Privacy Policy

Effective 28 September 2026 · Version growthcheck-2026-09-28-v2

Who we are

GrowthCheck is operated by William Cameron t/a GrowthCheck, the data controller for this website and its audit service. Email privacy@growthcheck.co.uk about personal data or hello@growthcheck.co.uk about an order. Postal seller details are in our Service Terms.

Information we use and why

The free website check receives the website address, business name, email address and request details you submit. Its separate audit service may keep these as a lead record to respond to your request and discuss the service. We use this information for our legitimate interest in operating and responding to the requested check.

For a paid audit, we use the submitted website address, contact email, optional business name, your purchase declarations, order and payment status, sampled public-page evidence, report and delivery records. We use these to perform the contract, support customers, protect the service and meet tax/accounting duties. Stripe hosts card checkout; GrowthCheck does not receive your full card number. We use limited web and service logs to operate and protect the site. We do not sell personal data or use your audit details for advertising.

Providers and locations

Our providers include Stripe for payments, Supabase for the private paid database and report storage, Resend for transactional email, Google PageSpeed Insights for a public-site performance lab measurement, and IONOS for hosting. The free check runs on a separately deployed service. Optional Google Analytics is loaded only after an affirmative choice on the website. Providers may process or support information outside the UK; their applicable safeguards and service terms govern those transfers. We restrict access to the people and services needed to provide the service.

Retention

Unpaid paid-audit orders are scheduled for deletion after 30 days. Raw paid-audit evidence is scheduled for deletion after 90 days; the report and associated paid-audit records are scheduled for deletion after about 12 months from payment, except transaction information needed for tax, disputes or legal obligations. Private report links expire after seven days. Minimal financial records are retained through the applicable UK self-assessment record period, currently calculated as at least five years after the relevant filing deadline. Separate encrypted database and private-storage backups may retain deleted data for up to six months. Website access logs rotate with up to 14 archived daily files; application/provider logs may follow different operational periods. Free-check enquiries are kept while needed to handle the enquiry or follow-up and can be reviewed or deleted on request, subject to legal obligations.

Your rights

You may ask for access, correction, deletion, restriction or transfer of your information, or object to processing where applicable. You may withdraw consent where processing relies on it, including optional analytics. These rights can have legal exceptions. Contact privacy@growthcheck.co.uk; we may need to verify your identity. You may complain to the UK Information Commissioner's Office.

Updates

We will update this notice when our processing changes. The version shown when a paid order is placed is recorded with that order.