Privacy Policy

Last updated: 14 May 2026

Aurea Growth (operated by John Tossou, "we", "us") is committed to protecting your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy explains what data we collect, why, and what we do with it when you visit aureagrowth.co or submit an enquiry form.

1. Data we collect

When you submit the system demo request form on our website, we collect:

• Your name
• Your email address
• Your clinic website URL (optional)
• Your main business challenge (selected from a list)
• Any additional context you provide in the free-text field

We also collect standard web analytics data (pages visited, browser type, approximate location) through any analytics tools in use on the site.

2. How we use your data

We use your enquiry data to:

• Respond to your system demo request
• Prepare for any follow-up call or meeting
• Send relevant follow-up communications if you have agreed to this

Our lawful basis for processing is legitimate interest (to respond to your direct enquiry) and, where applicable, your consent at the point of form submission.

3. Third-party processors

Your enquiry data is stored and processed through GoHighLevel / LeadConnector, our CRM platform, which is based in the United States. GoHighLevel is covered by appropriate data transfer safeguards under UK GDPR. We do not sell or share your data with any other third parties for marketing purposes.

4. Data retention

If we enter a working relationship, we retain relevant correspondence and records for the duration of the engagement plus six years in line with standard UK business record-keeping requirements. If no engagement follows your enquiry, we retain your data for a maximum of 12 months before deletion.

5. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data
• Object to processing based on legitimate interest
• Request restriction of processing
• Data portability

To exercise any of these rights, email [email protected]. We will respond within 30 days.

6. Complaints

If you have a concern about how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

7. Contact

For any data protection queries, contact us at [email protected].