Privacy Policy

Last updated: 27 July 2026

1. About this policy

This Privacy Policy explains how Sophie Sheppard, a sole trader trading as Let’s Grow (“Let’s Grow”, “we”, “us” or “our”), collects, uses, stores and protects personal data.
Let’s Grow is a business strategy, website and systems studio based in the Isle of Man. We provide business strategy sessions, strategic website design and copywriting, sales funnel builds, Dubsado CRM setups, workflow automation and related business support.
For the purposes of the Isle of Man Data Protection Act 2018 and the Applied GDPR, Let’s Grow is the controller of the personal data described in this policy.

Legal name: Sophie Sheppard
Business structure: Sole trader
Business name registration number: 030344B
Location: Isle of Man
Email: hello@letsgetgrowing.com
Website: https://letsgetgrowing.com
This policy applies when you visit our website, submit an enquiry, join our email list, complete a quiz or questionnaire, book a session, purchase or receive a service, provide feedback, or otherwise communicate with us.

2. Personal data we collect
Depending on how you interact with Let’s Grow, we may collect:

Identity and contact information
Your name, business name, job title, email address, telephone number, postal or billing address and social media details.

Enquiry and project information
Information you provide about your business, services, customers, goals, current systems, website, sales process, client journey, challenges, priorities and the support you are seeking.
For some services, this may include responses submitted through an enquiry form, discovery questionnaire, Business Foundations Intensive questionnaire, CRM form or project brief.

Booking and transaction information
Details of appointments, services purchased, amounts charged, payment status, invoices, contracts, proposals and related communications. Payment-card details are normally processed directly by our payment provider and are not stored by Let’s Grow.

Marketing information
Your preferences about receiving emails or other marketing, the resources you request, and information about how you interact with our emails.

Technical and usage information
Your IP address, browser type, device information, time zone, approximate location, pages visited, links clicked, referring website and information collected through cookies or similar technologies.

Communications and feedback
Emails, messages, call notes, testimonials, survey responses, feedback and other information you choose to share with us.
We do not intentionally request special-category personal data, such as health, biometric, religious or political information.

3. How we collect personal data
We collect personal data:

directly from you when you complete a form, book, pay, email, message or speak with us;
through Wix, Dubsado and other systems used to operate the website and deliver services;
automatically through cookies and similar technologies when you use the website;
from payment, email, scheduling, analytics or quiz providers used by Let’s Grow;
from publicly available sources, such as your business website or public social media accounts, where it is reasonably necessary to review your business before or during a service; and
from somebody acting on your behalf, such as a team member, with appropriate authority

4. How and why we use personal data
We only use personal data when we have a lawful basis to do so:

Responding to enquiries, recommending an appropriate service and preparing a proposal
Taking steps at your request before entering into a contract and our legitimate interests in responding to potential clients
Processing a booking or payment and delivering a session, website, funnel, CRM build or other service
Managing projects, questionnaires, calls, support, feedback and client communication
Issuing invoices, keeping financial records and meeting tax, accounting or regulatory duties
Operating, protecting and troubleshooting the website and business systems
Measuring website performance and understanding how visitors use the website
Your consent where non-essential cookies are used, together with our legitimate interests in improving the website
Sending newsletters, resources, offers and other marketing
Establishing, exercising or defending legal claims and preventing misuse or fraud

Where we rely on legitimate interests, we consider whether our use of the information is necessary, proportionate and balanced against your rights.
Where we rely on consent, you can withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

5. If you do not provide requested information
You do not have to provide personal data simply to browse the website. However, if you do not provide information needed for an enquiry, booking, payment or service, we may be unable to respond fully, enter into a contract or deliver the requested service

6. Marketing
We may send you marketing where:

you have actively subscribed or requested a free resource;
you have otherwise given permission; or
the law allows us to contact you about relevant services and you have not opted out.

Submitting a general enquiry does not automatically subscribe you to marketing.
You can unsubscribe at any time by using the link in a marketing email or contacting hello@letsgetgrowing.com. We may retain a minimal suppression record to make sure we honour your request

7. Cookies
Cookies are small files placed on your device when you visit a website. Let’s Grow’s Wix website may use:

essential cookies, which are needed for security, navigation and core website functions;
functional cookies, which remember choices and improve website features;
analytics cookies, which help us understand how visitors use the website; and
marketing cookies, which may be used to measure campaigns or show relevant advertising

Non-essential cookies will only be used in accordance with the choices you make through the cookie banner. You can change or withdraw those choices through the cookie settings available on the website and can also control cookies through your browser.
The exact cookies used may change when website features or integrations change. The cookie banner and cookie settings should be read alongside this policy for the current list and purpose of cookies.

8. Who we share personal data with
We may share personal data with trusted service providers where reasonably necessary to operate the website, take payment and deliver our services. These may include:

Wix, which hosts and provides functionality for the website;
Dubsado, which supports enquiries, forms, scheduling, proposals, contracts, invoices, workflows and client communication;
PayPal, which processes payments;
Mailchimp, which manages email subscriptions and campaigns;
Google Analytics, which provides website measurement and analytics where you have consented to the relevant cookies;
ScoreApp, which hosts and processes Business Foundations Quiz responses;
contractors or specialist providers who support an agreed client project;
professional advisers, including accountants, insurers, legal advisers and IT or security specialists; and
public authorities, regulators, law-enforcement bodies, courts or other parties where disclosure is required by law or reasonably necessary to protect legal rights.

Service providers may only use personal data for the agreed purpose and must protect it appropriately. We do not sell personal data.
Where a project requires access to a client’s own customer or team data, the responsibilities of Let’s Grow and the client will also be governed by the relevant proposal, contract or data-processing terms.

9. International transfers
Some service providers may process or store personal data outside the Isle of Man, the United Kingdom or the European Economic Area.
Where an international transfer is made, we take reasonable steps to ensure an appropriate safeguard or lawful transfer mechanism is in place. This may include an adequacy decision, approved contractual protections or another mechanism permitted under applicable data-protection law.
You can contact us if you would like more information about the safeguards relevant to your data.

10. Data security
We use reasonable technical and organisational measures to protect personal data against accidental loss, misuse, unauthorised access, alteration or disclosure.
Access is limited to people and providers who reasonably need the information for their work. No internet transmission or storage system can be guaranteed to be completely secure, but we review our systems and working practices and respond to suspected data incidents appropriately.

11. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, insurance and dispute-resolution requirements.

As a general guide:

unsuccessful enquiry information may be retained for up to 24 months after the last meaningful contact;
client contracts, project records, invoices and transaction information may be retained for up to six years after the end of the client relationship, or longer where the law or a live legal matter requires it;
marketing information is retained until you unsubscribe or the information is no longer useful, after which a minimal suppression record may be kept; and
cookie and analytics information is retained in accordance with the settings and retention periods of the relevant tool

We may anonymise information so that it can no longer identify an individual. Anonymised information may be retained and used for business analysis, service development or reporting.

12. Your rights
Depending on the circumstances and subject to legal exceptions, you may have the right to:

be informed about how your personal data is used;
request access to the personal data held about you;
ask for inaccurate or incomplete information to be corrected;
ask for personal data to be erased;
ask for processing to be restricted;
receive certain personal data in a portable format;
object to processing based on legitimate interests;
object to direct marketing at any time;
withdraw consent where processing is based on consent

To exercise a right, email hello@letsgetgrowing.com. We may need to verify your identity before responding

13. Complaints
Please contact us first if you have a concern so that we can try to resolve it.
You also have the right to complain to the:
Isle of Man Information Commissioner
P.O. Box 69
Douglas
Isle of Man
IM99 1EQ
Telephone: +44 1624 693260
Email: ask@inforights.im
Website: https://inforights.im/

14. Users
The website and services are intended for adults and business users. We do not knowingly collect personal data from children through the website. If you believe a child has provided personal data to us, please contact us so that we can review and, where appropriate, delete it

15. Third-party links
The website may link to websites, platforms or resources operated by other organisations. Their privacy practices are governed by their own policies. Let’s Grow is not responsible for the privacy, security or content of third-party websites.

16. Changes to this policy
We may update this Privacy Policy when our website, services, providers or legal obligations change. The current version will be published on the website with its updated date.

17. Contact
Questions about this policy or the use of your personal data should be sent to:
Let’s Grow
Sophie Sheppard
Business name registration number: 030344B
Isle of Man
hello@letsgetgrowing.com

Privacy Policy

directly from you when you complete a form, book, pay, email, message or speak with us;

through Wix, Dubsado and other systems used to operate the website and deliver services;

automatically through cookies and similar technologies when you use the website;

from payment, email, scheduling, analytics or quiz providers used by Let’s Grow;

from publicly available sources, such as your business website or public social media accounts, where it is reasonably necessary to review your business before or during a service; and

from somebody acting on your behalf, such as a team member, with appropriate authority

you have actively subscribed or requested a free resource;

you have otherwise given permission; or

the law allows us to contact you about relevant services and you have not opted out.

essential cookies, which are needed for security, navigation and core website functions;

functional cookies, which remember choices and improve website features;

analytics cookies, which help us understand how visitors use the website; and

marketing cookies, which may be used to measure campaigns or show relevant advertising

Wix, which hosts and provides functionality for the website;

Dubsado, which supports enquiries, forms, scheduling, proposals, contracts, invoices, workflows and client communication;

PayPal, which processes payments;

Mailchimp, which manages email subscriptions and campaigns;

Google Analytics, which provides website measurement and analytics where you have consented to the relevant cookies;

ScoreApp, which hosts and processes Business Foundations Quiz responses;

contractors or specialist providers who support an agreed client project;

professional advisers, including accountants, insurers, legal advisers and IT or security specialists; and

public authorities, regulators, law-enforcement bodies, courts or other parties where disclosure is required by law or reasonably necessary to protect legal rights.

unsuccessful enquiry information may be retained for up to 24 months after the last meaningful contact;

client contracts, project records, invoices and transaction information may be retained for up to six years after the end of the client relationship, or longer where the law or a live legal matter requires it;

marketing information is retained until you unsubscribe or the information is no longer useful, after which a minimal suppression record may be kept; and

cookie and analytics information is retained in accordance with the settings and retention periods of the relevant tool

We may anonymise information so that it can no longer identify an individual. Anonymised information may be retained and used for business analysis, service development or reporting. 12. Your rights Depending on the circumstances and subject to legal exceptions, you may have the right to:

be informed about how your personal data is used;

request access to the personal data held about you;

ask for inaccurate or incomplete information to be corrected;

ask for personal data to be erased;

ask for processing to be restricted;

receive certain personal data in a portable format;

object to processing based on legitimate interests;

object to direct marketing at any time;

withdraw consent where processing is based on consent

We may anonymise information so that it can no longer identify an individual. Anonymised information may be retained and used for business analysis, service development or reporting.

12. Your rights
Depending on the circumstances and subject to legal exceptions, you may have the right to: