Privacy Policy
This policy explains how OpGrowth Consulting ("OpGrowth", "we", "us") handles personal data when you visit opgrowth.co.uk, contact us, or authorise one of our applications to access your Google account data. We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.
Contact
Questions or requests about your data: chris@opgrowth.co.uk.
Data we collect
- Information you give us, such as your name, email address, company and message when you email us or use a contact form.
- Website usage data, such as pages visited, device and browser type, and approximate location, collected through analytics tools where you have consented.
- Google user data, where you sign in with Google and grant access to one of our applications. See the next section.
Google user data
Our applications use Google APIs (for example Google Search Console, Google Analytics, Google Business Profile, Google Drive or Google Sheets) to provide reporting and consultancy services. We only request the scopes needed for the feature you are using, and the consent screen shows exactly which ones before you approve.
- What we access: your basic Google profile (name and email address) to identify you, and the data within the Google services you authorise, such as search performance, analytics reports or business listing information.
- How we use it: solely to provide the features you requested, such as generating reports, audits and recommendations for your own properties.
- Storage and security: OAuth tokens and any retrieved data are stored securely, encrypted in transit, and accessible only to OpGrowth.
- Sharing: we do not sell Google user data and do not share it with third parties, except where required by law or with your explicit consent.
- No advertising or AI model training: Google user data is not used for advertising, and is not used to develop, improve or train generalised AI or machine learning models.
- Retention and deletion: we keep Google user data only as long as needed to provide the service. You can revoke access at any time at myaccount.google.com/permissions, and you can ask us to delete any stored data by emailing chris@opgrowth.co.uk.
OpGrowth's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we use personal data
We use personal data to reply to enquiries, deliver services to clients, improve this website, and meet legal and accounting obligations. Our lawful bases are contract, legitimate interests, consent (for analytics cookies) and legal obligation.
Service providers
We use trusted providers to run the business, such as website hosting, email and analytics services. They process data only on our instructions. Some may process data outside the UK; where they do, appropriate safeguards are in place.
Cookies
This site does not currently set analytics or advertising cookies. If that changes, they will only be used with your consent, and you can change your choice or clear cookies in your browser at any time.
Retention
We keep enquiry and client data only as long as needed for the purpose it was collected for, and for any period required by law (for example, accounting records).
Your rights
You have the right to access, correct, delete or restrict the use of your personal data, to object to processing, to data portability, and to withdraw consent at any time. To exercise these rights, email chris@opgrowth.co.uk. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.