Privacy Policy

Last updated: 11 September 2026

Who we are

Growth is an independent digital and performance marketing agency. We operate remotely from Pakistan and work with businesses in the United States and the United Kingdom. This policy applies to the website at https://growth.orlixs.com.

For any question about this policy, or about personal data we hold, write to growth.orlixs@gmail.com. We have not appointed a Data Protection Officer, as we are not required to do so; enquiries sent to that address reach the people responsible for data protection here.

What data we collect

This website collects personal data through one route only: the contact form. When you complete and submit it, we receive the information you have chosen to enter.

• Your name
• Your email address
• Your telephone number, if you choose to give one — this field is optional
• The service you are interested in
• The message you write to us

The form also uses two technical measures to reduce automated spam: a hidden field that a person will not see or fill in, and a timestamp recording when the form was loaded. Submissions are additionally rate-limited by IP address, held in the memory of the server handling the request and not written to any permanent record.

We do not ask for, and would rather you did not send, special category data — information about health, race or ethnicity, political opinions, religious beliefs, trade union membership, genetics, biometrics, sex life or sexual orientation — or financial account details, through this form.

Why we use it, and our lawful basis

We use what you send us to read your enquiry, reply to it, understand whether we are a sensible fit for the work described, and where relevant to prepare a proposal or arrange a call.

If you are in the United Kingdom or the European Economic Area, our lawful basis under the UK GDPR and the EU GDPR is as follows.

• Legitimate interests (Article 6(1)(f)) for responding to a business enquiry you have chosen to send us, and for the spam-prevention measures described above. Our interest is in running an enquiry channel that works and is not overwhelmed by automated traffic; we consider this proportionate because you initiate the contact and we ask for no more than a reply requires.
• Consent (Article 6(1)(a)) where you have asked us to keep in touch about our services beyond the enquiry itself. You may withdraw that consent at any time, and withdrawing it does not affect anything we did lawfully beforehand.
• Steps prior to entering a contract (Article 6(1)(b)) where your enquiry leads to a proposal and we correspond in order to agree scope and price.

We do not use your enquiry for automated decision-making or profiling, and we do not sell or rent personal data to anyone.

Who processes your data for us

Nothing submitted through the form is stored in a database on this website. Two service providers act as processors on our behalf.

• Resend (resend.com) — the third-party email interface that delivers your form submission to our inbox. Your submission passes through their systems in order to reach us.
• Vercel — the platform that hosts this website and runs the code handling the form. As with any web host, their infrastructure processes the request, including connection data such as your IP address, in order to serve the site and keep it secure.

Each provider is engaged to process personal data only on our instructions and for the purposes set out above. Beyond these, your enquiry reaches the email account we use to correspond with you, and is handled by the people at Growth who need to read it in order to reply.

We may also disclose personal data where we are required to do so by law, or where it is necessary to establish, exercise or defend a legal claim.

How long we keep it

We keep enquiry correspondence for as long as is necessary for the purpose it was collected for. In practice, that means we keep it while we are in conversation with you, and for a reasonable period afterwards in case you come back to us or a question arises about what was discussed. Where an enquiry becomes a client engagement, correspondence is retained for the life of that engagement and for the period afterwards that our records and any legal obligations require. Where an enquiry goes no further, we delete or anonymise it once it no longer serves any purpose. You can ask us to delete it sooner, and we will unless we have a legal reason to keep it.

Cookies, fonts and tracking

This website sets no advertising cookies and no analytics cookies of its own. We do not run behavioural tracking, retargeting pixels or advertising identifiers on it.

The site does load its typeface from Google Fonts, at fonts.googleapis.com, with the font files served from fonts.gstatic.com. This means your browser makes a request to servers operated by Google in order to render the page, and Google receives connection information such as your IP address, browser and operating system as part of that request. That processing is governed by Google's own privacy terms rather than ours. If you would prefer to avoid it, a browser extension or setting that blocks third-party font requests will prevent it; the site remains readable in a fallback typeface.

Our hosting provider may also process technical connection data for security and for the basic operation of the site, as described above.

Where your data goes

Our team works remotely from Pakistan. If you are in the United Kingdom or the European Economic Area, this means personal data you send us is accessed from, and may be stored in, a country outside the UK and the EEA that is not the subject of a UK or EU adequacy decision. Our service providers may also process data in the United States and elsewhere.

Where we transfer personal data outside the UK or the EEA, we take steps to see that it remains protected to an equivalent standard — including relying on the appropriate safeguards our providers put in place, such as standard contractual clauses, and limiting what we transfer to what is needed to answer you. If you would like to know more about the safeguards applying to a particular transfer, write to us and we will explain them.

Your rights

If the UK GDPR applies to you, you hold the following rights over personal data we hold about you. Equivalent rights apply under the EU GDPR.

• Access — to be told whether we hold personal data about you, and to receive a copy of it
• Rectification — to have inaccurate data corrected, and incomplete data completed
• Erasure — to have data deleted where we no longer have a good reason to hold it
• Restriction — to have our use of your data paused while a question about it is resolved
• Objection — to object to our processing where we rely on legitimate interests, and to object at any time to direct marketing
• Portability — to receive data you gave us in a structured, commonly used, machine-readable format, and to have it sent to another controller where technically feasible
• Withdrawal of consent — to withdraw consent at any time, where consent is what we relied on
• Complaint — to complain to a supervisory authority

How to exercise them

Write to growth.orlixs@gmail.com and tell us which right you wish to exercise. There is no form to complete and no charge. We may ask you for information that lets us be confident we are dealing with the right person before we act, which protects you as much as us. We aim to respond within one month of receiving your request, and will tell you if a request is complex enough that we need longer.

If you are unhappy with how we have handled your personal data or your request, we would like the chance to put it right, so please tell us first. You are also entitled to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk. If you are in the European Economic Area, you may complain to the supervisory authority in your country of residence, place of work, or the place where the issue arose.

Security

We take reasonable technical and organisational measures to protect personal data, including limiting access to those who need it and relying on established providers for hosting and email delivery. No transmission over the internet can be guaranteed to be completely secure, and we cannot promise absolute security; we can promise that we take the responsibility seriously and act promptly if something goes wrong.

Children

This website is directed at businesses and is not intended for children. We do not knowingly collect personal data from children. If you believe a child has sent us personal data through this site, write to us and we will delete it.

Other websites

This site links to websites operated by other organisations. We are not responsible for their content or their privacy practices, and this policy does not cover them. We would encourage you to read the privacy notice of any site you visit from here.

Changes to this policy

We may update this policy from time to time — for example if we change how the contact form works, or if we begin using a different provider. The current version always sits on this page, and the "Last updated" date at the top tells you when it last changed. Where a change materially affects how we use personal data we already hold, we will take reasonable steps to tell affected people directly, by email where we have an address for them.

Contact

Questions about this policy, or about data protection generally, should go to growth.orlixs@gmail.com.

Growth is an independent agency. GoHighLevel is a trademark of HighLevel Inc.; we are not affiliated with or endorsed by HighLevel.