Privacy Policy

Grace & Growth is committed to protecting your privacy and handling your personal data with care and transparency.

This Privacy Policy explains how your information is collected, used, and protected when you visit or interact with this website.


Who we are

Grace & Growth
Website: https://graceandgrowth.co.uk

For the purposes of data protection law, Grace & Growth is the data controller responsible for your personal data.

If you have any questions about this policy or how your data is used, you can contact us via the website contact form.


What personal data we collect and why

Contact forms

When you submit a contact form, we collect the information you provide (such as your name, email address, and message) so we can respond to your enquiry.

This data is used only for customer service and communication purposes and is not shared for marketing without your consent.


Email sign-ups

If you choose to subscribe to emails or updates, your name and email address are collected and processed via MailerLite.

This data is used to send faith-based content, updates, or resources you have opted in to receive. You can unsubscribe at any time using the link in any email.

MailerLite processes data in accordance with its own privacy policy and GDPR obligations.


Orders and purchases

When you purchase a product through the website, we collect information necessary to:

  • Process your order
  • Deliver digital products
  • Manage payments and refunds
  • Comply with legal and accounting obligations

This may include your name, email address, billing address, and payment details. Payment information is processed securely by third-party payment providers and is not stored on this website.


Analytics

We use Google Analytics to understand how visitors use the site, such as which pages are visited and how long users stay on the site.

This data is anonymised where possible and used only to improve the website and content.


Comments

If comments are enabled and you leave a comment, we collect the data shown in the comment form, your IP address, and browser user agent to help with spam detection.

An anonymised hash of your email address may be provided to the Gravatar service. Their privacy policy is available at https://automattic.com/privacy/.


Cookies

This website uses cookies to improve your experience.

Cookies may be used to:

  • Remember your preferences
  • Enable site functionality
  • Support analytics and embedded content

You can manage or disable cookies through your browser settings. Where required, cookie consent is managed via the site’s consent tool.


Embedded content from other websites

Articles and pages may include embedded content such as videos, images, or social media posts.

Embedded content behaves as if you visited the other website directly. These third-party websites may collect data about you, use cookies, or track your interaction according to their own privacy policies.


Who we share your data with

We only share personal data with trusted third-party services where necessary, including:

  • Payment processors (for purchases)
  • Email service providers (for subscriptions)
  • Analytics providers (for site performance)
  • Security and spam-prevention services

We never sell your personal data.


How long we retain your data

  • Contact form submissions are retained only as long as necessary to deal with your enquiry
  • Email subscription data is retained until you unsubscribe
  • Order records are kept for legal and accounting purposes
  • Comment data may be retained indefinitely unless removed upon request

Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Withdraw consent where processing is based on consent
  • Request a copy of your data
  • Lodge a complaint with the UK Information Commissioner’s Office (ICO)

You can exercise these rights by contacting us via the website.


How we protect your data

We take reasonable technical and organisational measures to protect your personal data, including secure hosting, security plugins, and access controls.


Changes to this policy

This policy may be updated from time to time to reflect changes in law or website functionality. The latest version will always be available on this page.