Privacy notice

Introduction

We are committed to protecting your privacy and the safety and integrity of the personal data you entrust to us. This notice explains how Growth=MC2 (“we”, “us”, or “our”) processes (“collects”, “handles”, “stores”, “uses”, “shares” or “transfers”) the personal data of our website users, clients and stakeholders (“you”, “your”).

Growth=MC2 is a company registered in England and Wales with company number 10621967, at the registered office address Innovation House 19 Staple Gardens, Winchester, Hampshire, England, SO23 8SR.

If you would like to get in touch to discuss how we collect, use and store your personal data or would like to exercise your data subject rights or contact our Data Protection Officer, please send us an email to privacy@gmc2.com.

How we process your data

1. The Scope of Processing

The types or categories of personal data that we process about you depend on the context in which we obtain your personal data and how you interact with us. We also process your personal data, when third-parties share your data with us. Here are the ways in which we obtain personal data about you:

• Through your visit and interaction on our website: When you browse our website, download information or navigate different pages on the site we collect your device information.
• When you enquire about services using the contact from available on our site: Whenever you contact us via the enquiry form on our site, we need to collect your name and contact information to be able to respond to your query and provide you with the information and/or service requested.
• When you subscribe to our marketing communication: You may opt-in to receive marketing emails from us including promotional material and material that administers your participation in surveys, events and research. To provide you with marketing communication we need to collect your name and contact information, occupation information.
• Through cookies and similar technologies: We use cookies on our site to improve your user experience and provide you with a personalised experience whilst browsing the site.
• When third-parties share your personal data with us. We may receive personal information about you from various third-parties.

2. The Personal Data We Collect

The category (type) of personal data that we collect about you depends on the purpose for which we collect that data. Here are some categories of personal data that we may collect:

• Names and contact information- for example your first name, surname, email address,
• Interests and preferences in relation to our products;
• nformation you submit when you partake in our customer surveys/and or offers;
• Device information- for e.g.: browser, network and device, IP address, the web-pages of other websites, clicks, internal links, pages visited, scrolling, searches and timestamps.

3. The Reasons for Processing

We only process your personal data when we have a lawful reason for processing under Article 6(1) of the UK GDPR. We may process your personal data for more than one lawful reason at a time. When we process your personal data, we usually do so:

• Because you have consented to the processing;
• To enter into a contract with you or to fulfil our obligation in providing you with a service as per the terms of our contract with you;
• To comply with our obligations under applicable laws and regulations
• Because it is in our or a third party’s legitimate interest

4. Who we share your personal data

We may share your personal data with trusted third-parties to help us improve your experience across our website and services. To preserve the safety and integrity of personal data, we enter into contracts with any third-party to whom we entrust your data, and put in place appropriate contractual safeguards to ensure that they only process the minimum data necessary to carry out their function.

Your personal data may be processed by third-parties that provide the following services:

Squarespace

Our website is hosted by Squarespace. When you use our website Squarespace collects personal data about you including information on your browser, network and device; web pages that you visited prior to coming to this website; and your IP address. Squarespace needs this data to operate this website and to improve its platform and services. Squarespace analyses the data in a de-personalized form. We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.

5. Transfers of data outside the UK/EEA

If we transfer your personal data to countries outside of the UK, we ensure that adequate safeguards have been put in place in line with the UK GDPR. Whenever we transfer your personal data to organisations based in third-countries that have not been recognised as providing an equivalent level of protection to that offered under the UK GDPR, we add additional protection to the contract with these organisations to preserve the safety of your personal data. If you have any questions relating to the safeguards, we put in place to protect your personal data in the context of data transfers to a third-country, please get in touch at privacy@gmc2.com.

6. Marketing

We occasionally deliver marketing communication via email to keep you up-to-date on latest business news and insights. You can send us an email to privacy@gmc2.com to request to be removed from our mailing list.

7. Data Subject Rights

Under the UK GDPR you have the right to control how we handle your personal data by submitting a data subject request. In particular, you have the right to:

• Be informed of how handle your personal data- you can exercise this right by accessing this Privacy Notice or sending an email to privacy@gmc2.com with your data protection related query. (Right to be informed)
• Access personal data we process about you by making a Data Subject Access Request (DSAR)- you can do this by sending an email to privacy@gmc2.com requesting to receive a copy of the personal data we process about you. (Right to Access)
• Have your personal data rectified. (Right to Rectification)
• Have your personal data erased from our systems and the systems of third-parties may share your personal data with. (Right to Erasure)
• Restrict the processing of your personal data. (Right to Restriction)
• Request you personal data in a portable format. (Right to Portability)
• Object to the ways in which we process your personal dat. (Right to Object)
• Refuse to be subject to automated decision making including profiling.
• Withdraw consent to any processing that you have previously consented to.

You can exercise any of the abovementioned rights by emailing us at privacy@gmc2.com. We will comply with your request free of charge.

Complaints to the regulator

If you are unhappy with the way we handle your personal data, you have the right to get in touch with the Information Commissioner’s Office (ICO).

For information on how to get in touch with the ICO, please visit https://ico.org.uk/make-a-complaint/.

8. EU Representative

As a business that provides services to individuals resident in the EEA, we are required to appoint an EU representative. Our representative within the EU with respect to our obligations under the GDPR is DataRep. DataRep’s privacy notice can be found here.

Contact our EU Representative

If you are resident in one of the countries in the EEA and would like to obtain information on how we process your personal data or exercise your rights, please direct your query via email to datarequest@datarep.com quoting G=mc2 in the subject line or contact DataRep using the online webform at www.datarep.com/data-request.

You can also send your query by post to one of the below-mentioned postal addresses. Please ensure that you mark the letter for “DataRep” and not G=mc2 or your inquiry may not reach DataRep. On receiving your correspondence, G=mc2 will likely request evidence of your identity to ensure your personal data and information connected with it is not provided to anyone other than you.

9. Artificial Intelligence (AI)

We use carefully-selected AI tools to help us provide our services and generate insights for our clients. These tools are never used to make automated decisions that produce legal or similarly significant effects . All AI outputs are reviewed by our team before and we routinely test the underlying models for fairness, accuracy and security. Where we rely on third-party AI providers, we impose contractual safeguards that require them to process personal data solely in compliance with the UK GDPR and other applicable laws. You can contact us to find out more by emailing privacy@gmc2.com.

10. Contact Us

If you would like to contact us regarding any of the information provided in this Privacy Notice or would like to exercise one of your data subject rights, please contact us at privacy@gmc2.com.

11. Changes to this Notice

We reserve the right to make changes to this Privacy Notice to ensure that the information presented to you in this Notice fully reflects how we handle, store and share your personal data.