Privacy Policy
Last updated: 28 October 2026
This policy explains how Origin Growth Limited collects and uses personal information when you visit origingrowth.co.uk, get in touch with us, or work with us. We keep it short and in plain English. If anything is unclear, email us and we will explain.
Origin Growth Limited ("Origin", "we", "us", "our") is a digital agency and CRM consultancy. We are registered in England and Wales under company number 11475953, with our registered office at The Farm House, Oldberrow Manor, Ullenhall Lane, Henley-in-Arden, Warwickshire, B95 5PF.
We are the data controller for the personal information described in this policy. We are registered with the Information Commissioner's Office (ICO) under registration number ZB178766.
For any privacy question or request, contact us at:
Email: [email protected]
Post: Data Protection, Origin Growth Limited, The Farm House, Oldberrow Manor, Ullenhall Lane, Henley-in-Arden, Warwickshire, B95 5PF
When we deliver projects for clients, we sometimes process personal information on their behalf (for example, data held in a client's CRM). In that case the client is the data controller, and our contract with them sets out how we handle that data. This policy does not cover that processing.
We only collect what we need. Most of it is business contact information.
Information you give us
Contact details when you fill in a form, email us, book a call or apply for a job: name, job title, company, email address, phone number and anything you choose to include in your message.
Meeting details when you book a call through Calendly, such as your name, email and the time you choose.
Information needed to work with you if you become a client or supplier, such as contact details for your team and invoicing details.
CVs and application details if you apply for a role with us.
Information collected when you use our website
Technical information such as your IP address, browser, device type and the pages you visit, collected through cookies and similar technologies.
Company-level information about the organisation you visit from, which tools such as Apollo.io can infer from your IP address.
We only set non-essential cookies with your consent, which you can give or change through our cookie banner. Our Cookie Policy lists every cookie we use.
Information from other sources
We may collect business contact details from public professional sources such as LinkedIn, company websites and business data providers (for example Apollo.io), so we can contact people at organisations we think we can help.
We do not knowingly collect special category data (such as health or ethnicity), and our website is not aimed at children.
UK data protection law requires a lawful basis for each use of personal information. These are ours.
What we do | Lawful basis |
Reply to enquiries and arrange calls | Legitimate interests: responding to people who contact us |
Prepare proposals and deliver work for clients | Contract, or steps before entering into one |
Manage supplier and partner relationships | Contract and legitimate interests |
Send relevant business updates, insights and event invitations to business contacts | Legitimate interests (you can opt out at any time); consent where the law requires it |
Understand how our website is used and improve it (Google Analytics) | Consent, given through our cookie banner |
Identify which organisations visit our website (Apollo.io) | Consent, given through our cookie banner |
Protect our website from spam and abuse (Google reCAPTCHA) | Legitimate interests: keeping our website secure |
Assess job applications | Steps before entering into a contract, and legitimate interests |
Keep financial records and meet legal obligations | Legal obligation |
Where we rely on legitimate interests, we have considered your rights and only use your information in ways you would reasonably expect. Every marketing email includes an unsubscribe link.
We do not sell your personal information, and we do not make decisions about you based solely on automated processing.
We share personal information only where we need to, and only with organisations that protect it.
Our own team, including our development centre in Klaipeda, Lithuania, which Origin owns and runs. Access is limited to people who need it for their work.
Service providers who help us run our business, under contracts that require them to keep your information secure and use it only on our instructions. These include website hosting (Microsoft Azure), our CRM and email systems, Microsoft 365, Google Analytics, Apollo.io, Calendly, Cookiebot and Google reCAPTCHA.
Professional advisers such as accountants, lawyers and insurers.
Authorities or courts, where the law requires it or to protect our legal rights.
A buyer or investor, if Origin is involved in a sale, merger or restructure, under confidentiality terms.
International transfers
Some of our service providers store or access information outside the UK, including in the European Economic Area and the United States. Where information leaves the UK, we make sure it is protected: either the destination is recognised by the UK as having adequate protection, or we use approved safeguards such as the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU-US Data Privacy Framework.
We keep personal information only as long as we need it for the purpose we collected it, then delete or anonymise it.
Information | How long we keep it |
Enquiries and prospect contact details | 2 years from our last contact, unless you become a client |
Client and supplier records | 6 years after the relationship ends, to meet tax and legal requirements |
Job applications | 6 months after the role is filled, unless you agree to us keeping them longer |
Website analytics data | Up to 14 months, as set in Google Analytics |
Marketing opt-outs | Indefinitely, so we can make sure we do not contact you again |
We use appropriate technical and organisational measures to protect personal information, including access controls, encryption, multi-factor authentication and secure cloud hosting. Our team is trained in data protection. If a breach occurs that puts your rights at risk, we will tell you and the ICO as the law requires.
We use essential cookies to make our website work, and analytics and marketing cookies only if you allow them. You can change your choice at any time from our Cookie Policy page, linked in the footer of every page, which also lists every cookie we use.
Under UK data protection law you have the right to:
ask for a copy of the personal information we hold about you
ask us to correct information that is wrong or incomplete
ask us to delete your information
ask us to restrict how we use your information
object to us using your information, including for marketing
ask us to transfer your information to another organisation
withdraw your consent at any time, where we rely on consent
To make a request, email [email protected]. We will respond within one month. There is normally no charge.
If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
We review this policy regularly and will post any changes on this page with a new "last updated" date.
