Privacy notice

Who we are

Growth Engine is a productised marketing service run from the United Kingdom. We are the controller of the personal data this notice covers, which is the formal way of saying the list, account and request records are ours and so is the responsibility for them.

The early-access list

When you choose “Tell me when requests open”, we save your email, selected business type, submission date and the wording version of your signup choice. This is your request for an email from Growth Engine when requests open. If you joined under earlier wording, your record keeps the wording you saw. It does not create a customer account. No automatic emails are sent at this stage, and email ownership has not yet been verified.

We rely on your consent for the interest list. Withdraw it at any time by emailing hello@growyourengine.com. You can also ask us to correct or delete your details. Withdrawal does not affect processing before you withdrew.

The website is hosted on Vercel. Interest records are stored separately in a Cloudflare database restricted to the EU, accessible to Growth Engine operators. These providers process data for hosting, storage and security; their support and service operations may involve international transfers under their data protection terms. We do not sell this list or use it for advertising audiences.

Interest records expire after 180 days and are removed by a daily cleanup. Short-lived, pseudonymous submission counters prevent abuse; the interest record contains no IP address. Security counters are removed within three days. Hosting providers may maintain their own security logs. We will update this notice before changing how the list is used.

Analytics and cookies

With your permission, public pages use Google Analytics and Cloudflare Web Analytics to measure visits and loading performance. Google Analytics also records two events: a click on any link to our Get in touch page, such as “Get in touch” (the link text and the part of the page it is in), and a completed sign-up to our interest list. The sign-up event never includes what you typed. Google Analytics uses cookies. We do not enable advertising personalisation or automatic form tracking. When we added these two events on 25 September 2026 we asked everyone for their choice again. These tools are not loaded on sign-in or private portal pages. You can accept or decline on public pages without query strings or fragments, and change your choice with the Analytics preferences button. Your choice is stored in this browser for up to 180 days. Google cookies (_ga and _ga_XT2KZXK8NX) are limited to 180 days without extending their expiry on each visit. Google and Cloudflare receive analytics data and may process it outside the UK and EEA. Google user and event data retention is set to two months, without resetting on new activity; aggregated standard reports can remain longer. Optional analytics relies on your consent.

Separately, our hosting keeps basic server logs (IP address, time, pages requested) for security and to keep the site running.

Portal accounts

If you create a portal account or buy later, we keep the account, request, approval, Terms, payment-state and onboarding records needed to provide that service. Payment card details stay with the payment provider; Growth Engine does not store them.

We use these records to run the private portal when you choose to use it, protect the service from abuse, and keep the evidence needed for approvals and delivery.

Fit requests (when requests open)

Launch Pack fit requests are not open yet. When they open, this is how we handle them.

What we collect

• The submitted work email, public brand URL, primary goal, reply request, submission time and review status. A submitted address is not treated as verified until a person completes the reply check. Repeat submissions are kept as an append-only record and cannot overwrite the first request or automatically reopen a closed status; a person can reopen it after reviewing the new request.
• A pseudonymous rate-limit value used to stop form abuse. Raw IP addresses are not written into the fit-request record.

Why we collect it

To assess the Launch Pack fit check you requested, reply with a decision, prepare an agreed scope, protect the service from abuse, and keep the evidence needed for approvals and delivery. A fit request is not a general marketing opt-in. We ask separately before sending unrelated marketing.

Lawful basis

For the fit request and any quote or scope you ask us to prepare, we rely on taking steps at your request before a possible contract (UK GDPR Article 6(1)(b)). For proportionate security logs and abuse controls, we rely on our legitimate interest in protecting the website and private portal. The reply checkbox records the submitter's specific request for a reply from a person; it does not verify ownership of the address and is not consent to unrelated marketing.

How long we keep it

We keep a fit request while we assess it and while the requested scope conversation is active. Closure is timestamped. After it closes, we keep only what is reasonably needed to handle follow-up, disputes or legal obligations, then delete it. If you become a client, the relevant request becomes part of the service and transaction record instead. Server logs rotate on our hosting provider's standard schedule. We will update this notice with the final retention periods before fit requests open.

What we never do

Fit requests are not sold, enriched or used to build advertising audiences. We do not make an automated fit decision: a person reads every request. We do not use a request to send unrelated marketing without a separate choice.

Your rights

Under UK GDPR you can ask for a copy of the data we hold about you, ask us to correct it, ask us to delete it, or object to our using it. Email us and a person handles it. If you are not happy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.

Contact

Email hello@growyourengine.com about your data. A person replies.