Legal
Privacy policy
How Gro collects, uses and protects the personal data you give us through this website.
Last updated 6 October 2026
Who we are
Gro Equity Ltd ("Gro", "we") runs this website. We are registered in England and Wales, company number 16762013, and based at Cell Block Studios, Portsmouth Historic Dockyard, College Road, HM Naval Base, Portsmouth PO1 3LJ.
We are the controller of the personal data described in this policy.
For any question about your data, use the contact form on our home page or write to us at the address above.
What this policy covers
This policy covers this website and its contact form.
It does not cover the Gro platform. Firms that use Gro hold their own clients' data under their agreement with us. For that data, the firm is the controller and we act on its instructions.
What we collect
When you send the contact form, we collect:
- Your first and last name.
- Your email address.
- Your phone number.
- Your message.
To stop spam, Google reCAPTCHA reads technical details from your browser, such as your IP address and browser type. Our servers also record your IP address and the time of each request, for security.
We do not use analytics or advertising cookies, and we do not track you across other websites.
Why we use it
- To reply to your message and arrange a demo. Our lawful basis is our legitimate interest in answering enquiries, and taking steps you ask for before a contract.
- To keep the website secure and free of spam. Our lawful basis is our legitimate interest in protecting the website and the people who use it.
We do not sell your data, and we do not use it for automated decisions about you.
How we protect it
Each detail you send is encrypted on its own before it is stored. Only the people who answer enquiries can read it. Your message is also emailed to our team so we can reply.
Who we share it with
We share your data only with the services that run this website for us:
- Google Cloud, which hosts the website and stores your message in the UK (London).
- Google reCAPTCHA, which checks that a person sent the form. Google's Privacy Policy and Terms of Service apply to that check.
- Our email provider, which delivers your message to our team.
Some of these providers may process data outside the UK. Where they do, the transfer is protected by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
How long we keep it
We keep your message for two years after our last contact with you, then delete it. If you become a customer, your details move under your contract with us.
Security records of requests are kept for 30 days.
Cookies
Google reCAPTCHA sets cookies to tell people from automated programs. We treat these as strictly necessary to protect the contact form. This website sets no other cookies.
Your rights
You can ask us to:
- Give you a copy of your data.
- Correct data that is wrong.
- Delete your data.
- Stop or limit how we use it.
- Send your data to you or another organisation in a common format.
You can also object to how we use your data. To make any of these requests, use the contact form on our home page or write to us at the address above. We reply within one month.
Complaints
If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
We will post any change on this page and update the date at the top.