Privacy policy

Growth Sync operates thegrowthsync.com and is the controller of the personal data described below.

Reach us about anything on this page at info@thegrowthsync.com. We answer data requests ourselves; there is no ticket queue.

When you send an enquiry through the form, we receive what you typed into it:

• your name and email address, which are required
• your company, budget range, timeline and the solution areas you selected, all optional
• the message describing what you need

Alongside that, our server records the page you came from, your IP address and your browser's user-agent string. We use these to spot automated submissions and to tell genuine enquiries apart from spam.

Your browser also stores, and sends with the enquiry, any campaign tags that were on the link you first arrived through — utm_source, utm_medium, utm_campaign, utm_term, utm_content, and the gclid, fbclid or msclkid click identifiers. This is how we know which advert or post brought you here. It is stored on your own device, it is not an identifier we can use to recognise you elsewhere, and it is sent to us only at the moment you choose to submit the form.

If you email or message us directly, we hold that correspondence too.

For enquiries, our lawful basis is legitimate interest: you asked us to get in touch about work, and we cannot answer without keeping what you sent. If we go on to work together, we hold the same data to perform our contract with you.

For the optional analytics described below, our lawful basis is your consent, which you give or refuse in the cookie banner and can change at any time.

We do not sell personal data, we do not buy it, and we do not use your enquiry to add you to a marketing list you did not ask for.

Essential storage runs regardless: it remembers your cookie choice and the campaign tags described above, and without it the site cannot work as intended.

With your agreement we also load:

• Google Analytics 4, through Google Tag Manager — which pages are read, which campaigns bring people here, and which enquiries came from where
• the Meta pixel — so we can tell whether an advert on Instagram or Facebook led to an enquiry
• Microsoft Clarity — anonymised heatmaps and session replays showing where people stop reading a page

Google Analytics runs in a cookieless mode until you consent, using Google's Consent Mode. The Meta pixel and Microsoft Clarity are not loaded at all until you consent — not loaded-and-idle, but absent from the page.

Microsoft Clarity records how a page was used: scrolling, clicks and mouse movement. It is configured to mask text you type, so what you enter into the enquiry form is not captured in a replay.

To change your mind, clear this site's cookies and site data in your browser and the banner will ask again. We would rather you did that than feel stuck with a choice you made in a hurry.

Only the suppliers we need to run the service, and only for that purpose:

• Hostinger, which hosts this site and serves it through a content delivery network
• Resend, which delivers the enquiry notification to our inbox
• Google, Meta and Microsoft, for the analytics tools above, and only once you have consented to them

We never pass your enquiry to another agency, a lead broker or any other third party.

We work with clients across Pakistan, the Gulf, the United Kingdom, the United States, Australia, the Netherlands and Hong Kong, we quote in US dollars, and our team and our suppliers are not all in one country. Your data will therefore be processed outside the country you are reading this in, including outside the UK and the European Economic Area.

Where that happens for visitors in the UK or the EEA, we rely on the receiving supplier's standard contractual clauses or an equivalent safeguard. If you want to know which applies to a specific supplier, ask us and we will tell you.

Enquiries that do not become work: up to 24 months, so we have context if you come back to us, then deleted.

Enquiries that become work: for the life of the engagement and for seven years afterwards, which is what tax and accounting records require.

Analytics data: for the retention period configured in each tool, which is 14 months in Google Analytics and shorter in Microsoft Clarity.

These are our intentions rather than an automated process. Ask us to delete your data sooner and we will.

Wherever you are, you can ask us to:

• tell you what we hold about you, and give you a copy
• correct anything that is wrong
• delete it
• stop using it for a particular purpose

If you are in the UK or the EEA, these are rights under the UK GDPR and the GDPR respectively, together with the right to object to processing based on legitimate interest and the right to data portability. If you are elsewhere, we will honour the same requests regardless of whether your local law compels us to.

Email info@thegrowthsync.com and we will respond within 30 days. You will not be asked to fill in a form to exercise a right.

If you are unhappy with our answer, visitors in the UK or the EEA may complain to their own national data protection authority — in the UK, the Information Commissioner's Office.

This is a business-to-business site. We do not knowingly collect data from anyone under 16. If you believe a child has sent us something, tell us and we will delete it.

This policy was last revised on 12 October 2026. If we change it materially we will update that date, and the change will apply from the day it is published.