Book a demo

Privacy policy

Last updated: 15th July 2026

This privacy policy explains how High Growth Playbooks Limited (“HGP”, “we”, “us” or “our”) collects, uses, stores and protects personal data when you:

  • visit or use our public-facing website;
  • complete a form on our website;
  • contact us with an enquiry;
  • request information about our products or services;
  • book a call or demonstration;
  • subscribe to marketing communications; or
  • otherwise communicate with us in connection with our website or sales activities.

This privacy policy does not cover personal data processed through HGP products or services on behalf of our customers. Where HGP processes personal data on behalf of a customer, the relevant customer will normally be responsible for providing appropriate privacy information to its users.

Contact Us

If you have any questions about this privacy policy or how we handle personal data, you can contact us at:

High Growth Playbooks Limited
Email: [email protected]

You also have the right to complain to the Information Commissioner’s Office (“ICO”), the UK regulator for data protection matters. More information is available at: www.ico.org.uk

We would appreciate the opportunity to address any concerns first, so please contact us if something does not seem right.

The Personal Data We Collect

“Personal data” means information that can identify you as an individual. It does not include anonymous or fully anonymised information.

Depending on how you interact with us, we may collect, use, store and share the following categories of personal data:

Identity Data: First name, last name, job title, organisation, username or similar identifier.

Contact Data: Email address, telephone number, business address.

Enquiry Data: Records of enquiries, demonstration requests and communications with us.

Technical Data: IP address, browser type and version, device information, operating system, platform, time zone settings and related technical information.

Profile Data: Information about your organisation, role, interests, communication preferences, enquiries and demonstration requests.

Usage Data: Information about how you use our website.

Marketing and Communications Data: Marketing preferences, communication preferences and records of communications with us.

We may also collect information you choose to provide when completing forms, booking calls, attending meetings, participating in demos, responding to emails or otherwise communicating with us.

How We Collect your Personal Data

Information You Provide Directly

You may provide personal data when you,

  • complete forms;
  • contact us;
  • request information or a demo;
  • respond to emails; or
  • otherwise communicate with us;
  • otherwise communicate with us.

Information Collected Automatically

When you use our website, we may automatically collect Technical Data and Usage Data about your device, browser and how you interact with the site.

We may collect this information using cookies, analytics tools, server logs and similar technologies. More information is available in our Cookie Policy.

Information from Third Parties

We may receive personal data from third parties including:

  • analytics providers;
  • CRM and marketing platforms;
  • professional advisers;
  • referral partners; and
  • publicly available sources such as Companies House, LinkedIn or company websites.

How We Use Personal Data

We will only use personal data where we have a lawful basis to do so under UK data protection law.

Contract

We use personal data where necessary to:

  • respond to your enquiries;
  • arrange demonstrations or meetings;
  • provide information you request about our products or services;
  • take steps at your request before entering into a contract; and
  • enter into or perform a contract where you become a customer.

Legitimate Interests

We may use personal data for legitimate business interests where those interests are not overridden by your rights and freedoms. This includes:

  • responding to enquiries;
  • managing customer relationships;
  • improving our services and website;
  • maintaining security;
  • analysing usage and performance;
  • conducting internal reporting; and
  • sending relevant B2B communications.

Legal Obligations

We may process personal data where necessary to comply with legal or regulatory obligations, including tax, accounting, fraud prevention and data protection requirements.

Consent

Where required by law, we rely on consent, including for certain cookies and marketing activities. You may withdraw consent at any time.

Where we send marketing communications, you can opt out at any time by using the unsubscribe link or contacting us directly via [email protected] .

Sharing Personal Data

We may share personal data with trusted third parties where necessary for legitimate business purposes, including:

  • payment processors;
  • CRM and marketing platform providers;
  • cloud hosting and IT service providers;
  • analytics providers;
  • professional advisers;
  • contractors and consultants; and
  • regulatory authorities or law enforcement bodies where required by law.

All third parties are required to respect the security and confidentiality of personal data and may only process it in accordance with our instructions and applicable law.

We do not sell personal data.

International Transfers

HGP shall not knowingly transfer Personal Data outside the United Kingdom, or knowingly permit such data to be accessed from outside the United Kingdom, unless:

  1. the transfer or access is made in accordance with Applicable Data Protection Laws*;
  2. HGP has, so far as is reasonably able, assessed the relevant country, provider, category of data, purpose of the transfer or access, and the applicable transfer mechanism;
  3. one of the following applies:
    1. the destination country is subject to adequacy regulations under Applicable Data Protection Laws;
    2. the transfer is covered by appropriate safeguards, including standard contractual clauses, the UK International Data Transfer Agreement, the UK International Data Transfer Addendum, or any replacement mechanism recognised under Applicable Data Protection Laws; or
    3. the transfer is otherwise permitted under Applicable Data Protection Laws; and
  4. where the transfer or access relates to a third-party hosting, backup, monitoring, support, analytics, deployment or infrastructure provider, HGP has taken reasonable steps to check the provider’s published data processing, hosting, sub-processor and international transfer terms.

* Applicable Data Protection Laws means:  To the extent the UK GDPR applies, the law of the United Kingdom or of a part of the United Kingdom which relates to the protection of personal data. To the extent the EU GDPR applies, the law of the European Union or any member state of the European Union to which HGP is subject, which relates to the protection of personal data.

Cookies

Our website uses cookies and similar technologies to:

  • ensure the website functions properly;
  • understand how visitors use the website;
  • improve website performance; and
  • support relevant marketing activity.

Some cookies are essential. Others, including analytics and marketing cookies, are only used where legally permitted.

You can manage your cookie preferences through our cookie banner or browser settings.

If you disable cookies, some parts of the website may not function correctly.

Further details are available in our Cookie Policy.

Automated Decision-Making

We do not currently use personal data for solely automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Data Security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration or destruction.

Access to personal data is limited to people and organisations with a legitimate business need to know, including employees, contractors, suppliers and advisers.

We maintain procedures for handling suspected personal data breaches and will notify affected individuals and regulators where legally required.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, in accordance with the UK GDPR storage limitation principle, and to meet applicable legal, regulatory, tax, accounting, security and reporting requirements.

Our typical retention periods are:

  • Customer contract records (where applicable): six years after the customer relationship ends.
  • Enquiry and prospect information: up to two years after the last meaningful contact.
  • Marketing suppression records: for as long as necessary to ensure we continue to respect an individual’s marketing preferences and opt-out requests.
  • Website analytics data: generally retained for up to two years, depending on the settings of the analytics services we use.

We periodically review the personal data we hold and securely delete or anonymise information that is no longer required.

We may retain personal data for longer where necessary to establish, exercise or defend legal claims, resolve disputes, enforce our contractual rights, or comply with legal or regulatory obligations.

Where information has been irreversibly anonymised so that individuals can no longer be identified, it is no longer considered personal data. We may retain and use anonymised information indefinitely for research, statistical analysis and reporting purposes.

Your Legal Rights

Under UK data protection law, you may have rights including the right to:

  • access your personal data;
  • correct inaccurate or incomplete personal data;
  • request deletion of personal data;
  • restrict processing;
  • object to processing;
  • request transfer of your personal data; and
  • withdraw consent where processing relies on consent.

To exercise any of these rights, please contact: [email protected]

You will not usually need to pay a fee. However, we may charge a reasonable fee or refuse requests that are manifestly unfounded, repetitive or excessive.

We may ask for information to verify your identity before responding to requests.

We aim to respond to legitimate requests within one month, although complex requests may take longer. If so, we will keep you informed.