Let’s do this

Privacy Policy

Last updated: 10 September 2026

1. About This Privacy Policy

This Privacy Policy explains how XGROWTH LIMITED collects, uses, stores and shares personal data when you:
  • Visit thexgrowth.com or another website operated by us.
  • Submit a contact, enquiry or appointment form.
  • Communicate with us about our services or a potential business relationship.
  • Subscribe to or receive marketing communications from us.
  • Interact with our business profiles on social media.
This Privacy Policy applies to website visitors, prospective clients, clients’ business representatives, suppliers, partners and other professional contacts. Where xGrowth processes personal data on behalf of a client as part of providing services, that processing is governed by the relevant client agreement or data processing agreement and the client’s own privacy notice.

2. Who We Are

For the purposes of the General Data Protection Regulation, Regulation (EU) 2016/679, or “GDPR,” the controller responsible for the processing described in this Privacy Policy is: XGROWTH LIMITED Florinis 7, Greg Tower, 2nd floor, 1065, Nicosia, Cyprus Email: info@thexgrowth.com In this Privacy Policy, “xGrowth,” “we,” “us” and “our” refer to XGROWTH LIMITED.

3. Personal Data We Collect

Information You Provide to Us

When you submit a form, schedule an appointment or communicate with us, we may collect:
  • Your full name.
  • Your business email address.
  • Your telephone number.
  • Your company name, website and professional role.
  • The services in which you are interested.
  • Information included in your message or enquiry.
  • Appointment or scheduling information.
  • Records of our communications with you.
  • Information you provide during discussions about a potential or existing business relationship.
  • Your marketing and communication preferences.
Please avoid including sensitive personal data or confidential information in a website form unless it is necessary for your enquiry.

Information Collected Automatically

When you use our website, we and our service providers may collect:
  • Your Internet Protocol address.
  • Browser type and version.
  • Device type, operating system and language.
  • Pages viewed and actions taken on the website.
  • The date, time and duration of a visit.
  • Referring and exit pages.
  • Approximate location derived from technical information.
  • Cookie identifiers and similar online identifiers.
  • Information used to identify errors, prevent fraud and protect the website.
Some providers may process an IP address when receiving a website request even if the full address is subsequently truncated, discarded or not made available to xGrowth.

Information Received From Other Sources

In a business context, we may receive professional contact information from:
  • A colleague or business that refers or introduces you.
  • A company you represent.
  • Publicly available company websites or professional profiles.
  • Social media platforms when you interact with our business pages.
  • Business partners or service providers involved in an introduction or enquiry.
When required by law, we will provide any additional information applicable to personal data obtained from another source.

4. How and Why We Use Personal Data

We process personal data only when we have an appropriate legal basis.

Operating and Protecting the Website

We process technical, device, security and log information to deliver the website, identify errors, prevent abuse and maintain the security of our systems. Our legal basis is our legitimate interest in operating a functional and secure business website and, where relevant, compliance with legal obligations.

Responding to Enquiries

We process contact details, company information, service interests and messages to respond to enquiries, schedule discussions and provide requested information. Our legal basis is taking steps at your request before entering into a contract, where applicable, and our legitimate interest in communicating with prospective clients and professional contacts.

Managing Business Relationships

We process contact details, correspondence and business information to prepare proposals, administer relationships, provide services and maintain appropriate business records. Our legal basis is the performance of a contract, taking pre-contractual steps, compliance with legal obligations and our legitimate interest in managing our business relationships.

Website Analytics and Improvement

We use website analytics to understand how visitors use the website, measure performance and improve its content and usability. Where applicable law requires consent for analytics cookies or similar technologies, our legal basis is your consent. You may withdraw that consent through the website’s cookie settings.

Marketing Communications

We may use professional contact details to send information about xGrowth services, insights or events where you have requested such information or where the communication is otherwise permitted by applicable law. Depending on the circumstances, our legal basis is your consent or our legitimate interest in marketing relevant services to professional contacts. Rules governing electronic communications may require consent independently of the GDPR. You can object to direct marketing or unsubscribe at any time. We may retain limited information on a suppression list so that we can respect your request.

Legal Compliance and Protection

We may process personal data to:
  • Comply with legal, regulatory, tax and accounting requirements.
  • Respond to valid requests from courts, regulators or public authorities.
  • Establish, exercise or defend legal claims.
  • Protect our rights, systems, personnel, clients and other persons.
  • Investigate suspected fraud, misuse or security incidents.
Our legal basis is compliance with legal obligations and our legitimate interest in protecting our business and legal rights.

Social Media Interactions

We may process information about your interactions with xGrowth’s social media profiles, including messages, comments and aggregated audience information. Our legal basis is our legitimate interest in communicating with professional audiences, responding to enquiries and understanding engagement with our business.

5. Cookies and Similar Technologies

Cookies are small files stored on your device. We may also use tags, pixels, scripts and similar technologies. The website may use the following categories:

Strictly Necessary Technologies

These support essential website functions, security, fraud prevention, request routing and the recording of privacy preferences. Where a technology is strictly necessary to provide a service requested by the user, consent may not be required.

Analytics Technologies

We use analytics technologies to measure website traffic, understand visitor activity and improve the website. These may include:
  • Google Analytics.
  • Google Tag Manager, which is used to manage website tags.
  • HubSpot website analytics and tracking technologies.
Where required by law, these technologies are activated only after you provide consent. If you submit contact information, HubSpot may associate the information you provide with activity from the same browser, depending on how the service is configured. You can learn more about how these providers process information by reviewing the Google Privacy Policy and the HubSpot Privacy Policy.

Security and Form-Protection Technologies

Our forms use Google reCAPTCHA to help distinguish legitimate users from automated abuse. reCAPTCHA may send device, browser, interaction and network information to Google for security analysis.

External Content and Functionality

Some pages may contain external content, such as Google Maps. Loading that content may allow its provider to receive your IP address, browser information and details about the page you visited.

Managing Your Preferences

You can accept, reject or manage non-essential technologies through the website’s cookie settings. You can change your preferences at any time using the cookie settings control provided on the website. You may also manage cookies through your browser settings. Disabling strictly necessary technologies may prevent parts of the website from functioning correctly. A current description of the cookies and similar technologies used, including their providers, purposes and durations, is available through the website’s cookie settings tool.

6. How We Share Personal Data

We may share personal data with the following categories of recipients where necessary for the purposes described in this Privacy Policy:
  • Website hosting, maintenance and security providers.
  • Customer relationship management and business communication providers, including HubSpot.
  • Analytics and tag-management providers, including Google.
  • Form-protection and fraud-prevention providers, including Google reCAPTCHA.
  • Email, cloud storage and collaboration providers.
  • Professional advisers, including lawyers, accountants, auditors and insurers.
  • Regulators, courts, law-enforcement authorities and other public bodies where required or permitted by law.
  • A prospective buyer, investor, successor or adviser involved in a genuine corporate transaction, subject to appropriate confidentiality protections.
Some technology providers may act as our processors, while others may act as independent or joint controllers for particular processing activities. Their own privacy notices may also apply. We require service providers acting on our behalf to protect personal data and process it only in accordance with our instructions and applicable law.

7. International Transfers

Some service providers may process personal data outside Cyprus or the European Economic Area. Where personal data is transferred to a country that has not been recognised as providing an adequate level of protection, we use an appropriate transfer mechanism where required. This may include:
  • Standard Contractual Clauses approved by the European Commission.
  • The EU-US Data Privacy Framework, where the recipient is properly certified.
  • Another transfer mechanism permitted by applicable data-protection law.
We may also implement supplementary contractual, technical or organisational measures where appropriate. You may contact us for additional information about the safeguards used for a particular transfer. Certain commercially sensitive information may be redacted from any copy provided.

8. How Long We Retain Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected. In determining the appropriate period, we consider the nature and sensitivity of the information, the business relationship, applicable limitation periods, legal and regulatory requirements, security needs and the risk of harm from unauthorised use or disclosure. In general:
  • Enquiry and prospect information is retained while an enquiry is active and afterwards for as long as reasonably necessary to manage follow-up, document our communications and protect our legal interests.
  • Client and business-relationship records are retained for the duration of the relationship and any additional period required by legal, accounting, tax or limitation rules.
  • Marketing information is retained while it remains relevant or until you unsubscribe or object.
  • Limited suppression information may be retained after an opt-out to ensure that we continue to respect the request.
  • Website analytics and cookie information is retained according to the settings applied in the relevant analytics or cookie tool.
  • Security and technical logs are retained for the period reasonably necessary to investigate incidents, maintain security and comply with legal requirements.
  • Information connected with a dispute, investigation or legal claim may be retained until that matter and any relevant limitation period have ended.
Where possible, information that is no longer required will be deleted or anonymised.

9. Your Data-Protection Rights

Subject to the conditions and exceptions in applicable law, you may have the right to:
  • Request access to your personal data.
  • Request correction of inaccurate or incomplete personal data.
  • Request deletion of your personal data.
  • Request restriction of processing.
  • Object to processing based on legitimate interests.
  • Object at any time to processing for direct marketing.
  • Receive certain personal data in a structured, commonly used and machine-readable format.
  • Request that eligible data be transferred to another controller.
  • Withdraw consent at any time where processing is based on consent.
Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal. We do not use personal data collected through the website to make decisions based solely on automated processing that produce legal or similarly significant effects. To exercise a right, contact us at info@thexgrowth.com. We may request information reasonably necessary to confirm your identity and protect personal data from unauthorised disclosure. We normally respond within one month. Where permitted by law, that period may be extended by up to two additional months if a request is complex or numerous. We will inform you if an extension is required. Rights are not absolute and may be limited by applicable law. If we cannot fully comply with a request, we will explain the applicable reason.

10. Complaints

You may raise a concern with us by emailing info@thexgrowth.com. You also have the right to lodge a complaint with the Cyprus Office of the Commissioner for Personal Data Protection or another competent supervisory authority. Office of the Commissioner for Personal Data Protection Website: www.dataprotection.gov.cy Email: commissioner@dataprotection.gov.cy Telephone: +357 22 818 456 We would appreciate the opportunity to address your concern directly, but contacting us first does not limit your right to complain to a supervisory authority.

11. Marketing Choices

You can stop receiving marketing emails by:
  • Using the unsubscribe option included in the communication.
  • Contacting us at info@thexgrowth.com.
  • Objecting to the processing of your personal data for direct marketing.
Opting out of marketing does not prevent us from sending necessary service, contractual, legal or security communications.

12. Social Media and Third-Party Websites

Our website may link to social media services and other third-party websites. We do not control how those third parties process personal data. When you visit or interact with an xGrowth profile on LinkedIn, Facebook, Instagram or another platform, the platform provider may process your information under its own privacy notice. We may receive messages, comments, profile information or aggregated audience insights from the platform. Where xGrowth and a platform provider are treated as joint controllers for a specific feature, such as certain page-insight services, the applicable joint-controller arrangement will govern the parties’ respective responsibilities. We encourage you to review the privacy information provided by each external service.

13. Children’s Privacy

Our website and services are intended for businesses and professional audiences. They are not directed to children, and we do not knowingly seek to collect personal data from children through the website. If you believe that a child has provided personal data to us, please contact us so that we can assess the information and take appropriate action.

14. Security

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. No internet transmission or storage system can be guaranteed to be completely secure. You should use appropriate care when deciding what information to send through a website form or email.

15. Changes to This Privacy Policy

We may update this Privacy Policy when our processing activities, website technologies or legal obligations change. The date at the top of the policy identifies the latest revision. If a change materially affects how we use personal data, we will provide an appropriate additional notice where required.

16. Contact Us

For privacy questions, requests or concerns, contact: XGROWTH LIMITED Florinis 7, Greg Tower, 2nd floor, 1065, Nicosia, Cyprus Email: info@thexgrowth.com

Schedule Appointment

Fill out the form below, and we will be in touch shortly.

By submitting this form, you acknowledge that XGROWTH LIMITED will use the information you provide to respond to your enquiry and manage related communications as described in our Privacy Policy.