Privacy Policy

How Growthbet LTD collects, uses, and protects your personal data under the UK GDPR and Data Protection Act 2018.

1. Introduction

Growthbet LTD ("Growthbet", "we", "us", or "our") is a private limited company registered in England and Wales, with our registered office at 71–75 Shelton Street, Covent Garden, London, United Kingdom. We are the operational prime contractor for global industrial procurement, connecting verified suppliers with enterprise buyers worldwide.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website at growthbet.net, register an account, submit a Request for Quotation (RFQ), place an order, or otherwise interact with our services. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you should discontinue use of our services.

2. Who We Are — Data Controller

Growthbet LTD is the data controller for the personal data we process in connection with our website and services. This means we determine the purposes and means of processing your personal data.

Data Controller: Growthbet LTD

Registered Office: 71–75 Shelton Street, Covent Garden, London, United Kingdom

Company Registration: Registered in England and Wales

Data Protection Contact: sales@growthbet.net

Phone: +44 789 747 0885

We have not appointed a dedicated Data Protection Officer (DPO). All data protection enquiries should be directed to the contact details above. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

3. What Personal Data We Collect

We collect personal data that you provide directly to us, as well as data collected automatically when you use our website. The categories of personal data we may process include:

3.1 Data You Provide Directly

  • Account registration data: your name, email address, phone number, job title, company name, company registration number, tax/VAT number, industry, country, and trade licence details when you register for a Growthbet account.
  • RFQ and order data: product specifications, quantities, Bill of Materials (BOM) uploads, delivery addresses, billing information, and any notes or instructions you provide when submitting an RFQ or placing an order.
  • Communication data: records of your communications with us via email, WhatsApp, Telegram, Signal, phone calls (which may be recorded for quality and compliance purposes), web contact forms, and the Talk to Engineer callback service.
  • Payment data: wire transfer references, bank transfer confirmations, Letter of Credit (LC) references, and invoice details. We do not process or store card payment data — all payments are via wire transfer (SWIFT/TT) or LC.
  • Newsletter and marketing: your email address if you subscribe to our newsletter or marketing communications.

3.2 Data Collected Automatically

  • Usage data: your IP address, browser type, operating system, device identifiers, referring URLs, pages visited, time spent on pages, and click data.
  • Cookies and similar technologies: we use cookies to operate our website. See our Cookies Policy for full details.
  • Server logs: our web servers automatically log standard request information including timestamp, IP address, requested URL, and HTTP status codes.

3.3 Data from Third Parties

In limited circumstances, we may receive business information about you from third-party sources, such as public business databases, import/export intelligence platforms (e.g., customs data), or professional advisors, to verify company legitimacy and support our procurement services.

4. How We Use Your Personal Data

We process your personal data for the following purposes:

  • Providing our services: registering your account, processing RFQs, generating quotations, fulfilling orders, arranging logistics and customs clearance, and delivering products to your facility.
  • Communication: responding to your enquiries, providing sourcing briefs within 12 hours, sending order status updates, and delivering quotation documents.
  • Verification and compliance: verifying your company identity, conducting Know Your Business (KYB) checks, screening against sanctions lists, and ensuring compliance with export controls and anti-bribery regulations.
  • Payment processing: managing wire transfer references, issuing invoices, tracking milestone payments, and reconciling accounts.
  • Service improvement: analysing website usage, improving our sourcing processes, and developing new service offerings.
  • Marketing: sending you relevant procurement insights, product alerts, and service updates — only with your consent, which you can withdraw at any time.
  • Legal obligations: meeting our obligations under UK and international law, including customs documentation, tax reporting, and record-keeping requirements.
  • Security: protecting our website, detecting and preventing fraud, and ensuring the integrity of our procurement transactions.

5. Legal Basis for Processing

Under the UK GDPR, we rely on the following legal bases to process your personal data:

  • Performance of a contract (Article 6(1)(b)): processing your account, RFQs, quotations, orders, payments, and deliveries — this is necessary to provide the procurement services you have requested.
  • Legal obligation (Article 6(1)(c)): processing data for customs compliance, tax reporting, sanctions screening, and anti-bribery checks required by UK and international law.
  • Legitimate interests (Article 6(1)(f)): processing data for service improvement, website security, fraud prevention, and communicating with you about your orders — our legitimate business interests that do not override your rights.
  • Consent (Article 6(1)(a)): sending marketing communications and setting non-essential cookies — you can withdraw your consent at any time.

6. Data Sharing

We do not sell your personal data. We share your personal data with the following categories of recipients only where necessary:

  • Suppliers and manufacturers: we share your delivery address and product specifications with verified suppliers and manufacturers to fulfil your orders. We do not share pricing or commercial terms beyond what is necessary for order execution.
  • Logistics providers: freight forwarders, shipping lines, and customs brokers receive delivery details, commercial invoices, and packing lists to arrange transport and customs clearance.
  • Payment and banking partners: our banking partners (Wise Business, Airwallex) process wire transfers. We share invoice references and payment details as needed.
  • Professional advisors: lawyers, accountants, and auditors may receive personal data in the course of providing professional services, subject to confidentiality obligations.
  • Government authorities: customs authorities in the UK and destination countries may receive delivery and product information for import/export compliance. Law enforcement may receive data in response to lawful requests.
  • Service providers: cloud hosting, email delivery, and analytics providers process data on our behalf under data processing agreements. These providers act as data processors and cannot use your data for their own purposes.

7. International Data Transfers

Growthbet operates globally. We source from suppliers in China, Taiwan, Turkey, Germany, the USA, and the Gulf region, and we serve clients in the GCC, UK, Europe, USA, and Australia. As a result, your personal data may be transferred to, stored in, or processed in countries outside the United Kingdom.

When we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as:

  • UK International Data Transfer Agreements (IDTAs) or Addendas to EU Standard Contractual Clauses (SCCs) with our service providers and partners.
  • Relying on applicable UK government adequacy regulations for countries recognised as providing adequate data protection.
  • Implementing supplementary measures (e.g., encryption, pseudonymisation) where necessary to protect your data.

If you would like more information about the specific safeguards we use for international transfers, please contact us at sales@growthbet.net.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. Our general retention periods are:

  • Account data: retained for the duration of your account plus 6 years after closure (for tax and audit compliance).
  • Order and transaction data: retained for 7 years from the date of order completion (customs and financial record-keeping requirements).
  • RFQ data (no order placed): retained for 2 years, then deleted or anonymised.
  • Communication records: retained for 6 years (contractual and legal dispute limitation periods).
  • Marketing data: retained until you withdraw consent or unsubscribe, at which point it is deleted within 30 days.
  • Server logs: retained for 90 days for security and troubleshooting.

9. Your Rights Under UK GDPR

Under the UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal data:

  • Right of access (Article 15): you can request a copy of the personal data we hold about you and information about how we process it.
  • Right to rectification (Article 16): you can ask us to correct any inaccurate or incomplete personal data we hold about you.
  • Right to erasure (Article 17): also known as the "right to be forgotten" — you can ask us to delete your personal data in certain circumstances (e.g., when the data is no longer necessary, you withdraw consent, or you object to processing). Note: we may need to retain certain data to comply with legal obligations.
  • Right to restrict processing (Article 18): you can ask us to limit how we use your personal data — for example, while a rectification request is being processed or if you contest the accuracy of the data.
  • Right to data portability (Article 20): you can request a copy of your personal data in a structured, machine-readable format to transfer to another service provider. This applies to data you provided to us and that is processed by automated means based on consent or contract.
  • Right to object (Article 21): you can object to our processing of your personal data based on legitimate interests or for direct marketing. We will stop processing unless we have compelling legitimate grounds that override your rights.
  • Rights related to automated decision-making (Article 22): you have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently make such decisions.
  • Right to withdraw consent: where we process your data based on consent (e.g., marketing), you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at sales@growthbet.net with the subject line "Data Rights Request". We will respond within one month of receiving your request. In certain cases, we may need to verify your identity before processing your request.

10. Cookies

We use cookies and similar technologies on our website. Cookies are small text files stored on your device when you visit a website. For full details about the cookies we use, what they do, and how to manage them, please read our Cookies Policy.

11. Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it, including:

  • Encryption of data in transit using TLS/SSL (HTTPS).
  • Secure password storage using industry-standard hashing algorithms.
  • Role-based access control — only authorised staff can access personal data, and only on a need-to-know basis.
  • Regular security reviews and vulnerability assessments of our web application.
  • Secure cloud hosting with reputable providers that maintain ISO 27001 and SOC 2 certifications.
  • Data backups and disaster recovery procedures.

Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. In the unlikely event of a personal data breach, we will notify the ICO and affected individuals where required by law within 72 hours of becoming aware of the breach.

12. Children’s Privacy

Our website and services are intended exclusively for business-to-business (B2B) use. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us and we will promptly delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will post the updated version on this page and update the "Last updated" date below. For significant changes, we may also notify you by email or display a prominent notice on our website. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

  • Email: sales@growthbet.net
  • Phone: +44 789 747 0885
  • Post: Growthbet LTD, 71–75 Shelton Street, Covent Garden, London, United Kingdom

If you remain dissatisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.


Last updated: August 2026