Privacy Policy
Last updated: 8 November 2026
About this policy. GrowthPoint is operated by Conor Rea, a sole trader trading as GrowthPoint, based in Waterford, Ireland. This policy explains how we handle personal information when you visit our website, contact us or engage our services. You can contact us about privacy matters at conor@growthpoint.ie.
1. Who We Are
GrowthPoint is a digital marketing agency based in Waterford, Ireland, providing websites, online presence services, customer communication tools and digital marketing solutions to businesses throughout Ireland.
GrowthPoint is operated by Conor Rea, a sole trader trading as GrowthPoint, based in Waterford, Ireland.
This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, contact us or engage our services.
For personal information collected through GrowthPoint’s own website, business enquiries, customer communications and business operations, GrowthPoint is the data controller.
We use third-party service providers, including GoHighLevel, to process relevant information on our behalf. When GrowthPoint provides CRM, websites or automation services to another business and processes its customer information on that business’s behalf, GrowthPoint may instead act as a data processor. The relevant client business will normally be responsible for determining the purposes and lawful basis of that processing, subject to the actual arrangements.
This policy concerns GrowthPoint’s own processing activities. If your information is processed by a business that uses our services, you should also consult that business’s Privacy Policy.
2. How to Contact Us
For questions about this Privacy Policy, requests concerning your personal information or other data protection matters, you can contact GrowthPoint through our website contact page or by emailing our privacy contact address.
Our contact page is available at growthpoint.ie/contact.
You can email us at conor@growthpoint.ie.
Our correspondence address is 10 Rocwood Close, Grange Manor, Waterford, Ireland. We are based in Waterford, Ireland and serve businesses throughout the Republic of Ireland.
We have not appointed a Data Protection Officer because we are not legally required to do so. We will review this if our processing activities change.
3. How We Collect and Store Your Information
GrowthPoint uses GoHighLevel, a third-party customer relationship management (CRM) platform, to collect, store and manage information submitted through our website forms, surveys and associated customer communications.
The personal information processed may include your name, business name, email address, telephone number, enquiry details, survey responses and relevant communications with GrowthPoint.
We use this information to respond to enquiries, discuss our services, manage potential and existing customer relationships, provide agreed services and maintain appropriate business records.
GoHighLevel processes relevant personal information on our behalf under its applicable data-processing arrangements.
GrowthPoint determines why and how personal information collected for our own business purposes is used and remains responsible for its lawful collection, use, retention and handling.
We do not sell personal information to third parties.
3.1 Personal Information We Collect
We collect personal information that is reasonably necessary to respond to enquiries, provide our services, communicate with customers and operate our website.
Information You Provide
When you contact GrowthPoint, we may collect your name, business name, email address, telephone number where provided, and the information included in your enquiry.
If you become a customer, we may also process information relating to the services you use, our communications, contractual arrangements, billing and customer support.
Website and Technical Information
When you visit our website, technical information may be processed to deliver the website, maintain security and support its operation. Depending on the services actually enabled, this may include IP addresses, browser and device information, technical logs and information about how the website is accessed.
Optional analytics or advertising-related information will only be collected or accessed where there is an appropriate legal basis and any required cookie or tracking consent has been obtained.
Communications
When you communicate with us by email, telephone or an available messaging service, we may retain the information necessary to respond, manage the enquiry and maintain appropriate business records.
Information from Other Sources
We may receive business contact information through referrals, public business channels or other lawful sources when carrying out our business activities. Where personal information is obtained from someone other than the individual concerned, we will provide the transparency information required by applicable data protection law.
4. Why We Process Your Information
We only process your personal information for specific, stated purposes and we rely on a lawful basis under Article 6 of the GDPR for each activity.
| Purpose | Information used | GDPR lawful basis |
|---|---|---|
| Responding to enquiries | Contact details and enquiry content | Article 6(1)(b), where necessary to take steps at your request before entering a contract; otherwise Article 6(1)(f), legitimate interests in responding to relevant business enquiries, where justified by an assessment |
| Providing contracted services | Contact information, contractual records, service and communication information | Article 6(1)(b) where you are party to the contract. For business representatives who are not personally party to it, an appropriate alternative basis such as legitimate interests is assessed and documented |
| Business administration and accounting | Customer, billing and relevant business records | Article 6(1)(b), 6(1)(c) or 6(1)(f), as appropriate to the specific activity |
| Website security and operation | Necessary technical information and security records | Article 6(1)(f), legitimate interests in maintaining and securing the website, where justified |
| Optional promotional email marketing | Email address, relevant contact details and consent records | Article 6(1)(a), consent, where GrowthPoint uses a specific voluntary marketing opt-in |
| Optional website analytics | Relevant analytics identifiers and website usage information, only if analytics are actually enabled | Where consent is relied upon, Article 6(1)(a). Separate ePrivacy consent for non-exempt cookies and similar technologies is obtained before use |
Where we rely on legitimate interests, we consider the purpose of the processing, its necessity and the potential impact on individuals.
Where we rely on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
We do not regard submitting a business enquiry as automatic permission to send unrelated promotional marketing.
5. Responding to Enquiries and Following Up
When you submit an enquiry through our website, we use the contact information and message you provide to understand your requirements, respond to your request and discuss the GrowthPoint services you are interested in.
We may contact you by email or telephone to answer your questions, provide information, discuss your requirements or arrange a consultation.
Where legally permitted, we may also send relevant text messages relating to your enquiry, such as an acknowledgement, requested information or practical arrangements for a consultation.
We may make reasonable follow-up contact in relation to an outstanding enquiry, taking account of the purpose for which you contacted us, the communication channel and your preferences.
Communications promoting unrelated services, offers or ongoing marketing campaigns are treated separately from ordinary enquiry handling and are subject to applicable Irish electronic direct-marketing requirements.
Submitting an enquiry does not automatically subscribe you to a newsletter or give permission for unrestricted promotional emails, text messages or WhatsApp communications.
You can ask GrowthPoint to stop contacting you or object to direct marketing at any time by emailing conor@growthpoint.ie.
6. Marketing Communications
GrowthPoint may occasionally send promotional emails containing information about our services, updates and relevant offers.
We will only subscribe you to our optional email marketing communications where we have an appropriate legal basis and comply with applicable Irish electronic direct-marketing requirements.
Where we rely on your consent, we will request it separately from the ordinary enquiry process.
You do not have to agree to promotional emails to contact GrowthPoint or request information about our services.
You can withdraw your consent or object to direct marketing at any time. Promotional emails will include a working unsubscribe method.
We will not automatically enrol people in marketing campaigns simply because they submit a contact form. Permission to receive promotional emails does not automatically authorise promotional SMS or WhatsApp messages.
7. How We Share Information
We may share personal information with service providers where necessary to operate our website, respond to enquiries, deliver services and administer our business.
Depending on the systems actually used, these may include website hosting providers, customer relationship management platforms, email service providers, payment and accounting providers, and communication service providers.
We only disclose personal information where there is an appropriate legal basis and where the disclosure is necessary for the relevant purpose.
Where a provider processes personal information on our instructions, we seek to use appropriate contractual and security arrangements. Some external platforms may act as independent controllers for their own processing activities.
We may also disclose information where required by law or to protect or establish legal rights.
GoHighLevel and Other Service Providers
GrowthPoint uses GoHighLevel as its principal customer relationship management platform for website enquiries, forms, surveys, contact information and customer communications.
GoHighLevel processes relevant personal information on our behalf under its applicable contractual data-processing arrangements.
GoHighLevel uses authorised service providers and subprocessors to operate its platform. These may include cloud infrastructure, communications, security and support providers.
Additional service providers may be involved where we activate specific website, email or messaging services.
We only share personal information where necessary for legitimate business purposes, to provide requested services, comply with legal obligations or otherwise where permitted by law.
We do not sell your personal information.
8. International Data Transfers
Some of the service providers used by GrowthPoint may process or store personal information outside Ireland and the European Economic Area (EEA).
Our CRM provider, GoHighLevel, uses service providers and subprocessors operating in countries including the United States.
Where personal information is transferred outside the EEA, applicable data-protection requirements must be met. Depending on the circumstances, transfers may be covered by an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
GoHighLevel publishes information about its data-processing arrangements and subprocessors.
You can contact GrowthPoint at conor@growthpoint.ie to request further information about relevant international data transfers and the applicable safeguards.
9. How Long We Keep Your Information
We retain personal information only for as long as necessary for the purposes for which it was collected, or where retention is required or justified by law.
- Unsuccessful enquiries: we review unsuccessful enquiries after six months of inactivity. Enquiries that do not become customers are normally deleted or anonymised within twelve months of the last meaningful interaction, unless there is a documented legal or legitimate business reason to retain them longer.
- Existing customers: we keep customer information throughout the business relationship and afterwards where required for contractual, accounting, legal or other justified purposes.
- Accounting and tax records: retained for the applicable periods required by Irish law.
- Marketing subscriptions: we retain relevant subscription and consent records while the permission remains valid and necessary. Where you unsubscribe or object to marketing, we may retain limited suppression information to ensure your decision continues to be respected.
- Technical information: website security and technical records are kept only as long as necessary for legitimate operational, security or legal purposes.
- Cookie consent records: the date and your choices are stored on your device (in local storage) for as long as needed to remember your choice.
When information is no longer required, we take appropriate steps to delete or anonymise it. Where a specific retention period is required by law, we follow that period.
10. Your GDPR Rights
Under the GDPR you have the following rights, subject to conditions and exceptions:
- Access — to ask what personal data we hold about you and to receive a copy.
- Rectification — to ask us to correct information that is inaccurate or incomplete.
- Erasure — to ask us to delete your personal data in certain circumstances.
- Restriction — to ask us to limit our processing of your data in certain circumstances.
- Data portability — to receive your personal data in a structured, machine-readable form and to reuse it.
- Objection — to object to our processing of your personal data, including processing based on legitimate interests or for direct marketing.
- Withdrawal of consent — where we rely on your consent, you can withdraw it at any time without affecting processing that has already taken place.
- Rights relating to solely automated decision-making, including profiling, where it produces legal or similarly significant effects — see section 12.
To exercise any of these rights, please contact us or email conor@growthpoint.ie. We may need to verify your identity before responding and we will normally reply within one month, although that period can be extended by a further two months for complex requests, in which case we will explain why within the first month.
11. Complaints
Individuals have the right to lodge a complaint with the Irish Data Protection Commission if they believe their personal information has been handled unlawfully. You can contact them at dataprotection.ie. You are not required to contact GrowthPoint before submitting a complaint, though we would welcome the opportunity to resolve any concern directly.
12. Automated Decision-Making
We do not carry out solely automated decision-making, including profiling, with legal or similarly significant effects based on your personal data. Some of our services for clients (such as automatic acknowledgement of an enquiry) send simple, factual confirmations directly related to a submitted request — these are not legally significant automated decisions about you. We do not use AI profiling or automated decisions that do not occur.
13. Data Security
We take reasonable technical and organisational steps to protect your personal information, including using appropriate access controls, secure transmission where applicable, and appropriate safeguards with our service providers. No method of transmission or storage is completely secure, but we work to protect your information against unauthorised access, loss and misuse.
We have not obtained formal security certifications and we do not claim to have done so. If any of our providers hold certifications, we will confirm those before publishing.
14. Children
Our website and services are intended for businesses and the adults who run them. We do not knowingly collect personal information from children. If you believe a child has given us information, please contact us so we can delete it.
15. External Websites and Third-Party Services
Our website may link to external websites and platforms such as Google, Facebook, WhatsApp and our service providers. These have their own privacy policies and practices that we do not control. We encourage you to read their policies before sharing any information with them.
16. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices, services or legal requirements. The date shown at the top of the page is the date it was last revised. Where we make a material change, we will update the date and, where appropriate, draw attention to the change on the website.
17. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us or email conor@growthpoint.ie. Our correspondence address is 10 Rocwood Close, Grange Manor, Waterford, Ireland.