Privacy Policy

Privacy Policy – Lucia Growth Ltd

Last updated: 23 Sept 2026 ·

This policy explains how Lucia Growth Ltd collects, uses and protects personal data when you visit lucia-growth.com, contact us, work with us, or receive business outreach from us.

1. Who we are

Lucia Growth Ltd is a B2B sales and growth consultancy registered in England and Wales (company number 16689708), with its registered office at 12 Shingle Road, Shoreham-by-Sea, West Sussex BN43 5RH. We are the data controller for the personal data described in this policy and are registered with the Information Commissioner's Office (ICO registration number ZC055537).

For any privacy question or request, email lucy@lucia-growth.com.

2. What data we collect

We collect business contact and professional data only. We do not knowingly collect sensitive (special category) data.

  • Data you give us: name, job title, company, work email, phone number and anything you include when you fill in a form, book a call, email us or message us on LinkedIn.

  • Client and supplier data: contact details of people at the organisations we work with, plus meeting notes, correspondence and contract and invoicing details.

  • Business prospect data: name, job title, company, work email, work phone and public LinkedIn profile details of professionals we believe may be interested in our services, or in our clients' services when we run outreach on their behalf.

  • Website data: IP address, browser and device type, pages visited and referring site, collected through cookies and similar technologies (see section 4).

Where prospect data comes from: public sources such as LinkedIn, company websites and business directories, and B2B data providers (for example Apollo.io).

3. How we use your data and our lawful basis

  • Replying to enquiries and booking calls – legitimate interests, and steps before a contract

  • Delivering services to clients, invoicing and account management – contract

  • B2B outreach by email and LinkedIn about our services or our clients' services – legitimate interests

  • Sending our newsletter or updates you signed up for – consent

  • Website analytics and non-essential cookies – consent

  • Keeping business, tax and accounting records – legal obligation

Business outreach: we only contact professionals in their work capacity, about services relevant to their role. Every message includes a simple way to opt out, and we honour opt-outs promptly. We have assessed that this outreach does not override your rights, in line with UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

We do not sell your personal data, and we do not make decisions about you based solely on automated processing.

4. Cookies

Our website runs on Squarespace. We use essential cookies to make the site work and, only with your consent, Squarespace's built-in analytics cookies to understand how visitors use the site. We do not use any other analytics or advertising tools. You can accept or decline non-essential cookies through the cookie banner, and change your choice at any time using the "Manage cookies" button on the site or your browser settings.

Analytics cookies (set only if you accept):

  • ss_cid – recognises unique visitors (2 years)

  • ss_cpvisit – recognises returning visits (2 years)

  • ss_cvisit – tracks a single visit (30 minutes)

  • ss_cvr – measures conversions (2 years)

  • ss_cvt – measures conversions within a visit (30 minutes)

5. Who we share data with

We share personal data only with people and services that help us run the business, under contracts that require them to protect it:

  • Our team and contractors, including team members based outside the UK.

  • Software providers we use for CRM, outreach, email, project management and communication, such as Pipedrive, Attio, Apollo.io, Instantly, HeyReach, ClickUp, Slack and Google Workspace.

  • Clients, where we run outreach or campaigns on their behalf and pass on responses or meeting requests.

  • Professional advisers such as our accountant and lawyers, and authorities where the law requires it.

International transfers: some of these providers and team members are outside the UK, including in the US, the EU and the Philippines. Where data leaves the UK, we rely on UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or the UK-US Data Bridge, so your data stays protected to UK standards.

6. How long we keep data and how we protect it

  • Client records, contracts and invoices – 6 years after the engagement ends (tax and legal requirements)

  • Enquiries with no ongoing relationship – 2 years from last contact

  • Business prospect data – 2 years from last contact, or until you opt out

  • Opt-out records – kept on a suppression list so we never contact you again

  • Website analytics – up to 2 years

We protect data with access controls, two-factor authentication on our business systems, and by giving team members access only to what their work needs.

7. Your rights

Under UK data protection law you can:

  • ask for a copy of the personal data we hold about you

  • ask us to correct or delete it

  • object to us using it, including for outreach, at any time

  • ask us to restrict how we use it, or to transfer it to you or another organisation

  • withdraw consent where we rely on it

To opt out of outreach, reply "unsubscribe" to any email, tell us on LinkedIn, or email lucy@lucia-growth.com. For any other request, email the same address. We will respond within one month.

Complaints: please contact us first so we can put things right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows when it last changed.