Privacy policy.

We respect your privacy and are committed to protecting your personal data. This privacy policy explains how your personal data is collected, used and protected when you visit our website (regardless of where you visit it from) or take part in The Good Growth Foundation’s research activities, including polling and focus groups. It also sets out your rights and how the law protects you. 


1. WHO WE ARE AND HOW TO CONTACT US 

The Good Growth Foundation is the controller and responsible for your personal data (referred to as “the Good Growth Foundation” “the Foundation” “we“, “us” or “our” in this privacy policy). 

If you have any questions about this privacy policy or any concerns or complaints about how your data has been processed, please contact us, contact@thegoodgrowthfoundation.co.uk

2. PURPOSE OF THIS PRIVACY POLICY

This privacy policy aims to give you information on how the Foundation collects and processes your personal data through your use of this website and through participation in its polling, research, and discussion groups.

This website is not intended for children and we do not knowingly collect data relating to children.

3A. DATA COLLECTED VIA THE WEBSITE 

When you visit the website, the Foundation may collect, use, store and transfer different kinds of personal data about you, such as:

  • Identity data: first name, last name, title, date of birth, or gender.

  • Contact data: email address, postal address and telephone number(s).

  • Technical data: IP address, browser type, time zone, operating system, and other technology used to access the website.

  • Usage data: information about how you use the website.

  • Marketing and communications data: your preferences in receiving information from the Foundation.

This data helps the Foundation understand how visitors use the website, respond to enquiries, and send relevant updates where you have consented to receive them.

Cookies may also be used to enhance functionality. See section 8 for details.

3B. DATA COLLECTED THROUGH POLLING AND FOCUS GROUP PARTICIPATION

When you take part in polling, surveys, or focus group discussions conducted by the Foundation, additional types of personal data may be collected. These include:

  • Identity data: first name, age range, gender, location or demographic information, as relevant to the research.

  • Contact data: email address or phone number (for scheduling or follow-up purposes).

  • Response data: opinions, attitudes, and feedback provided through surveys, interviews or group discussions.

  • Special category data: information such as political opinions, ethnic origin, or religious beliefs, only where relevant to the research topic and only with your explicit consent.

Participation is always voluntary. If a question or topic makes you uncomfortable, you may decline to answer or withdraw at any time.

Data collected for research purposes is used to understand public attitudes, inform policy development, and guide the Foundation’s work. Wherever possible, responses are anonymised or aggregated before analysis or reporting. Individual participants will not be identified in any published material without explicit consent.

The Foundation processes polling and focus group data on the legal bases of consent (where you agree to take part in the research) and legitimate interests (where research is carried out to inform the Foundation’s mission, provided your rights are not overridden).

Personal data collected for research purposes is stored securely and retained only for as long as needed to complete the project and verify findings. Contact details used for recruitment or scheduling are deleted once the research concludes, unless you have opted in to future contact.

4. HOW WE COLLECT YOUR PERSONAL DATA

We use different methods to collect data from and about you. 

You may give us your name and contact details by filling in forms or by corresponding with us by post, phone, email or by taking part in research activities. . 

This includes:

  • Registering interest in Foundation campaigns

  • Subscribing to mailing lists

  • Participating in polling or focus groups

  • Providing feedback or completing surveys

  • Contacting us directly via forms, email or telephone

5. HOW WE USE YOUR PERSONAL DATA

The uses 

We will only use your personal data when the law allows us to. We will use your personal data in the following circumstances: 

  • Inform and engage you about Good Growth Foundation campaigns

  • Inform and engage you with any other campaigns and movements that share the values, principles and aims of the Good Growth Foundation

  • Manage donations, payments, fees and/or charges

  • Comply with our legal obligations

  • Answer your queries and respond to your questions and/or complaints

The legal bases for processing include consent, contractual necessity, legitimate interests, and legal obligations.

6. WHEN DATA MAY BE SHARED 

We will never sell your personal data to any other organisation. 

We will only share data where this is necessary for the conduct of our work (for example, sharing anonymised polling results with research partners) or to comply with legal obligations. Any partner organisations are required to process personal data securely and in accordance with UK data protection law

 

7. WHEN YOUR DATA MAY BE USED FOR MARKETING

Our Marketing 

You will receive marketing communications (i.e. communications promoting the campaigns of The Good Growth Foundation and/or individuals related to it) from us if you have requested information from us and/or you have subscribed to receiving that marketing. 

Right to object/Opting-out 

You can ask us to stop sending you marketing messages at any time by contacting us at contact@goodgrowthfoundation.co.uk. 

You have a right to opt-out of your data being used for direct marketing. 

If we process your data on the basis of “legitimate interests” or “a task carried out in the public interest”, then you have the right to object to us using your data in that way. This right is not absolute and we may continue to process your data if we can demonstrate compelling legitimate grounds for the processing. 

Where you opt-out of receiving these marketing messages, this will not apply to personal data provided to us as a result of other engagement or transactions with us (so, for example, if you opt-out of receiving messages from us – this will not cause us to change the way we use data you have provided for processing donation payments).

8. COOKIES

A cookie is a tiny text file that is stored on users’ machines (computers, tablets or mobile devices). We may use cookies to tailor your experience on our site according to the preferences you have specified. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

9. CHANGE OF PURPOSE

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purposes (as set out in this privacy policy). If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

10. CHANGES TO THE PRIVACY POLICY

We keep our privacy policy under regular review and will notify you of any substantive changes. Any revisions to our privacy policy can be reviewed on this website.

11. THIRD-PARTY LINKS

This website may include links to third-party websites, platforms, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites or platforms and are not responsible for their privacy policies or statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.


12. INTERNATIONAL TRANSFERS

In order to process your personal data for the purposes outlined in this Privacy Policy, we may need to transfer your data to countries or jurisdictions outside the European Economic Area (EEA). In each case, we ensure that our suppliers provide adequate protection for the rights of data individuals in connection with the transfer of their personal data. Currently, we expect all suppliers to use a standard contractual clause approved by the European Union or be part of the Privacy Shield scheme in the United States.

13. DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We will notify you and any applicable regulator of a breach where we are legally required to do so.

14. HOW LONG WE WILL HOLD YOUR PERSONAL DATA FOR

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. 

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

15. YOUR LEGAL RIGHTS

As a data subject, you have a number of rights in relation to your personal data. Below, we have described the various rights that you have, as well as how you can exercise them.

Right of access 

You may, at any time, request access to the personal data that we hold which relates to you (you may have heard of this right being described as a “subject access request“). 

We follow the ICO’s “Subject Access Code of Practice” when dealing with requests for access to personal data. 

Please note that this right entitles you to receive a copy of the personal data that we hold about you in order to enable you to check that it is correct and to ensure that we are processing that personal data lawfully. It is not a right that allows you to request personal data about other people, or a right to request specific documents from us that do not relate to or contain your personal data. 

You can exercise this right at any time by contacting us at contact@goodgrowthfoundation.co.uk and telling us that you are making a subject access request. You do not have to fill in a specific form to make this kind of request. 

Your right to rectification and erasure 

You may, at any time, request that we correct personal data that we hold about you which you believe is incorrect or inaccurate. You may also ask us to erase personal data if you do not believe that we need to continue retaining it.

Please note that we may ask you to verify any new data that you provide to us and may take our own steps to check that the new data you have supplied us with is right. Further, we are not always obliged to erase personal data when asked to do so; if for any reason we believe that we have a good legal reason to continue processing personal data that you ask us to erase, we will tell you what that reason is at the time we respond to your request. 

You can exercise this right at any time by contacting us at contact@goodgrowthfoundation.co.uk and telling us that you are making a request to have your personal data rectified or erased and on what basis you are making that request. If you want us to replace inaccurate data with new data, you should tell us what that new data is. You do not have to fill in a specific form to make this kind of request. 

Your right to restrict processing 

Where we process your personal data on the basis of a legitimate interest (see the sections of this privacy policy which explain how and why we use your information), you are entitled to ask us to stop processing it in that way if you feel that our continuing to do so impacts on your fundamental rights and freedoms or if you feel that those legitimate interests are not valid. 

You may also ask us to stop processing your personal data: (a) if you dispute the accuracy of that personal data and want us to verify that data’s accuracy; (b) where it has been established that our use of the data is unlawful but you do not want us to erase it; or (c) where we no longer need to process your personal data (and would otherwise dispose of it) but you wish for us to continue storing it in order to enable you to establish, exercise or defend legal claims. 

Please note that if for any reason we believe that we have a good legal reason to continue processing personal data that you ask us to stop processing, we will tell you what that reason is, either at the time we first respond to your request or after we have had the opportunity to consider and investigate it. You can exercise this right at any time by contacting us at contact@goodgrowthfoundation.co.uk and telling us that you are making a request to have us stop processing the relevant aspect of your personal data and describing which of the above conditions you believe is relevant to that request. You do not have to fill in a specific form to make this kind of request. 

Your right to portability 

Where you wish to transfer certain personal data that we hold about you, which is processed by automated means you may write to us and ask us to provide it to you in a commonly used machine-readable format.

Because of the kind of the nature of our work do and the systems that we use, we do not envisage this right being particularly relevant to the majority of individuals with whom we interact. However, if you wish to transfer your data from us to a third party, we are happy to consider such requests in good faith. 

Your right to stop receiving communications 

As noted above, where we send you email marketing communications (or other regulated electronic messages) you have the right to opt-out at any time. You can do this by using the ‘unsubscribe’ link that appears in the footer of each communication (or the equivalent mechanism in those communications). 

Alternatively, if for any reason you cannot use those links, or if you would prefer to contact us directly – you can unsubscribe by contacting us at contact@goodgrowthfoundation.co.uk and telling us which communications you would like us to stop sending you. 

Your right to object to automated decision making and profiling 

You have the right to be informed about the existence of any automated decision making and profiling of your personal data, and where appropriate, be provided with meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing that affects you.

Exercising your rights 

When you write to us making a request to exercise your rights, we are entitled to ask you to prove that you are who you say you are. We may ask you to provide copies of relevant ID documents to help us to verify your identity. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. 

It will help us to process your request if you clearly state which right you wish to exercise and, where relevant, why it is that you are exercising it. The clearer and more specific you can be, the faster and more efficiently we can deal with your request. If you do not provide us with sufficient information, then we may delay actioning your request until you have provided us with additional information (and where this is the case, we will tell you). 

We try to respond to all legitimate requests within one (1) month. However, it could take us longer than a month if your request is particularly complex or if you have made a number of requests. In this case, we will notify you of this and keep you updated.

16. RIGHT TO LODGE A COMPLAINT

If you are unhappy with the way that we have processed or handled your data then you have a right to complain to the Information Commissioner’s Office (ICO). The ICO is the supervisory body authorised by the Data Protection Act 2018 to regulate the handling of personal data within the United Kingdom. 

The contact details for the ICO are: 

Information Commissioner’s Office, Wycliffe House, Water Lane, 

Wilmslow, SK9 5AF 

Telephone: 0303 123 1113 

Website: https://ico.org.uk/concerns/ 

Last updated: November 2025