Privacy Policy

Last updated: 4 June 2026

1. Who We Are

Growth Advisory (trading as Van Dyk Group) is the responsible party / data controller for personal information processed through this website and our services.

• Registered Address: Pretoria, South Africa & Hertfordshire, United Kingdom
• Email: [email protected]
• Phone SA: +27 87 012 6778
• Phone UK: +44 78 887 4437
• Website: growthadvisory.global

For POPIA purposes, Growth Advisory is the Responsible Party. For GDPR purposes, Growth Advisory is the Data Controller.

2. Information We Collect

We may collect the following categories of personal information:

• Identity Data: First name, last name, title, business name
• Contact Data: Email address, telephone number, postal address
• Business Data: Company size, industry, revenue information shared during consultations
• Technical Data: IP address, browser type and version, device information, pages visited, time spent on pages, referral source
• Usage Data: Information about how you use our website and services
• Marketing & Communications Data: Your preferences for receiving marketing communications
• Financial Data: Payment details processed through our secure payment processors (we do not store full card details)

We do not knowingly collect special/sensitive categories of personal information (e.g., race, religion, health data, political views) unless explicitly required and consented to.

3. How We Collect Your Information

• Direct interactions: Forms on our website, booking a discovery call, email correspondence, telephone calls
• Automated technologies: Cookies, server logs, and similar tracking technologies when you visit our website
• Third parties: Analytics providers, advertising partners, and publicly available sources

4. How We Use Your Information

Purpose	Legal Basis (GDPR)	Lawful Ground (POPIA)
To respond to enquiries and provide services	Contract / Legitimate Interest	Contract / Legitimate purpose
To send marketing communications (with consent)	Consent	Consent
To improve our website and services	Legitimate Interest	Legitimate purpose
To process payments	Contract	Contract
To comply with legal obligations	Legal Obligation	Legal obligation
To send service-related communications	Contract / Legitimate Interest	Contract

5. Marketing Communications

We will only send you marketing communications where you have given your consent or where we have a legitimate interest. You have the right to opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at [email protected]

6. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share your information with:

• Service providers: Third-party vendors who assist us in operating our website and delivering services (e.g., CRM platforms, email service providers, payment processors)
• Professional advisers: Lawyers, accountants, auditors, and insurers
• Regulatory authorities: Where required by law, court order, or government authority
• Business transfers: In the event of a merger, acquisition, or sale of assets

All third parties are contractually obligated to handle your data securely and in accordance with applicable law.

7. International Transfers

Growth Advisory operates in South Africa and the United Kingdom. Where personal information is transferred across borders, we ensure appropriate safeguards are in place in accordance with GDPR (Chapter V) and POPIA (Section 72), including Standard Contractual Clauses or adequacy decisions where applicable.

8. Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Typical retention periods:

• Client records: 7 years from the end of the business relationship
• Marketing records: Until you withdraw consent or opt out
• Website analytics: Up to 26 months

9. Cookies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies we use include:

• Essential cookies: Necessary for the website to function
• Analytics cookies: Help us understand how visitors interact with our website
• Marketing cookies: Used to deliver relevant advertising

You can manage cookie preferences through your browser settings or our cookie consent banner. For more details, please see our Cookie Policy.

10. Your Rights

Under GDPR and POPIA, you have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information (subject to legal requirements)
• Right to Restrict Processing: Request that we limit how we use your information
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with the relevant supervisory authority

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days (POPIA) / one month (GDPR) of receipt of your request.

11. Supervisory Authorities

If you believe we have not handled your personal information lawfully, you have the right to lodge a complaint with the relevant authority:

• South Africa (POPIA): Information Regulator — [email protected] | www.justice.gov.za/inforeg/
• United Kingdom (UK GDPR): Information Commissioner's Office (ICO) — ico.org.uk/make-a-complaint/
• European Union (GDPR): Your local data protection authority in the EU member state where you reside

12. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These measures include encryption, secure server infrastructure, access controls, and staff training. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

13. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately so we can take steps to delete it.

14. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact our Information Officer: