GarageGrowthLab (“we”, “our”, or “us”), a brand operated by Prism Digital Group, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website garagegrowthlab.com and use our services.
1. Information We Collect
1.1 Personal Information
We may collect personal information that you voluntarily provide to us, including:
- Contact details: name, email address, phone number, and business address
- Business information: garage name, location, current website URL, approximate revenue
- Account credentials: login information for CRM dashboards and reporting tools we provide
- Payment information: billing details processed through our secure payment provider (Stripe)
- Communication data: messages you send via our contact forms, email, or phone
1.2 Automatically Collected Information
When you visit our website, we automatically collect:
- IP address and approximate geographic location
- Browser type, version, and operating system
- Pages visited, time spent on pages, and navigation paths
- Referring website addresses
- Device identifiers and screen resolution
1.3 Cookies and Tracking Technologies
We use cookies and similar technologies to collect information about your browsing activity. See our Cookie Policy for full details.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, maintain, and improve our services
- To process transactions and send related information
- To send you marketing communications (with your consent)
- To respond to your enquiries and provide customer support
- To personalise your experience on our website
- To analyse website usage and improve our content
- To comply with legal obligations
- To protect against fraudulent or unauthorised activity
3. Legal Basis for Processing (UK/EU)
Under the UK GDPR and EU GDPR, we process your data based on:
- Consent: where you have given clear consent for us to process your personal data for a specific purpose (e.g., marketing emails)
- Contract: where processing is necessary for the performance of a contract with you (e.g., delivering our services)
- Legitimate interests: where processing is necessary for our legitimate interests and those interests are not overridden by your rights (e.g., website analytics)
- Legal obligation: where we need to comply with a legal or regulatory obligation
4. Sharing Your Information
We do not sell, trade, or rent your personal information. We may share your data with:
- Service providers: third parties who assist in delivering our services, including hosting providers (Vercel), payment processors (Stripe), CRM platforms (GoHighLevel), and analytics tools
- Affiliated companies: Prism Digital Group and its subsidiary brands (TradeMarketingLab, CallSorted) where necessary for service delivery
- Legal requirements: when required by law, subpoena, or other legal process
- Business transfers: in connection with a merger, acquisition, or sale of assets
5. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy. Generally:
- Client data: retained for the duration of our business relationship and 6 years thereafter for legal and tax purposes
- Enquiry data: retained for 2 years from last contact
- Marketing data: retained until you unsubscribe or request deletion
- Analytics data: retained for 26 months
6. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate data
- Right to erasure: request deletion of your personal data
- Right to restrict processing: request limitation of how we use your data
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interests or direct marketing
- Right to withdraw consent: withdraw consent at any time where we rely on consent
To exercise any of these rights, contact us at privacy@garagegrowthlab.com. We will respond within 30 days.
7. International Transfers
Your information may be transferred to and processed in countries outside your own, including the United States. Where we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK ICO or European Commission.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal information, including encryption in transit (TLS/SSL), access controls, regular security assessments, and secure data storage. However, no electronic transmission or storage method is 100% secure, and we cannot guarantee absolute security.
9. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new “Last updated” date. Your continued use of our services after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions or concerns about this Privacy Policy, contact us at:
- Email: privacy@garagegrowthlab.com
- General enquiries: hello@garagegrowthlab.com
- Company: Prism Digital Group
12. Supervisory Authority
If you are based in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. If you are based in the EU, you may lodge a complaint with your local Data Protection Authority.