Privacy Notice

1. Who is responsible for your information

Grow Guide is operated by James Bosley, a sole trader trading as Grow Guide.

For data-protection purposes, James Bosley trading as Grow Guide is the controller of personal information collected through Grow Guide.

Business address:

Email: hello@getgrowguide.co.uk

2. Information we collect

Depending on how you use Grow Guide, we may process:

Account information

• email address;
• authentication information;
• name; and
• business name.

Assessment information

• answers you provide to the Grow Guide marketing assessment.

Personalisation information

• Growth Score;
• category scores;
• identified priorities;
• recommendations; and
• your personalised action plan.

Progress information

• actions assigned to you;
• action completion status; and
• progress through your plan.

Toolkit information

• text, checklists, numbers and other information you enter or save while completing Grow Guide actions.

Membership information

• membership tier;
• subscription status;
• billing period;
• renewal/cancellation information;
• Stripe customer and subscription identifiers.

Grow Guide does not store your complete payment-card details.

Product and security information

• system-generated records about important product events;
• account status;
• timestamps; and
• technical/security information necessary to operate and protect the service.

3. How we use your information

We use personal information to:

• create and operate your Grow Guide account;
• provide your marketing assessment;
• calculate your Growth Score;
• personalise recommendations and your plan;
• save your progress and Toolkit outputs;
• provide and manage membership access;
• process and administer subscriptions;
• secure and maintain the service;
• understand basic use of Grow Guide and improve the product;
• respond to support, refund and privacy requests;
• comply with legal obligations; and
• establish, exercise or defend legal claims where necessary.

4. Lawful bases

Depending on the activity, we process information because:

Contract

Processing is necessary to provide the Grow Guide service or take steps requested by you before entering into a contract.

Legitimate interests

We may process limited information where reasonably necessary to operate, secure, troubleshoot and improve Grow Guide, provided those interests are not overridden by your rights.

Legal obligation

We may process or retain information where necessary to comply with applicable legal, tax, accounting or regulatory obligations.

Where another lawful basis is required for a particular activity, we will use the appropriate basis.

5. Personalised recommendations

Grow Guide uses the answers you provide to calculate scores, identify marketing priorities and determine which actions are most relevant to you.

This currently uses Grow Guide's own deterministic assessment and recommendation logic.

Your assessment answers are not currently sent to a third-party generative AI service to create your plan.

The personalisation is designed to provide marketing guidance. It is not used to make decisions about employment, credit, insurance or other similarly significant matters.

6. Who we use to provide Grow Guide

We use a small number of service providers to operate Grow Guide.

These currently include:

Lovable

Used to build, host and deliver the Grow Guide application and associated infrastructure.

Lovable Cloud / Supabase infrastructure

Used for database, authentication and related backend services. The primary project database region is currently London, United Kingdom.

Stripe

Used to process payments, subscriptions and billing management. Payment-card details are handled by Stripe rather than stored directly by Grow Guide.

Service providers may process information only as necessary to provide their services and subject to the terms and safeguards applicable to those services.

Grow Guide does not currently use third-party advertising trackers, Meta Pixel, Google Analytics, Hotjar, a third-party CRM or a marketing-email platform.

7. International processing

Grow Guide's primary database and authentication infrastructure is currently hosted in London, United Kingdom.

Some service providers, including Lovable and Stripe, operate internationally. Personal information may therefore be processed or accessed in other countries as part of providing their services.

Where personal information is transferred outside the United Kingdom, appropriate protections are used where required by UK data-protection law. Depending on the provider and destination, these may include UK adequacy regulations, recognised data-transfer frameworks or approved contractual safeguards.

8. How long we keep information

We keep account information while your Grow Guide account remains active or where it is otherwise reasonably necessary to provide the service.

Cancelling a paid membership does not automatically delete your account.

Your assessment, Growth Score, plan, progress and Toolkit outputs may remain available after cancellation so that you do not lose your work.

At present, Grow Guide does not operate an automatic deletion schedule for inactive accounts.

We periodically review what information we need to retain as the service develops.

If you ask us to delete your account, we will delete or anonymise personal information that we no longer need, subject to information we need to retain for legal, accounting, fraud-prevention, dispute-resolution or regulatory purposes.

9. Marketing communications

Grow Guide does not currently operate promotional or marketing email campaigns.

Emails you currently receive in connection with Grow Guide are limited to service-related communications such as account/authentication messages, payment-related messages and direct support responses.

If we introduce marketing communications in future, we will update our processes and privacy information and provide any choices required by law.

10. Security

We use technical and organisational measures designed to protect information held through Grow Guide.

These include authenticated accounts, access controls, database row-level security and server-side access checks.

No internet service can guarantee absolute security.

11. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you rights including the right to:

• ask for access to your personal information;
• ask us to correct inaccurate information;
• ask us to delete information;
• ask us to restrict certain processing;
• object to certain processing; and
• receive certain information in a portable format.

These rights are not absolute and exemptions may apply.

To exercise a privacy right, email hello@getgrowguide.co.uk.

We may need to verify your identity before acting on a request.

You can also complain to the Information Commissioner's Office if you are unhappy with how your information has been handled.

12. Changes to this notice

We may update this Privacy Notice as Grow Guide changes.

The latest version will be available on this page and will show the date of the most recent update.