Privacy notice

Last updated: 17 July 2026

GrowSpark is operated by jai media ltd, a company registered in England and Wales, which is the data controller for the purposes of UK GDPR.

What we process, and why

Your account data (name, practice name, email, postcode, radius and industry preferences, billing details) is processed to provide the service and manage your subscription. Lawful basis: performance of our contract with you.

Company and officer data (company names, registered offices, SIC codes, and director names and roles) is sourced from the public Companies House register and shown to you as prospecting information. Lawful basis: our and your legitimate interests in business-to-business prospecting, balanced against the fact this data is already published on a public statutory register. We do not display full dates of birth.

Research enrichment (optional, credit-metered) matches a company and its directors to publicly available sources such as a company website, LinkedIn profiles and a general business contact. Lawful basis: legitimate interests. This data comes from public sources; we do not scrape private accounts.

Your responsibilities

GrowSpark supplies information for your own prospecting. You are the controller of any outreach you send and are responsible for complying with UK GDPR and PECR (including lawful basis, consent where required, and honouring opt-outs). We never send outreach on your behalf.

Cookies

We use only strictly-necessary cookies to keep you signed in and operate the site. We do not use analytics, advertising or tracking cookies, and we do not track you across other websites. Because these cookies are essential to a service you have asked for, they do not require consent under PECR. If we ever introduce non-essential cookies, we will ask for your consent first.

Who we share it with

We do not sell personal data. We share data only with the processors we need to run the service: our hosting and database provider (Railway), our payment processor (Stripe) and our email-delivery provider (Resend). Each processes data only on our instructions. Company and officer information originates from Companies House.

International transfers

Some of our processors are based in the United States. Where personal data is transferred outside the UK, it is protected by appropriate safeguards such as the UK International Data Transfer Agreement or Addendum and, where relevant, the UK extension to the EU-US Data Privacy Framework.

Retention

We keep your account data for as long as your account is active and for a short period afterwards to meet legal, accounting and tax obligations, then delete or anonymise it. Billing records are kept for six years as required by UK law. We delete or anonymise other personal data on request where we have no continuing lawful reason to keep it.

Your rights

You have the right to access, correct, erase, restrict, port or object to our processing of your personal data, and to lodge a complaint with the Information Commissioner's Office (ico.org.uk). Directors whose public-register information appears in our data can object to it being processed for prospecting by contacting us.

Contact for any data request or concern: hello@johnisaacson.co.uk.