Privacy Policy

1. Who We Are

The Website is owned and operated by B2B Growth Hub Limited, a private limited company registered in England and Wales under Company Registration Number (CRN) 13818816.

Registered Office: 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

For the purposes of the UK General Data Protection Regulation (“UK GDPR”), the EU General Data Protection Regulation (“EU GDPR”), the UK Data Protection Act 2018, and any equivalent local legislation applicable to you, B2B Growth Hub Limited is the “data controller” of the personal information collected through the Website and Services.

2. Your Consent to This Policy

If you do not agree to any part of this Policy, please do not use the Website, submit your details to us, or engage with our Services. Where local law requires explicit, separate, or additional consent for a specific processing activity, we will request that consent at the relevant point and you may withdraw it at any time as described in Section 12 (Your Rights).

3. Information We Collect

We collect the following categories of information. Not all categories apply to every user; the specific information we hold about you depends on how you interact with us.

a) Personal Identification Data

First name, last name, job title or position, email address, mobile and landline phone numbers, postal address, country, date of birth where voluntarily provided, and similar identifiers.

b) Business Information

Company name, business registration or VAT number where voluntarily provided, industry, business size, revenue band, business lifecycle stage, role within the business, business goals, challenges, solutions previously tried, outcomes you wish to achieve, and any other commercial information you choose to share.

c) Interaction & Technical Data

IP address, device type and identifier, browser type and version, operating system, referring URL, pages viewed, links clicked, time spent on pages, access dates and times, session recordings (where applicable), and approximate geolocation derived from the IP address.

d) Communications Data

The content of emails, call recordings (where notified), chat transcripts, form submissions, event registrations, survey responses, and any other communications you send to us or our representatives.

e) Transactional Data

Records of purchases, subscriptions, invoices, payments, refunds, and any services, programmes, or events you engage with. Payment card details are collected and processed by our authorised payment providers and are not stored on our servers.

f) Derived & Inferred Data

Data derived or inferred from the above categories, including but not limited to your likely business lifecycle stage, probable interests, engagement scoring, audience segmentation tags, and lookalike-audience signals used for marketing.

4. How We Collect It

We collect information from the following sources:

• Directly from you — when you complete a form, book a call, download a resource, subscribe to a newsletter, register for an event, email or call us, attend a meeting, or otherwise engage with our Services.
• Automatically — through cookies, web beacons, server logs, analytics tools, and similar technologies deployed on the Website and in our communications.
• From third-party sources — including publicly available sources (such as Companies House, LinkedIn, business directories), data-enrichment providers, marketing partners, joint-venture partners, suppliers who refer you to us, event organisers, introducers, and our associated companies.
• From our group and partner network — where information is shared with us lawfully by companies within our corporate group, contracted partners, or suppliers for the purposes described in this Policy.

5. How We Use Your Information

We process your information for the following purposes, based on the lawful bases identified alongside each (under Article 6 UK/EU GDPR):

• To provide our Services — responding to your enquiries, delivering resources, scheduling calls, onboarding you as a Customer, Supplier, Partner, Ambassador, Advertiser, or other passenger type on the Growth Rail (lawful basis: performance of a contract, or legitimate interests).
• To improve the Website and Services — analytics, diagnostics, product development, user experience research (legitimate interests).
• To send marketing, promotional, and commercial communications about our own Services and about the services of our associated companies, partners, suppliers, and advertisers — by email, SMS, phone call, in-app notification, postal mail, or any other channel you have made available to us (lawful basis: your consent, or legitimate interests where permitted by applicable law).
• For audience profiling and targeting — building audience segments, lookalike audiences, and retargeting lists on our own platform and on third-party advertising platforms (consent; legitimate interests).
• For administrative and legal purposes — finance, tax, accounting, fraud prevention, dispute resolution, regulatory compliance, and the establishment, exercise, or defence of legal claims (legal obligation; legitimate interests).
• For research and reporting — aggregate industry research, benchmarking reports, ecosystem studies, and thought-leadership content (legitimate interests; aggregated and anonymised wherever possible).

6. Marketing & Promotional Use (Express Notice)

7. Who We Share Your Information With

We share your personal and business information, in the course of providing and promoting our Services, with the following categories of recipients:

• Our associated companies — any subsidiary, parent, sister company, affiliate, joint-venture entity, or other business within the B2B Growth Hub corporate group or under common ownership or control.
• Our partners — including strategic partners, Ambassadors, Marketing Partners, Event Partners, Community Partners, Charity Partners, Supporters, joint-venture partners, co-marketing partners, and other partnership tracks as described on our Partners page.
• Our suppliers— vetted suppliers on the Growth Rail's 3–7 supplier model, professional-services providers, vendors, consultants, coaches, and contractors who deliver or support our Services.
• Our internal stakeholders — directors, employees, contractors, and authorised representatives of B2B Growth Hub and its associated companies.
• Our external stakeholders — investors, advisors, accountants, legal counsel, auditors, regulators, government bodies, insurers, and other stakeholders where sharing is necessary or appropriate for the running of the business.
• Service providers and processors — including hosting providers, CRM and marketing-automation platforms, email-delivery services, analytics providers, payment processors, customer-support tools, and advertising platforms.
• Event co-hosts and sponsors — where you register for or attend a jointly organised or sponsored event, the co-host or sponsor may receive your registration details.
• Legal and regulatory recipients — where we are legally required to disclose information (for example to comply with a court order, subpoena, tax authority request, or law-enforcement request) or where disclosure is necessary to establish, exercise, or defend legal claims.
• Successors in a business transaction — in the event of a merger, acquisition, reorganisation, sale of business, or insolvency, your information may be transferred to the acquirer or successor entity.

When we share your information with any of the above, we do so in compliance with applicable data-protection law. Where required, we put appropriate contractual safeguards in place (such as data-processing agreements and international-transfer mechanisms) to protect your rights. We do not sell your personal information to third parties in the traditional sense of the word “sell”.

8. International Transfers

B2B Growth Hub operates globally, and the recipients listed in Section 7 may be located outside the United Kingdom, the European Economic Area (EEA), or your country of residence — including in the United States, United Arab Emirates, Singapore, India, and elsewhere. Where we transfer your information to a country that is not deemed to provide an adequate level of data protection, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, the UK Addendum, and additional supplementary measures where required. You may request details of the safeguards in place by contacting us using the details in Section 16.

9. Cookies & Tracking Technologies

The Website uses cookies, web beacons, pixels, session storage, and similar technologies to operate the Website, remember your preferences, analyse traffic, personalise content and advertising, and measure the performance of our marketing. The specific cookies in use, their purposes, duration, and the third parties that set them are described in our Cookie Notice (available separately and linked in the footer once published).

Where required by local law, we request your consent before setting non-essential cookies through a consent banner, and you can change your preferences at any time. You can also disable or block cookies through your browser settings, although doing so may affect the functionality of the Website.

10. Data Retention

We retain your information for as long as is necessary to fulfil the purposes for which it was collected, to provide and improve our Services, to comply with our legal obligations (including tax, accounting, and regulatory retention periods), and to establish, exercise, or defend legal claims. When information is no longer required, we will delete, anonymise, or securely archive it. Typical retention periods range from twelve months for inactive marketing contacts to seven or more years for financial and contractual records, adjusted for local legislation where applicable.

11. Security

We take the security of your information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration, and disclosure. These measures include HTTPS encryption in transit, access controls, multi-factor authentication for privileged accounts, logical segregation of environments, periodic reviews of our vendors, and secure development practices. No method of transmission over the internet or electronic storage is, however, 100% secure, and we cannot guarantee absolute security.

12. Your Rights

Subject to the applicable data-protection law in your jurisdiction, you have the following rights in relation to the personal information we hold about you:

• Access — request a copy of the personal information we hold about you.
• Rectification — ask us to correct inaccurate or incomplete information.
• Erasure (“right to be forgotten”) — ask us to delete your information where we no longer have a lawful basis to process it.
• Restriction — ask us to temporarily stop processing your information in certain circumstances.
• Portability — ask us to provide your information in a machine-readable format or transmit it to another controller.
• Object — object to our processing of your information where that processing is based on our legitimate interests, including objecting to direct marketing at any time.
• Withdraw consent & unsubscribe from marketing — at any time, by clicking the unsubscribe link in any marketing email, replying “STOP” to any SMS, telling us on a phone call, or emailing us directly. Withdrawing consent does not affect the lawfulness of processing performed before the withdrawal.
• Complain to a supervisory authority— in the UK, the Information Commissioner's Office (ICO) at ico.org.uk. In the EU, the relevant national data-protection authority. In other jurisdictions, the local equivalent regulator.

To exercise any of these rights, please contact us using the details in Section 16. We will respond within the timeframe required by applicable law (typically one calendar month under UK/EU GDPR) and we may need to verify your identity before acting on your request.

13. Children's Privacy

The Website and our Services are directed at business professionals and are not intended for children under the age of sixteen (16). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

14. Third-Party Links

The Website may contain links to, and content from, third-party websites, services, and platforms that are not operated by us. We are not responsible for the privacy practices of any third party and we encourage you to read their privacy policies before submitting your information to them.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we make material changes, we will update the “Last updated” date at the top of this Policy and, where appropriate, notify you by email or through a notice on the Website. Your continued use of the Website and Services after an update constitutes your acceptance of the updated Policy, to the fullest extent permitted by applicable local law.

16. Contact Us

For any questions about this Privacy Policy, to exercise any of your rights, or to raise a data-protection concern, please contact us:

Company Registration Number: 13818816 · Registered in England & Wales.