Effective Date: 31/07/26

Last Updated: 31/07/26

This Privacy Policy explains how SimpleGrowthSystems ("we", "us", "our"), a sole trader business based in England, collects, uses, stores, and protects your personal data when you visit our website, sign up for our services, or otherwise interact with us.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Email: [email protected]

We are the data controller for the personal data described in this policy, unless stated otherwise. For personal data you upload to the Platform about your own customers or leads, please see the section "Our Role When You Use the Platform" below, and our Data Processing Addendum.

WHO THIS POLICY APPLIES TO

This policy applies to: visitors to our website; prospective clients who enquire about our Services; clients who purchase a Subscription; and individuals we otherwise contact for marketing purposes.

WHAT PERSONAL DATA WE COLLECT

We may collect: your name, business name, email address, phone number, and billing address; account login and Platform usage data; payment and transaction details (processed by our payment provider — we do not store full card details); communications you send us (emails, form submissions, call recordings, support chats); technical data such as IP address, browser type, device information, and cookies; and marketing preferences and consent records.

HOW WE COLLECT IT

We collect personal data when you: fill in a form on our website; sign up for a Subscription; contact us by email, phone, or chat; interact with our marketing (e.g. clicking a link in an email); or use the Platform, which may automatically log usage and technical data.

HOW WE USE YOUR PERSONAL DATA AND OUR LEGAL BASIS

We use your personal data for the following purposes, relying on the legal bases set out below under UK GDPR:

To provide and manage your Subscription and the Services — necessary for performance of a contract with you.

To process payments and manage billing — necessary for performance of a contract, and to comply with our legal obligations (e.g. tax records).

To respond to enquiries and provide support — necessary for performance of a contract, or our legitimate interest in responding to you.

To send you service-related communications (e.g. billing notices, security alerts) — necessary for performance of a contract.

To send you marketing communications about our Services — based on your consent, or our legitimate interest in marketing to existing business clients (you can opt out at any time).

To improve our website and Services, and for analytics — our legitimate interest in understanding and improving our business.

To detect, prevent, and investigate fraud or misuse of the Services — our legitimate interest in protecting our business and other clients.

To comply with legal obligations, including responding to lawful requests from authorities.

Our website uses cookies and similar technologies to operate the site, remember your preferences, and understand how visitors use it. Some cookies are essential and cannot be switched off; others (e.g. analytics, marketing) require your consent, which you can manage via our cookie banner or browser settings.

HOW WE SHARE YOUR PERSONAL DATA

We may share your personal data with: our sub-processors and service providers who help us deliver the Services (e.g. GoHighLevel and its underlying infrastructure, payment processors, telephony/SMS providers, email/hosting providers, analytics providers) — under contracts requiring them to protect your data; professional advisers (accountants, solicitors) where necessary; law enforcement or regulators, where required by law; and a buyer or successor, if we sell or transfer our business, subject to this policy continuing to apply.

We do not sell your personal data to third parties.

INTERNATIONAL TRANSFERS

Some of our service providers (including elements of our Platform infrastructure) may process data outside the UK, for example in the US or EEA. Where this happens, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or a provider's adequacy status recognised by the UK Government.

HOW LONG WE KEEP YOUR DATA

We process data in accordance with UK GDPR.

We keep personal data for as long as necessary for the purposes described above, including: for the duration of your Subscription, plus a reasonable period afterwards for legal, accounting, and dispute-resolution purposes (in line with HMRC requirements); marketing data, until you unsubscribe or we no longer have a lawful basis to hold it; and website/enquiry data from non-clients, for a limited period if no relationship develops.

YOUR RIGHTS

Under UK GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data, in certain circumstances; object to or restrict our processing, in certain circumstances; request a copy of your data in a portable format; and withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We'll respond within one month, as required by law.

If you're unhappy with how we've handled your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.

OUR ROLE WHEN YOU USE THE PLATFORM

When you use the Platform to store or process personal data about your own customers or leads (for example, homeowner or client contact details), you are the data controller for that data, and we act as a data processor on your behalf, under the terms of our Data Processing Addendum. This Privacy Policy does not apply to how you process that data — that's governed by your own privacy notices to your customers, and by our DPA with you.

SECURITY

We use appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit, and working only with reputable infrastructure and sub-processors. No system is completely secure, and we cannot guarantee absolute security, but we take reasonable steps to protect your data and to respond promptly to any suspected breach.

CALL RECORDING

We may record sales, onboarding, and support calls for quality assurance, training, and record-keeping. We'll give verbal notice at the start of the call; by continuing, you consent to being recorded. If you do not wish to be recorded, please tell us at the start of the call and we will end or pause the recording.

CHILDREN'S DATA

Our Services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18.

CHANGES TO THIS POLICY

We may update this policy from time to time. Material changes will be notified by email or a notice on our website at least 30 days before taking effect where practicable. The "Last Updated" date at the top shows when it was last revised.

If you have questions about this policy or how we handle your data, contact us at:

SimpleGrowthSystems

Email: [email protected]

Web: simplegrowthsystems.co.uk