Privacy Policy
Last updated: 6 October 2026
This policy explains how Growthworks Consulting Ltd ("we", "us"), registered in England and Wales (company number 16947397), registered office Office 2 Falcon House, Albion Mills, Hutson Street, Bradford, BD5 7LZ, United Kingdom, uses personal data in connection with GrowthBuilder and growth-builder.com. We are the controller for the data described in sections 1–3. Contact us at info@growth-works.co.uk.
1. Data we collect
- Account data: your name, email address and sign-in details (handled by our sign-in provider, Clerk).
- Billing data: your subscription, invoices and payment status. Card details are taken and held by Stripe, not by us.
- Business details you enter: business name, phone, address, services, areas, accreditations, reviews and other website settings.
- Usage data: what you build and generate, page allowances used, and technical logs (such as IP address and browser) needed to run and protect the Service.
- Emails with us: messages you send to support.
2. Why we use it, and our lawful basis
- To provide the Service and your account, take payment and send service emails (such as "your site is live" and allowance warnings) — performance of our contract with you. Where the customer is a company or other organisation and you use GrowthBuilder for it, we use your contact details on the basis of our legitimate interests in providing the Service to that customer.
- To keep the Service secure, prevent abuse and fix problems — our legitimate interests.
- To keep accounting and tax records — legal obligation.
- To send product news, only if you opt in — consent, which you can withdraw at any time.
3. Who we share it with
We use these service providers to run GrowthBuilder. Most process data for us as our processors under their data processing terms. Some — for example Stripe for payment fraud prevention and its legal obligations, and Google Fonts and cdnjs when your browser loads files from them — also decide how they use certain data themselves, under their own privacy notices:
| Provider | What for |
|---|---|
| Clerk | Sign-in and account management |
| Stripe | Payments and invoices |
| Railway | Hosting the GrowthBuilder app |
| Supabase | Database |
| Cloudflare (R2) | Storing images and built website files |
| Redis (via Railway) | Background job queue |
| Anthropic, Google (Gemini) | AI writing and keyword suggestions — business and website details you enter are sent to write your content |
| Google Fonts, cdnjs (Cloudflare) | Fonts and icons loaded by our websites and the app — your browser's IP address is sent to them |
| DataForSEO | Keyword and search data — keywords, place names and any competitor web addresses you enter |
| Pexels | Stock image search |
| Resend | Sending service emails |
| Netlify | Hosts growth-builder.com; publishes your sites to your own Netlify account (under Netlify's terms), where Netlify also receives the enquiry forms on your sites |
Some of these providers are based in, or process data in, the United States. Where personal data leaves the UK we rely on UK adequacy regulations (including the UK–US data bridge where the provider is certified) or the UK International Data Transfer Agreement or Addendum offered in the provider's terms. You can ask us for details of the safeguard used for any provider. We do not sell personal data.
We need your account and billing details to provide the Service; without them we cannot open or keep an account.
4. Enquiries made on your websites
When a visitor submits a form on a site you publish with GrowthBuilder, the enquiry (for example name, phone, email and message) is received by Netlify in your own Netlify account and passed to your dashboard. For that data we act as a processor for you (or, if you are an agency acting for a client, as your sub-processor) under our Data Processing Addendum: we only use it to show it to you and run the Service. Deleting an enquiry in GrowthBuilder removes it from GrowthBuilder; copies held in your own Netlify account are under your control. You are responsible for your own site's privacy notice.
5. How long we keep data
- Account and website data: while your account is open. To close your account, email us. We then delete your account, sites, enquiries and stored files from GrowthBuilder's systems and ask our sign-in provider to delete your login, within 30 days. Copies in our hosting providers' backups are not edited individually; they are removed when those backups expire on the provider's schedule.
- Billing records: 6 years, as required for tax.
- Server logs: kept by our hosting provider for a limited period set by that provider, then deleted.
6. Your rights
You can ask to access, correct, delete or receive a copy of your personal data, object to or restrict how we use it, and withdraw consent. Email info@growth-works.co.uk; we will reply within one month. If you are unhappy, you can complain to the Information Commissioner's Office (ico.org.uk), though we would like the chance to sort it out first.
7. Security
Data is encrypted in transit, access is restricted to people who need it, and stored hosting tokens are encrypted. No system is perfectly secure; we will tell you and the ICO about a breach where the law requires.
8. Changes
We will update this page when our practices change and email you about significant changes.