Privacy & Cookie Policy
Last updated: July 2026
1. Who we are
Decoding Growth is a trading name of Get2Growth Limited, a company registered in England and Wales (company number 14612242) with its registered office at 11 Northfield, Lightwater, Surrey GU18 5YR. We are the “data controller” of the personal data described in this policy, which means we decide how and why it is used.
We are registered with the Information Commissioner’s Office (ICO), registration number ZB532972. If you have any questions about this policy or your personal data, contact us at hello@decoding-growth.com.
2. What this policy covers
This policy explains what personal data we collect when you visit decoding-growth.com, sign up to our emails, or buy our products and services; why we collect it; who we share it with; and the rights you have over it. It also covers personal data we collect offline or by other means, such as at events, by phone or by email.
It applies alongside the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), each as amended by the Data (Use and Access) Act 2025.
3. The personal data we collect
You can browse most of this site without giving us any personal data. We collect personal data only when you choose to provide it, or in limited cases automatically:
We do not knowingly collect data from children under 18. Our products and services are aimed at business professionals.
4. How and why we use your data
We only use your personal data where the law allows us to. The table below sets out each purpose, the lawful basis we rely on, and how long we keep the data.
What we do | Data used | Lawful basis | How long we keep it |
|---|---|---|---|
Deliver products and services you buy (courses, memberships, consulting) | Name, email address, billing details, purchase history | Performance of a contract | For the duration of our relationship, then up to 6 years for tax, accounting and legal purposes |
Send our email newsletter and free training content you sign up for | Name, email address, engagement data (opens and clicks) | Consent | Until you unsubscribe; we then keep a minimal suppression record so we don’t email you again |
Tell existing customers about similar products and services | Name, email address, purchase history | Legitimate interests (soft opt-in – you can opt out at any time) | Until you opt out or 3 years after your last purchase or interaction |
Respond to enquiries | Name, email address, message content | Legitimate interests | 12 months after our last exchange, unless it leads to a client relationship |
Keep the website secure and functioning | IP address, browser and device information, server logs | Legitimate interests | Server logs are retained for up to 30 days |
Understand how visitors use the site so we can improve it | IP address (truncated), device and browser information, pages visited | Legitimate interests (statistical analytics only – you can opt out at any time) | Analytics data is retained in Google Analytics for 14 months |
Handle rights requests and complaints | Identity and contact details, correspondence | Legal obligation | 3 years from resolution |
Where we rely on legitimate interests, we have balanced our interests against your rights and concluded the processing is fair and expected. You can object at any time – see section 9. We do not sell your personal data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.
5. Cookies
This site uses two types of cookies:
Strictly necessary cookies. These are essential for the site to function — for example, to maintain security and remember basic settings during your visit. The law does not require your consent for them and they cannot be switched off through our site.
Analytics cookies (Google Analytics). We use Google Analytics to collect statistical information about how visitors use our site — such as which pages are visited and how visitors move through the site — so we can improve it. This data is aggregated and used for statistical purposes only. We do not use it for advertising or profiling, we do not track you across other websites, and we have disabled data sharing and advertising features in our Google Analytics settings.
Under the Privacy and Electronic Communications Regulations (as amended by the Data (Use and Access) Act 2025), these analytics cookies do not require your prior consent. You have the right to opt out at any time, free of charge, using the "opt out of analytics" link in the footer of every page or [here — link to opt-out]. You can also block or delete cookies through your browser settings, though blocking essential cookies may stop parts of the site working properly.
When you first visit, we show a notification explaining the cookies in use and how to opt out.
6. Who we share your data with
We never sell, rent or trade your personal data. We share it only with the following service providers (“processors”), who act on our instructions under written contracts that meet UK GDPR requirements:
Provider | What they do for us | Data involved and location |
|---|---|---|
Brevo | Email marketing and newsletter delivery | Name, email address, engagement data. Brevo is headquartered in France and stores data in the EU, which the UK recognises as providing adequate protection. |
Google (Google Analytics) | Website usage statistics | IP address (truncated), device and browser information, pages visited. Configured for statistical purposes only, with advertising features and data sharing disabled. Google may process data in the US; transfers are protected by the UK–US Data Bridge (Google is certified) and the UK Addendum to the EU Standard Contractual Clauses. |
SiteGround | Website hosting | Server logs and any data submitted through the website. Hosted in EU/UK data centres. |
ThriveCart | Checkout and payment processing for our products | Name, email address, billing address and order details. Payment card details are handled by ThriveCart’s payment partners – we never see or store your full card number. ThriveCart is based in the United States; transfers are protected by safeguards described in section 7. |
We may also disclose personal data where we are legally required to – for example, to HMRC, a regulator or a court – or to professional advisers (such as accountants or lawyers) under duties of confidentiality, or as part of a business sale or restructure, in which case this policy would continue to apply to your data.
7. International transfers
Most of your data is stored in the UK or the European Economic Area, which UK law treats as providing adequate protection. Where a provider (such as ThriveCart or Google) processes data in the United States or elsewhere, we ensure the transfer is protected by an approved safeguard: a UK adequacy decision (including the UK–US Data Bridge, where the provider is certified), the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of the safeguard applying to any transfer.
8. How we protect and retain your data
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS) across the site, access controls limiting who can see your data, and reputable providers with strong security practices.
We keep personal data only as long as needed for the purposes in section 4, after which it is securely deleted or anonymised. Retention periods for each purpose are set out in the table above. If we suffer a data breach that risks your rights, we will notify the ICO within 72 hours and, where the risk is high, tell you directly.
9. Your rights
You have the following rights over your personal data, free of charge:
To exercise any of these rights, email hello@decoding-growth.com. We will respond within one month. We may need to verify your identity first. You can unsubscribe from our emails at any time using the link at the bottom of every email we send.
10. Complaints
If you are unhappy with how we have handled your data, you have a statutory right to complain to us directly. Email hello@decoding-growth.com – we will acknowledge your complaint within 30 days and respond without undue delay.
You can also complain to the UK supervisory authority, the Information Commissioner’s Office, at ico.org.uk or on 0303 123 1113, although we would welcome the chance to resolve your concern first.
11. Third-party websites and affiliate links
Our site links to other websites, and some links are affiliate links, meaning we may earn a commission if you buy through them. We flag affiliate relationships where they exist. Once you leave our site, the privacy policy of the site you visit applies – we don’t control those sites, so please review their policies before providing personal data.
12. Changes to this policy
We review this policy regularly and will post any changes on this page with an updated date. If we make significant changes to how we use your data, we will take reasonable steps to bring them to your attention, for example by email if we hold your address.
13. Contact us
Get2Growth Limited (trading as Decoding Growth)
Email: hello@decoding-growth.com
Registered office: 11 Northfield, Lightwater, Surrey GU18 5YR.