UK privacy information

Privacy Policy

Last updated August 15, 2026

Business details required before taking orders

MM Growth has not yet formed its final legal entity. Before accepting customers, this notice must identify the legal owner or company, a business address and, where applicable, the company number and country of registration. Those details cannot be replaced by a trading name alone. This document is a practical UK-focused draft and should be reviewed by a qualified UK adviser.

1. Who we are

MM Growth is a trading name for a business providing websites and enquiry follow-up services to contractors and other local service businesses. The person or company operating MM Growth is the controller of the personal information described in this notice. Until the legal owner is confirmed, privacy questions and requests can be sent to milan@mail.mmgrowth.cc.

2. Scope of this notice

This notice applies when you visit https://mmgrowth.cc, send an enquiry, book a call, communicate with us, receive email or SMS messages from us, or become a customer. When MM Growth processes personal information about a customer's own clients on that customer's instructions, the customer is normally the controller and MM Growth acts as its processor. That processing is also governed by the data-processing section of our Terms and Conditions.

3. Personal information we collect

Contact and business details: name, business name, email address, telephone number, service area and other details you provide.
Enquiry and booking details: messages, appointment selections, notes, communication preferences and records of calls, emails or SMS messages.
Customer and service information: package, project requirements, approvals, account details, support history, invoices and payment status. We do not currently collect card details directly through this website.
Website and attribution information: IP address, browser and device details, referring page, pages viewed, links used, approximate location derived from IP address, and identifiers stored through cookies or similar technologies.
Consent information: your cookie choices and the technical information needed to record and demonstrate those choices.
Content you supply: logos, photographs, reviews, business descriptions and other material needed to provide the services.

Please do not send special category information, such as health, biometric, religious or political information, unless we specifically request it and explain why it is needed.

4. How we obtain information

We obtain information directly from you when you use a form, calendar, email, telephone or SMS. We may also receive business contact details from public business websites or directories, referrals, and service providers that support our website and communications. Technical and attribution information is collected automatically when the relevant technology is active.

If we obtain your information from another source, we will provide this notice within the period required by UK GDPR: normally within one month, at our first communication with you, or before the information is first disclosed to another recipient, whichever applies first, unless a lawful exception applies.

5. Why we use information and our lawful bases

To respond to enquiries and take steps before a contract: contract necessity where you are a sole trader or other individual who will be party to the contract; otherwise, our legitimate interest in responding to a business enquiry.
To provide, maintain and support services: contract necessity where the customer is an individual contracting party, and legitimate interests where we deal with employees, directors or other representatives of a corporate customer.
To administer subscriptions, invoices and business records: necessary for our contract and to comply with tax, accounting and other legal obligations.
To operate, secure and improve the website and services: necessary for our legitimate interests in running a reliable, secure and effective business, provided those interests are not overridden by your rights.
To manage business relationships and prevent misuse or fraud: necessary for our legitimate interests in protecting MM Growth, customers and users.
To send direct marketing: based on consent where UK law requires consent, or on legitimate interests where business-to-business marketing is permitted. Electronic marketing is also subject to the Privacy and Electronic Communications Regulations 2003.
To use non-essential cookies or similar technologies: based on consent where consent is required.
To establish, exercise or defend legal claims: based on legitimate interests and, where applicable, legal obligations.

6. Information needed to provide services

You are not legally required to give us personal information. However, contact details and relevant enquiry information are needed if you want us to respond or book a call. Customer identity, billing, project and account information may be contractually required to provide paid services. If required information is not provided, we may be unable to quote, enter into a contract, configure the service or provide support.

7. Email and SMS communications

Service communications may include enquiry confirmations, appointment reminders, support messages and important account updates. For marketing emails and texts, UK rules distinguish corporate subscribers from individual subscribers such as sole traders and certain partnerships. We will obtain consent or rely on a valid existing-customer exception where PECR requires it. Named contacts at companies may still object under UK GDPR, and we will respect that objection.

You can unsubscribe from marketing emails using the link provided, reply STOP to an SMS, or contact us at milan@mail.mmgrowth.cc. We may retain minimal suppression information so that we continue to respect an opt-out. Network charges may apply according to your mobile tariff.

8. Cookies, embedded services and tracking

The website uses technologies required to deliver pages and protect the service. Cookiebot provides the consent banner and records your cookie choices. HighLevel forms and booking tools are loaded from api.mmgrowth.cc. HighLevel website attribution tracking is classified as marketing technology and is blocked until the relevant Cookiebot consent is given. These services may process device, usage and attribution information and may use cookies or local storage.

You can accept or reject optional categories through the Cookiebot banner and later change or withdraw your choice using the Cookiebot settings control. Withdrawing consent does not affect processing that occurred lawfully before withdrawal. Browser controls can also restrict cookies, although doing so may affect embedded features.

9. Who we share information with

We do not sell personal information. We may share only what is reasonably necessary with:

HighLevel (GoHighLevel): embedded forms, booking, customer relationship management, attribution, email and SMS communications.
Cloudflare: website hosting, content delivery, network security and related technical services.
Cookiebot by Usercentrics: cookie consent management and records of consent choices.
Professional advisers and suppliers: accountants, legal advisers, IT support and other providers used to operate the business.
Authorities or other parties: where required by law, court order, regulatory request, or to protect legal rights and safety.
A buyer or successor: if the business or its assets are reorganised, sold or transferred, subject to appropriate confidentiality and data protection requirements.

10. International transfers

Cloudflare, HighLevel and their subprocessors may process information outside the United Kingdom, including in the United States. Where personal information is transferred to a country that is not covered by UK adequacy regulations, MM Growth will rely on an appropriate safeguard made available under the provider's data-processing terms, such as the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful mechanism. You may contact us for information about the safeguard relevant to your information.

11. How long we keep information

Unsuccessful enquiries are normally retained for up to 24 months after the last meaningful contact.
Customer contracts, invoices and core transaction records are normally retained for six years after the customer relationship ends, where needed for tax, accounting and legal claims.
Routine booking and communication records are normally retained for up to 24 months unless they form part of a customer record or are needed to resolve a dispute.
Marketing information is retained until consent is withdrawn, an objection is made, or it is no longer useful. Minimal suppression records may be retained for longer to honour opt-outs.
Technical logs and attribution information are retained according to operational need and provider settings and should not normally be kept for longer than 12 months unless required for security, fraud prevention or a legal claim.
Cookie consent records are retained for the period reasonably needed to demonstrate and honour your choices, according to the configured Cookiebot settings.

We may delete information earlier when it is no longer required. Backup copies may remain for a limited period before being overwritten.

12. Security

We use proportionate technical and organisational measures intended to protect personal information, including access controls, secure service providers and encrypted network connections. No internet service can guarantee absolute security. Please contact us promptly if you believe information has been lost, misused or accessed without permission.

13. Your UK data protection rights

Depending on the circumstances, you may have the right to request access to your personal information, correct inaccurate information, request erasure, restrict processing, receive portable information, and object to processing based on legitimate interests. You have an absolute right to object to the use of your personal information for direct marketing. Where processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing.

To exercise a right, email milan@mail.mmgrowth.cc. We may request information needed to verify your identity. We normally respond within one month, although UK law allows an extension for complex or numerous requests.

14. Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

15. Automated decisions and children

MM Growth does not use the information covered by this notice to make solely automated decisions that produce legal or similarly significant effects. The website and services are intended for business users aged 18 or over and are not directed at children.

16. Changes to this notice

We may update this notice when our services, providers or legal obligations change. The latest version will be published on this page with a revised date. Material changes may also be communicated directly where appropriate.

17. Contact

Privacy requests and questions can be sent to milan@mail.mmgrowth.cc. The legal owner and postal address must be added here before MM Growth accepts customers.