Growth Surfing - Privacy Policy
Last Updated: September 11, 2026
Growth Surfing ("we," "us," or "our") operates the website https://growthsurfing.com (the "Site") and provides high-ticket B2B business development, executive outreach and media production services (the "Services"). We are committed to protecting and respecting your privacy in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
1. Who We Are (Data Controller)
Growth Surfing is the data controller responsible for your personal data.
Company Name: Growth Surfing
Registered Address: Innovation Centre, Maidstone Road, Chatham, England, ME5 9FD
Contact Email: [email protected]
2. Information We Collect About You
We may collect and process the following data about you:
Identity Data: Includes your name, job title, company name, and professional background.
Contact Data: Includes your work email address, phone number, and company location.
Technical Data: Includes your internet protocol (IP) address, browser type and version, time zone setting, operating system, and platform via cookies and analytics tools when you visit our Site.
Usage Data: Includes information about how you use our Site, services, and content.
Marketing & Communications Data: Includes your preferences in receiving communications from us.
3. How We Collect Your Personal Data
We collect personal data via:
Direct Interactions: When you fill out forms on our Site, apply or book a 1-on-1 strategy session, subscribe to our communications, or correspond with us by email or phone.
Third-Party & Publicly Available Sources: We may obtain professional contact data from business directory databases, LinkedIn or corporate websites for B2B relationship-building and guest outreach purposes.
Automated Technologies: As you interact with our Site, we automatically collect Technical Data using cookies and similar tracking technologies.
4. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we use your data under the following legal bases:
Legitimate Interests: Where it is necessary for our legitimate business interests (or those of a third party) to conduct B2B communication, guest invitation management, and service optimization, provided your rights do not override those interests.
Contract Performance: Where we need to perform the contract we are about to enter into or have entered into with you.
Legal Obligation: Where we need to comply with a legal or regulatory obligation.
5. Disclosure of Your Personal Data
We do not sell, rent or trade your personal data. We may share your personal data with trusted third-party service providers who assist us in operating our Site and delivering our Services, including:
Hosting and cloud infrastructure providers.
Customer Relationship Management (CRM) and calendar booking systems.
Email delivery and marketing automation systems.
Professional advisers (lawyers, accountants, auditors).
All third-party service providers are required to respect the security of your personal data and treat it in accordance with the law.
6. International Transfers
Where personal data is transferred outside the United Kingdom, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
The country has been deemed to provide an adequate level of protection for personal data by the UK Government.
We use specific contracts approved for use in the UK (Standard Contractual Clauses or the UK International Data Transfer Agreement) which give personal data the same protection it has in the UK.
7. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Access to your personal data is restricted to employees, agents, and contractors who have a business need to know.
8. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
9. Your Legal Rights
Under the UK GDPR, you have the right to:
Request access to your personal data.
Request correction of inaccurate personal data.
Request erasure of your personal data ("right to be forgotten").
Object to processing of your personal data where we rely on a legitimate interest.
Request restriction of processing your personal data.
Request the transfer of your personal data.
Withdraw consent at any time where we rely on consent to process your data.
To exercise any of these rights, please contact us at [email protected]. You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).