Legal
Privacy & Cookie Policy
Last updated: 27 October 2026
Growth Advisory is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the General Data Protection Regulation (GDPR) and the Protection of Personal Information Act, 4 of 2013 (POPIA).
Please read this policy carefully. If you disagree with its terms, please discontinue use of our website and services.
1. Who We Are
Growth Advisory (trading as Van Dyk Group) is the responsible party / data controller for personal information processed through this website and our services.
- Registered Address: Pretoria, South Africa & Hertfordshire, United Kingdom
- Phone SA: +27 87 012 6778
- Phone UK: +44 78 887 4437
- Website: growthadvisory.global
For POPIA purposes, Growth Advisory is the Responsible Party. For GDPR purposes, Growth Advisory is the Data Controller.
2. Information We Collect
- Identity Data: First name, last name, title, business name
- Contact Data: Email address, telephone number, postal address
- Business Data: Company size, industry, revenue information shared during consultations
- Technical Data: IP address, browser type and version, device information, pages visited, time spent on pages, referral source
- Usage Data: Information about how you use our website and services
- Marketing & Communications Data: Your preferences for receiving marketing communications
- Financial Data: Payment details processed through our secure payment processors (we do not store full card details)
We do not knowingly collect special/sensitive categories of personal information (e.g., race, religion, health data, political views) unless explicitly required and consented to.
3. How We Collect Your Information
- Direct interactions: Forms on our website, booking a discovery call, email correspondence, telephone calls
- Automated technologies: Cookies, server logs, and similar tracking technologies when you visit our website
- Third parties: Analytics providers (Google), advertising partners (Meta), and publicly available sources
4. How We Use Your Information
| Purpose | Legal Basis (GDPR) | Lawful Ground (POPIA) |
|---|---|---|
| To respond to enquiries and provide services | Contract / Legitimate Interest | Contract / Legitimate purpose |
| To send marketing communications (with consent) | Consent | Consent |
| To improve our website and services | Legitimate Interest | Legitimate purpose |
| To process payments | Contract | Contract |
| To comply with legal obligations | Legal Obligation | Legal obligation |
| To send service-related communications | Contract / Legitimate Interest | Contract |
5. Marketing Communications
We will only send you marketing communications where you have given your consent or where we have a legitimate interest. You have the right to opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email, or contacting us.
6. Sharing Your Information
We do not sell, rent, or trade your personal information. We may share your information with: service providers (CRM platforms, email service providers, payment processors); analytics providers (Google); and advertising providers (Meta), only where you have given cookie consent; professional advisers (lawyers, accountants, auditors, insurers); regulatory authorities where required by law; and in business transfers such as a merger, acquisition, or sale of assets. All third parties are contractually obligated to handle your data securely and in accordance with applicable law.
7. International Transfers
Growth Advisory operates in South Africa and the United Kingdom. Where personal information is transferred across borders, we ensure appropriate safeguards are in place in accordance with GDPR (Chapter V) and POPIA (Section 72), including Standard Contractual Clauses or adequacy decisions where applicable.
8. Data Retention
We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Typical retention periods: Client records: 7 years from the end of the business relationship; Marketing records: until you withdraw consent or opt out; Website analytics and advertising data: up to 26 months.
9. Cookies
We use cookies and similar technologies. Analytics cookies from Google Analytics are always active so we can understand how visitors use our website. Marketing cookies from Meta only run if you say yes on our cookie banner. You can change your marketing choice at any time using the "Cookie settings" link in the footer of every page, or through your browser settings.
| Category | Provider | What it does | Cookies | Duration |
|---|---|---|---|---|
| Essential | Growth Advisory | Remembers your cookie choice (stored in your browser, not a cookie) | ga-consent-v1 | Until you clear your browser data |
| Analytics | Google Analytics 4 | Shows us how visitors use the site, such as pages viewed and time on page. Always active. | _ga, _ga_* | Up to 2 years |
| Marketing | Meta Pixel (Meta Platforms) | Lets us measure and improve our advertising on Facebook and Instagram | _fbp | Up to 3 months |
Marketing cookies stay off until you accept them. Meta and Google may process data outside South Africa, the UK and the EU. Details are in Section 7 and in their own policies: policies.google.com/privacy and facebook.com/privacy/policy.
Our booking calendar and enquiry forms are provided by our CRM provider (GoHighLevel) and may set their own cookies needed to make those forms work.
10. Your Rights
Under GDPR and POPIA, you have the right to: access a copy of the personal information we hold about you; request correction of inaccurate or incomplete information; request deletion of your personal information (subject to legal requirements); request that we limit how we use your information; receive your data in a structured, machine-readable format; object to processing based on legitimate interests or for direct marketing; withdraw consent at any time where processing is based on consent; and lodge a complaint with the relevant supervisory authority. We will respond within 30 days (POPIA) / one month (GDPR) of receipt of your request.
11. Supervisory Authorities
- South Africa (POPIA): Information Regulator, www.justice.gov.za/inforeg/
- United Kingdom (UK GDPR): Information Commissioner's Office (ICO), ico.org.uk/make-a-complaint/
- European Union (GDPR): Your local data protection authority in the EU member state where you reside
12. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration, including encryption, secure server infrastructure, access controls, and staff training. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
13. Children's Privacy
Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from minors.
14. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by updating the "Last updated" date at the top of this page.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact our Information Officer:
- Information Officer / Data Protection Officer, Growth Advisory (Van Dyk Group)
- Phone: +27 87 012 6778
- Address: Pretoria, South Africa & Hertfordshire, United Kingdom