Privacy Policy

At Growth Signals ("we", "our", or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our DTC benchmark platform and related services.

By using our Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not access or use our Service.

1. Information We Collect

1.1 Information You Provide

We collect information you directly provide to us, including:

• Account Information: When you create an account, we collect your name, email address, and password.
• Profile Information: Any additional information you choose to add to your profile, such as company name or job title.
• Communications: When you contact us, we collect the contents of your messages along with your email address and any other information you provide.
• Payment Information: If you make a purchase, our payment processor collects billing details. We do not store complete payment card information on our servers.

1.2 Automatically Collected Information

When you access our Service, we automatically collect certain information:

• Device Information: Browser type, operating system, device identifiers, and screen resolution.
• Usage Information: Pages viewed, features used, time spent on pages, and navigation patterns.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies and Similar Technologies: See our Cookie Policy for details.

1.3 Brand Data We Collect

For our benchmark reports, we collect and analyze publicly available data about DTC brands, including social media metrics, web traffic estimates, company filings, and other publicly accessible information. This data is used to provide our analytics and benchmark services and does not include personal information about individual consumers.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Communicate with you about products, services, offers, and events (with your consent where required)
• Monitor and analyze trends, usage, and activities in connection with our Service
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Personalize and improve your experience on our Service
• Comply with legal obligations and enforce our terms and policies

3. Legal Basis for Processing (UK/EU Users)

If you are located in the United Kingdom or European Economic Area, we process your personal data based on the following legal grounds:

• Contract: Processing necessary to perform our contract with you (providing the Service).
• Consent: Where you have given explicit consent, such as for marketing communications.
• Legitimate Interests: Processing necessary for our legitimate interests, such as fraud prevention, security, and improving our Service, where not overridden by your rights.
• Legal Obligation: Processing necessary to comply with legal requirements.

4. Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf, such as hosting, analytics, payment processing, and customer support.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Legal Requirements: If required by law, subpoena, or other legal process, or to protect our rights, privacy, safety, or property.
• With Your Consent: In other circumstances with your explicit consent.

5. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes described in this policy, unless a longer retention period is required by law.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we need to retain certain information for legal, tax, or regulatory purposes.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Rectification: Request correction of inaccurate or incomplete information.
• Erasure: Request deletion of your personal information in certain circumstances.
• Restriction: Request that we restrict processing of your information in certain circumstances.
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent where processing is based on consent.

To exercise these rights, please contact us at hello@growthsociety.co.uk.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Regular security assessments and audits
• Access controls and authentication measures
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, and you provide information at your own risk.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. When we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities or transfers to countries with adequate data protection laws.

9. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.