing. Email hello@growthbox.co.uk and we'll respond within one month.
If you're unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk.
Cookies
Our website uses cookies that are needed for it to work, and analytics cookies that help us understand how it is used. You can accept or decline non-essential cookies using the banner on your first visit, and change your choice in your browser settings at any time.
Changes
We may update this policy from time to time. The date at the top shows when it was last changed.