Privacy notice

Who we are

Growth Engine is a productised marketing service run from the United Kingdom. We are the controller of the personal data this notice covers, which is the formal way of saying the request and portal records are ours and so is the responsibility for them.

What we collect

• The submitted work email, public brand URL, primary goal, reply request, submission time and human review status. A submitted address is not treated as verified until a person completes the reply check. Repeat submissions are kept as an append-only record and cannot overwrite the first request or automatically reopen a closed status; a human operator can reopen it after reviewing the new request.
• If you create a portal account or buy later, the account, request, approval, Terms, payment-state and onboarding records needed to provide that service. Payment card details stay with the payment provider; Growth Engine does not store them.
• Basic server logs (IP address, time, pages requested), which our hosting keeps for security and to keep the site running.
• A pseudonymous rate-limit value used to stop form abuse. Raw IP addresses are not written into the fit-request record.

This site sets no advertising or analytics cookies today. If that ever changes, this notice changes first.

Why we collect it

To assess the Launch Pack fit check you requested, reply with a decision, prepare an agreed scope, run the private portal when you choose to use it, protect the service from abuse, and keep the evidence needed for approvals and delivery. A fit request is not a general marketing opt-in. We ask separately before sending unrelated marketing.

Lawful basis

For the fit request and any quote or scope you ask us to prepare, we rely on taking steps at your request before a possible contract (UK GDPR Article 6(1)(b)). For proportionate security logs and abuse controls, we rely on our legitimate interest in protecting the website and private portal. The reply checkbox records the submitter's specific request for a human response; it does not verify ownership of the address and is not consent to unrelated marketing.

How long we keep it

We keep a fit request while we assess it and while the requested scope conversation is active. Closure is timestamped. After it closes, we keep only what is reasonably needed to handle follow-up, disputes or legal obligations, then delete it. If you become a client, the relevant request becomes part of the service and transaction record instead. Server logs rotate on our hosting provider's standard schedule. The final operational retention schedule is held for legal approval before launch.

What we never do

Fit requests are not sold, enriched or used to build advertising audiences. We do not make an automated fit decision: a person reads every request. We do not use a request to send unrelated marketing without a separate choice.

Your rights

Under UK GDPR you can ask for a copy of the data we hold about you, ask us to correct it, ask us to delete it, or object to our using it. Email us and a human handles it. If you are not happy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.

Contact

Email hello@click2market.co.uk and a human answers. For anything about your data, that address is the whole process: no forms, no portal.