top of page

Privacy Policy

A Legal Disclaimer

Last Updated: 10 March 2025

​

At The Growth Alchemist, we’re committed to protecting the privacy of our visitors, clients, and prospects while delivering cosmic-grade digital marketing and AI automation services. This Privacy Policy explains how we collect, use, process, disclose, and safeguard your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We aim to keep your information secure as we help your SaaS or Ecommerce startup blast off to new heights.

​

1. Who We Are

The Growth Alchemist is a UK-based digital marketing and AI automation agency. We are the data controller responsible for your personal data. Contact us at:

​

2. Information We Collect and How We Collect It

We collect data to fuel your growth and enhance our services. Here’s what we gather and how:

  • Personal Details: Name, email, phone number, job title - submitted via contact forms, email sign-ups, or client onboarding.

  • Business Information: Company name, industry, revenue - shared during enquiries or service agreements.

  • Usage Data: IP address, browser type, pages visited - tracked via cookies and analytics tools when you explore our site.

  • Marketing Interactions: Responses to emails, ad clicks - captured through campaigns or CRM tools.

​

3. Why We Collect Your Data

We use your information to power your startup’s success and keep our operations orbiting smoothly:

  • To respond to enquiries and provide tailored service quotes (e.g., Lunar Brew, Orbiting Infusion, Nebula Potion).

  • To deliver, manage, and optimise digital marketing (Media Buying, SEO, Social Media) and AI Automation services.

  • To analyse site performance and improve user experience via aggregated insights.

  • To send marketing updates, promotions, or free resources (e.g., audits) - only with your consent.

​

4. Legal Basis for Processing

We process your data lawfully under these UK GDPR bases:

  • Consent: For marketing emails or cookies (you can opt out anytime).

  • Contract: To fulfill service agreements with clients.

  • Legitimate Interests: To respond to enquiries, analyse usage, or enhance our offerings - balanced against your rights.

​

5. Sharing Your Data with Third Parties

We only share your data when essential, with strict safeguards:

  • Service Providers: Freelancers (e.g., Media Buyers, AI Developers) and tools (e.g., Google Ads, CRM platforms) process data under contract, bound by UK GDPR compliance.

  • Legal Obligations: We may disclose data if required by UK law or to protect our rights.

  • We don’t sell your data - ever.

​

6. How We Protect Your Data

Your privacy is our mission—we deploy these shields:

  • Encryption (SSL) for data in transit and at rest.

  • Secure servers hosted in the UK or GDPR-compliant regions.

  • Access controls and regular security audits.

  • Contracts with third parties ensuring data protection standards.

​

7. Your Rights Under UK GDPR

You’ve got control over your data - exercise these rights anytime:

  • Access: Request a copy of your data.

  • Rectification: Correct inaccurate information.

  • Erasure: Ask us to delete your data (where applicable).

  • Restriction/Objection: Limit or stop processing (e.g., marketing).

  • Portability: Get your data in a usable format.

  • Contact us at suf@thegrowthalchemist.com or complain to the ICO (www.ico.org.uk).

​

8. Cookies and Tracking

We use cookies to optimise your journey:

  • Essential: Enable site functionality.

  • Analytics: Track visits (e.g., Google Analytics) - anonymised where possible.

  • Marketing: Target ads (e.g., Meta Ads) - consent-based.

  • Manage preferences via our cookie banner or browser settings.

​

9. Children’s Data

Our services target SaaS & Ecommerce startups. We don’t knowingly collect data from anyone under 18. If we spot it, we delete it immediately.

​

10. Data Retention

We keep your data only as long as needed:

  • Enquiries: 12 months unless you become a client.

  • Clients: 6 years post-service (UK tax law).

  • Marketing: Until you unsubscribe or consent lapses (2 years).

  • Deleted securely thereafter.

​

11. International Transfers

If data leaves the UK (e.g., to US-based tools), we use UK-approved safeguards like Standard Contractual Clauses to keep it secure under UK GDPR.

​

12. Changes to This Policy

We’ll update this policy as our services evolve - check back here. Significant changes? We’ll email you if you’re on our list.

​

13. Contact Us

Questions? Reach out:

bottom of page