Effective Date: January 2026
Last Updated: April 2026
1. Introduction
Align Growth Global (“AGG,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, subscribe to our communications, or otherwise interact with us.
This Privacy Policy applies to personal information collected through:
Our website at https://aligngrowthglobal.com/ (the “Site”)
Email communications and newsletters
Contact forms and inquiry submissions
Business development interactions
Community programs, events, and peer networking activities
Testimonials and case study participation
This Privacy Policy does not apply to personal information we process on behalf of our clients in the course of providing consulting services (such as client customer data or proprietary business information). Such processing is governed by the data protection provisions of our Master Services Agreement with each client.
2. Data Controllers
AGG operates through two legal entities that act as joint data controllers:
For users in the United States:
Align Growth Global LLC
231 Gay Road, Groton, MA 01450
Massachusetts, USA
For users in the United Kingdom and European Economic Area:
Align Growth Global UK Ltd
Company Number: 17143777
Registered Office:
Align Growth Global UK Ltd
Delamere, 4 Bourne Dene,
Farnham, Surrey GU10 4RF, UK
England and Wales
Both entities have established arrangements to ensure consistent data protection practices and to enable you to exercise your rights effectively.
3. Privacy Contact
For any questions about this Privacy Policy or to exercise your data protection rights, please contact:
Data Protection Contact: William Cordis
Email: privacy@aligngrowthglobal.com
Address: 231 Gay Road, Groton, MA 01450
4. Information We Collect
We collect only the personal information necessary for the purposes described in this Privacy Policy. We regularly review our data collection practices to ensure we are not collecting more information than required.
4.1 Information You Provide
We collect information you voluntarily provide when you:
|
Category |
Data Types |
When Collected |
|---|---|---|
|
Contact Information |
Name, email address, phone number, company name, job title |
Contact form submissions, newsletter signup, meeting requests |
|
Communication Content |
Messages, inquiries, feedback |
Contact forms, email correspondence |
|
Professional Information |
Company details, role, industry, business challenges |
Discovery calls, qualification conversations |
|
Event Information |
Registration details, attendance records |
Webinars, workshops, events |
|
Testimonials and Case Studies |
Name, company, role, quotes, outcome metrics (with consent) |
Case study interviews, testimonial requests |
Information from Clients: If you are a client participating in our subscription services, we may collect additional information in connection with community features and events as described in Section 8.
4.2 Information Collected Automatically
When you visit our Site, we automatically collect certain information through cookies and similar technologies:
|
Category |
Data Types |
Purpose |
|---|---|---|
|
Device Information |
IP address, browser type, operating system, device identifiers |
Site functionality, security, analytics |
|
Usage Information |
Pages viewed, time spent, click patterns, referring URL |
Analytics, site improvement |
|
Location Information |
General geographic location (derived from IP address) |
Analytics, content relevance |
4.3 Information from Third Parties
We may receive information about you from:
Publicly available sources: Company websites, LinkedIn, and other professional networks
Business partners: Referral sources who introduce potential clients
Service providers: Data enrichment services that supplement business contact information
5. How We Use Your Information
We use your personal information for the following purposes:
|
Purpose |
Legal Basis (UK/EU) |
Description |
|---|---|---|
|
Respond to inquiries |
Legitimate interest |
Reply to your questions and requests submitted through our Site |
|
Marketing to prospective clients |
Consent |
Send newsletters, insights, and promotional content to individuals who have not engaged our services (requires opt-in) |
|
Communications to existing clients |
Legitimate interest (soft opt-in) |
Send service-related updates, relevant insights, and information about similar services to clients with an existing relationship |
|
Joint events and co-marketing |
Consent |
Share information with co-sponsors when you register for co-branded events or content |
|
Client services |
Contract |
Deliver subscription services including community features, introductions, and events |
|
Testimonials and case studies |
Consent |
Publish client success stories and quotes with explicit permission |
|
Benchmarking and insights |
Legitimate interest |
Create aggregated, anonymized benchmarks and insights from engagement data |
|
Site operation |
Legitimate interest |
Maintain, improve, and secure our Site |
|
Analytics |
Legitimate interest; Consent (cookies) |
Understand how visitors use our Site to improve content and user experience |
|
Legal compliance |
Legal obligation |
Comply with applicable laws, regulations, and legal processes |
|
Contract performance |
Contract |
Where you become a client, perform our contractual obligations |
Our commitment on client communications: We interpret the soft opt-in exception narrowly. Communications to existing clients will be limited to: (a) information directly relevant to services you have engaged or expressed interest in, (b) insights and content related to challenges you are actively addressing with us, and (c) information about similar AGG services that may benefit you. We will not use an existing client relationship as grounds for general marketing unrelated to your engagement. Every communication includes a clear, single-click opt-out mechanism.
Your Right to Object: Where we process your personal information based on legitimate interest (as indicated in the table above), you have the right to object at any time. If you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. To exercise your right to object, contact us at privacy@aligngrowthglobal.com or notify your AGG engagement partner.
Legitimate Interest Assessment: Where we rely on legitimate interest as a legal basis, we have conducted assessments to ensure our interests do not override your fundamental rights and freedoms. You may request information about these assessments by contacting us.
Automated Decision-Making: We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. Any lead scoring or segmentation in our systems is used only to prioritize our own outreach efforts and does not affect your rights or access to our services.
6. Cookies and Tracking Technologies
6.1 What Are Cookies
Cookies are small text files placed on your device when you visit a website. They help websites function, improve user experience, and provide information to site owners.
6.2 Cookies We Use
|
Cookie Type |
Purpose |
Duration |
Consent Required |
|---|---|---|---|
|
Strictly Necessary |
Essential for Site functionality, security, and accessibility |
Session or persistent |
No |
|
Analytics |
Help us understand how visitors use our Site (pages viewed, time spent, navigation paths) |
Up to 2 years |
Yes |
|
Functional |
Remember your preferences (language, region) |
Up to 1 year |
Yes |
|
Marketing |
Track effectiveness of our marketing and provide relevant content |
Up to 2 years |
Yes |
6.3 Third-Party Cookies
Our Site uses services from third parties that may set cookies:
|
Provider |
Purpose |
Privacy Policy |
|---|---|---|
|
Google Analytics |
Website analytics and performance measurement |
https://policies.google.com/privacy |
|
HubSpot |
Marketing automation, analytics, and CRM |
https://legal.hubspot.com/privacy-policy |
6.4 Managing Cookies
When you first visit our Site, you will be presented with a cookie consent banner. Non-essential cookies (analytics and functionality) are disabled by default and will not be placed on your device unless you actively choose to accept them.
You may:
Accept all cookies to enable all cookie categories
Use category settings to enable only specific types of cookies
Decline all to reject non-essential cookies entirely
You can change your preferences at any time using the “Cookie Settings” link available in the footer of our Site.
Browser and opt-out tools:
Browser settings: Most browsers allow you to refuse or delete cookies through settings
Opt-out tools: Google Analytics: https://tools.google.com/dlpage/gaoptout
Note that refusing certain cookies may affect Site functionality, such as remembering your preferences.
7. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
7.1 Service Providers
We share information with third-party service providers who process data on our behalf. These providers are contractually obligated to use your information only for the purposes of providing services to us and to maintain appropriate security measures.
|
Provider |
Services |
Location |
Safeguards |
|---|---|---|---|
|
HubSpot, Inc. |
CRM, email marketing, website hosting |
United States |
EU-US Data Privacy Framework; Standard Contractual Clauses |
|
Google LLC |
Website analytics, cloud storage, video conferencing |
United States |
EU-US Data Privacy Framework; Standard Contractual Clauses |
We will update this list when we add new service providers. Material changes will be reflected in the “Last Updated” date at the top of this policy.
7.2 Contractors and Consultants
We engage individual contractors and consultants (including experts engaged through our Expert in Residence program) who may access personal information as necessary to perform services on our behalf. These individuals are bound by confidentiality and data protection obligations consistent with our Master Services Agreement, and are required to process personal information only in accordance with our instructions and applicable data protection laws.
7.3 Co-Marketing and Event Partners
We occasionally collaborate with third-party organizations on joint events, webinars, content, or marketing initiatives. When you register for or participate in a co-branded event or download co-branded content, your information may be shared with the co-sponsoring organization as a joint controller.
In such cases:
The registration or download form will identify all parties who will receive your information
Each party’s use of your information is governed by their respective privacy policy
You may receive communications from the co-sponsoring organization based on their legitimate interests or with your consent, as applicable
If you do not wish your information to be shared with a co-sponsor, please do not register for co-branded events or download co-branded content.
7.4 Professional Advisors
We may share information with our legal, accounting, and other professional advisors as necessary for their services.
7.5 Legal Requirements
We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to:
Comply with legal obligations
Protect our rights or property
Prevent fraud or security issues
Protect the safety of any person
7.6 Business Transfers
If AGG is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in data controller.
7.7 With Your Consent
We may share your information for other purposes with your explicit consent.
8. Client Community and Subscription Services
If you are a client of AGG, our subscription services may include community features, events, and networking opportunities that involve specific data processing activities. This section describes how we handle personal information in connection with these services. Not all features described below may be available at any given time; we will update this policy as our service offerings evolve.
8.1 Peer Networking and Introductions
Our subscription services may include facilitated introductions to other AGG clients, ecosystem partners, or service providers. We treat introductions as valuable connections that should benefit all parties, not routine data sharing.
How introductions work:
Before facilitating any introduction, we will describe the proposed connection and obtain your confirmation before sharing your contact information
We will not share your information with third parties for introduction purposes without your prior approval
You may provide standing consent for introductions within defined categories (e.g., “introduce me to relevant technology partners without asking each time”), which you can modify or revoke at any time
You may opt out of receiving introduction offers entirely by notifying your AGG engagement partner
If you have not provided standing consent for a category, we will seek your approval for each specific introduction before sharing any information.
8.2 Events and Community Sessions
We may host events, workshops, webinars, or community sessions for clients and invited participants. When you participate:
Your name, company, and role may be visible to other participants
Sessions may be recorded (you will be notified in advance if recording occurs)
Attendance and participation data is retained for program administration
If an event is co-hosted with third parties, your registration information may be shared with co-hosts as disclosed at registration.
8.3 Testimonials and Case Studies
We may invite you to participate in case studies or provide testimonials about your experience with AGG. Participation is entirely voluntary and requires your explicit consent. Before publication, we will:
Provide you with the proposed content for review and approval
Obtain your written consent for specific uses
Honor any restrictions you request
You may withdraw consent for future use of testimonials at any time by contacting us.
8.4 Benchmarking and Aggregated Insights
We may analyze engagement data across our client base to develop benchmarks and insights. This analysis uses aggregated and anonymized data that does not identify individual clients without explicit consent.
If you prefer that your engagement data not be included in our benchmarking analysis, even in anonymized form, please notify your AGG engagement partner or contact us at privacy@aligngrowthglobal.com . We will exclude your data from future analyses.
8.5 Research Activities
Certain AGG services involve collecting information about third parties (such as your customers or prospects). When conducting such research on your behalf:
We act as a processor, and such data is governed by our Master Services Agreement
We do not use third-party data collected for one client for any other purpose
9. International Data Transfers
AGG operates in both the United States and United Kingdom. Your personal information may be transferred to and processed in countries other than your country of residence.
9.1 US-UK/EU Transfers
When we transfer personal information from the UK or EEA to the United States, we rely on:
EU-US Data Privacy Framework / UK Extension: For transfers to certified US organizations
Standard Contractual Clauses (SCCs): Commission-approved contractual terms that provide appropriate safeguards
UK International Data Transfer Agreement (IDTA): UK-specific transfer mechanism where applicable
9.2 Safeguards
We ensure that any international transfers are subject to appropriate safeguards as required by applicable data protection laws. You may request a copy of the relevant transfer mechanisms by contacting us.
10. Data Retention
We retain your personal information only as long as necessary for the purposes described in this Privacy Policy:
|
Data Category |
Retention Period |
Rationale |
|---|---|---|
|
Website analytics |
26 months |
Industry standard for analytics data |
|
Contact form submissions |
2 years from last contact |
Business development lifecycle |
|
Newsletter subscribers |
Until unsubscribe + 6 months |
Compliance with unsubscribe requests |
|
Prospective client data |
2 years from last contact |
Typical B2B consulting sales cycle |
|
Marketing preferences |
Duration of relationship + 2 years |
Respect communication preferences |
|
Event registration and attendance |
1 year from event date |
Program administration; longer if you opt into ongoing communications |
|
Client engagement data |
Duration of client relationship + 3 years |
Contractual records and limitation period for potential claims |
|
Testimonials and case studies |
Until consent withdrawn |
Marketing use with ongoing consent |
Why these periods: Retention periods reflect: (a) typical business development cycles in B2B consulting, (b) legal requirements for financial and contractual records, (c) the limitation period for potential claims under applicable law (typically 6 years in the UK for contract claims, which informs our client engagement retention), and (d) your reasonable expectations based on your relationship with us. We delete data sooner when there is no legitimate reason to retain it, and we review our retention practices annually.
After the retention period, we securely delete or anonymize your information unless retention is required by law.
11. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
Encryption of data in transit (TLS/SSL)
Access controls limiting who can access personal information
Regular security assessments of our systems and providers
Employee training on data protection
Incident response procedures
While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
12. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
12.1 Rights for All Users
Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information (subject to legal retention requirements)
Opt-out: Unsubscribe from marketing communications at any time
12.2 Additional Rights for UK and EEA Residents
Under the UK GDPR and EU GDPR, you also have the right to:
Restriction: Request restriction of processing in certain circumstances
Portability: Receive your data in a structured, machine-readable format
Object: Object to processing based on legitimate interests
Withdraw consent: Withdraw consent at any time (where processing is based on consent)
Lodge a complaint: File a complaint with a supervisory authority
UK Supervisory Authority:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
Helpline: 0303 123 1113
EU Supervisory Authorities:
Contact details available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en
12.3 How to Exercise Your Rights
To exercise any of these rights, please contact us at:
Email: privacy@aligngrowthglobal.com
Address: 231 Gay Road, Groton, MA 01450
We will respond to your request within one month (or as required by applicable law). We may need to verify your identity before processing your request.
13. Additional Information for California Residents
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide additional rights.
13.1 Categories of Information Collected
In the past 12 months, we have collected the following categories of personal information:
Identifiers (name, email, IP address)
Professional information (company, job title)
Internet activity (browsing history on our Site)
13.2 Your California Rights
Right to Know: Request disclosure of personal information collected, used, and disclosed
Right to Delete: Request deletion of personal information
Right to Correct: Request correction of inaccurate information
Right to Opt-Out: We do not sell or share personal information for cross-context behavioral advertising
Non-Discrimination: We will not discriminate against you for exercising your rights
13.3 Exercising Your Rights
California residents may submit requests by contacting us at privacy@aligngrowthglobal.com . We will verify your identity before processing your request.
14. Children’s Privacy
Our Site is not directed to children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete such information.
15. Links to Third-Party Sites
Our Site may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
Posting the updated policy on our Site with a new effective date
Sending email notification to subscribers (for material changes)
We encourage you to review this Privacy Policy periodically.
17. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
Data Protection Contact: William Cordis
Email: privacy@aligngrowthglobal.com
Address: 231 Gay Road, Groton, MA 01450
For UK/EU data protection matters, you may also contact our UK entity:
Align Growth Global UK Ltd
Align Growth Global UK Ltd
Delamere, 4 Bourne Dene,
Farnham, Surrey GU10 4RF, UK
Email: privacy@aligngrowthglobal.com
------------- END OF PRIVACY POLICY -------------