Effective Date: 1 January 2026 I Last Updated: 1 January 2026

1. Introduction

Align Growth Global (“AGG,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, subscribe to our communications, or otherwise interact with us.

This Privacy Policy applies to personal information collected through:

Our website at www.aligngrowthglobal.com (the “Site”)
Email communications and newsletters
Contact forms and inquiry submissions
Business development interactions
Community programs, events, and peer networking activities
Testimonials and case study participation

This Privacy Policy does not apply to personal information we process on behalf of our clients in the course of providing consulting services (such as client customer data or proprietary business information). Such processing is governed by our Master Services Agreement and applicable data protection addendum with each client.

2. Data Controllers

AGG operates through two legal entities that act as joint data controllers:

For users in the United States:

Align Growth Global, Inc.

Delaware, USA (To be updated)

For users in the United Kingdom and European Economic Area:

Align Marketing & Sales Ltd

Company Number: 16314720

VAT Number: GB 497 3328 50

Align Marketing & Sales Ltd is registered in England and Wales as Align Marketing & Sales Ltd.

Registered Office: 82 Station Road, Bishops Cleeve, Cheltenham, GL52 8HJ, England. United Kingdom.

Both entities have established arrangements to ensure consistent data protection practices and to enable you to exercise your rights effectively.

3. Privacy Contact

For any questions about this Privacy Policy or to exercise your data protection rights, please contact:

Data Protection Contact: William Cordis

Email: hello@aligngrowthglobal.com

Address: [To Update]

4. Information We Collect

We collect only the personal information necessary for the purposes described in this Privacy Policy. We regularly review our data collection practices to ensure we are not collecting more information than required.

4.1 Information You Provide

We collect information you voluntarily provide when you:

Category	Data Types	When Collected
Contact Information	Name, email address, phone number, company name, job title	Contact form submissions, newsletter signup, meeting requests
Communication Content	Messages, inquiries, feedback	Contact forms, email correspondence
Professional Information	Company details, role, industry, business challenges	Discovery calls, qualification conversations
Event Information	Registration details, attendance records	Webinars, workshops, events
Testimonials and Case Studies	Name, company, role, quotes, outcome metrics (with consent)	Case study interviews, testimonial requests

Information from Clients: If you are a client participating in our subscription services, we may collect additional information in connection with community features and events as described in Section 8.

4.2 Information Collected Automatically

When you visit our Site, we automatically collect certain information through cookies and similar technologies:

Category	Data Types	Purpose
Device Information	IP address, browser type, operating system, device identifiers	Site functionality, security, analytics
Usage Information	Pages viewed, time spent, click patterns, referring URL	Analytics, site improvement
Location Information	General geographic location (derived from IP address)	Analytics, content relevance

4.3 Information from Third Parties

We may receive information about you from:

Publicly available sources: Company websites, LinkedIn, and other professional networks
Business partners: Referral sources who introduce potential clients
Service providers: Data enrichment services that supplement business contact information

5. How We Use Your Information

We use your personal information for the following purposes:

Purpose	Legal Basis (UK/EU)	Description
Respond to inquiries	Legitimate interest	Reply to your questions and requests submitted through our Site
Marketing to prospective clients	Consent	Send newsletters, insights, and promotional content to individuals who have not engaged our services (requires opt-in)
Communications to existing clients	Legitimate interest (soft opt-in)	Send service-related updates, relevant insights, and information about similar services to clients with an existing relationship
Joint events and co-marketing	Consent	Share information with co-sponsors when you register for co-branded events or content
Client services	Contract	Deliver subscription services including community features, introductions, and events
Testimonials and case studies	Consent	Publish client success stories and quotes with explicit permission
Benchmarking and insights	Legitimate interest	Create aggregated, anonymized benchmarks and insights from engagement data
Site operation	Legitimate interest	Maintain, improve, and secure our Site
Analytics	Legitimate interest; Consent (cookies)	Understand how visitors use our Site to improve content and user experience
Legal compliance	Legal obligation	Comply with applicable laws, regulations, and legal processes
Contract performance	Contract	Where you become a client, perform our contractual obligations

Our commitment on client communications: We interpret the soft opt-in exception narrowly. Communications to existing clients will be limited to: (a) information directly relevant to services you have engaged or expressed interest in, (b) insights and content related to challenges you are actively addressing with us, and (c) information about similar AGG services that may benefit you. We will not use an existing client relationship as grounds for general marketing unrelated to your engagement. Every communication includes a clear, single-click opt-out mechanism.

Your Right to Object: Where we process your personal information based on legitimate interest (as indicated in the table above), you have the right to object at any time. If you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. To exercise your right to object, contact us at [EMAIL] or notify your AGG engagement partner.

Legitimate Interest Assessment: Where we rely on legitimate interest as a legal basis, we have conducted assessments to ensure our interests do not override your fundamental rights and freedoms. You may request information about these assessments by contacting us.

Automated Decision-Making: We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. Any lead scoring or segmentation in our systems is used only to prioritize our own outreach efforts and does not affect your rights or access to our services.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They help websites function, improve user experience, and provide information to site owners.

6.2 Cookies We Use

Cookie Type	Purpose	Duration	Consent Required
Strictly Necessary	Essential for Site functionality, security, and accessibility	Session or persistent	No
Analytics	Help us understand how visitors use our Site (pages viewed, time spent, navigation paths)	Up to 2 years	Yes
Functional	Remember your preferences (language, region)	Up to 1 year	Yes
Marketing	Track effectiveness of our marketing and provide relevant content	Up to 2 years	Yes

6.3 Third-Party Cookies

Our Site uses services from third parties that may set cookies:

Provider	Purpose	Privacy Policy
Google Analytics	Website analytics and performance measurement	https://policies.google.com/privacy
HubSpot	Marketing automation, analytics, and CRM	https://legal.hubspot.com/privacy-policy

6.4 Managing Cookies

When you first visit our Site, you will be presented with a cookie consent banner. Non-essential cookies (analytics and functionality) are disabled by default and will not be placed on your device unless you actively choose to accept them.

You may:

Accept all cookies to enable all cookie categories
Use category settings to enable only specific types of cookies
Decline all to reject non-essential cookies entirely

You can change your preferences at any time using the “Cookie Settings” link available in the footer of our Site.

Browser and opt-out tools:

Browser settings: Most browsers allow you to refuse or delete cookies through settings
Opt-out tools: Google Analytics: https://tools.google.com/dlpage/gaoptout

Note that refusing certain cookies may affect Site functionality, such as remembering your preferences.

7. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

7.1 Service Providers

We share information with third-party service providers who process data on our behalf. These providers are contractually obligated to use your information only for the purposes of providing services to us and to maintain appropriate security measures.

Provider	Services	Location	Safeguards
HubSpot, Inc.	CRM, email marketing, website hosting	United States	EU-US Data Privacy Framework; Standard Contractual Clauses
Google LLC	Website analytics, cloud storage, video conferencing	United States	EU-US Data Privacy Framework; Standard Contractual Clauses

We will update this list when we add new service providers. Material changes will be reflected in the “Last Updated” date at the top of this policy.

7.2 Contractors and Consultants

We engage individual contractors and consultants (including experts engaged through our Expert in Residence program) who may access personal information as necessary to perform services on our behalf. These individuals are bound by confidentiality obligations and are required to process personal information only in accordance with our instructions and applicable data protection laws.

7.3 Co-Marketing and Event Partners

We occasionally collaborate with third-party organizations on joint events, webinars, content, or marketing initiatives. When you register for or participate in a co-branded event or download co-branded content, your information may be shared with the co-sponsoring organization as a joint controller.

In such cases:

The registration or download form will identify all parties who will receive your information
Each party’s use of your information is governed by their respective privacy policy
You may receive communications from the co-sponsoring organization based on their legitimate interests or with your consent, as applicable

If you do not wish your information to be shared with a co-sponsor, please do not register for co-branded events or download co-branded content.

7.4 Professional Advisors

We may share information with our legal, accounting, and other professional advisors as necessary for their services.

7.5 Legal Requirements

We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to:

Comply with legal obligations
Protect our rights or property
Prevent fraud or security issues
Protect the safety of any person

7.6 Business Transfers

If AGG is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in data controller.

7.7 With Your Consent

We may share your information for other purposes with your explicit consent.

8. Client Community and Subscription Services

If you are a client of AGG, our subscription services may include community features, events, and networking opportunities that involve specific data processing activities. This section describes how we handle personal information in connection with these services. Not all features described below may be available at any given time; we will update this policy as our service offerings evolve.

8.1 Peer Networking and Introductions

Our subscription services may include facilitated introductions to other AGG clients, ecosystem partners, or service providers. We treat introductions as valuable connections that should benefit all parties, not routine data sharing.

How introductions work:

Before facilitating any introduction, we will describe the proposed connection and obtain your confirmation before sharing your contact information
We will not share your information with third parties for introduction purposes without your prior approval
You may provide standing consent for introductions within defined categories (e.g., “introduce me to relevant technology partners without asking each time”), which you can modify or revoke at any time
You may opt out of receiving introduction offers entirely by notifying your AGG engagement partner

If you have not provided standing consent for a category, we will seek your approval for each specific introduction before sharing any information.

8.2 Events and Community Sessions

We may host events, workshops, webinars, or community sessions for clients and invited participants. When you participate:

Your name, company, and role may be visible to other participants
Sessions may be recorded (you will be notified in advance if recording occurs)
Attendance and participation data is retained for program administration

If an event is co-hosted with third parties, your registration information may be shared with co-hosts as disclosed at registration.

8.3 Testimonials and Case Studies

We may invite you to participate in case studies or provide testimonials about your experience with AGG. Participation is entirely voluntary and requires your explicit consent. Before publication, we will:

Provide you with the proposed content for review and approval
Obtain your written consent for specific uses
Honor any restrictions you request

You may withdraw consent for future use of testimonials at any time by contacting us.

8.4 Benchmarking and Aggregated Insights

We may analyze engagement data across our client base to develop benchmarks and insights. This analysis uses aggregated and anonymized data that does not identify individual clients without explicit consent.

If you prefer that your engagement data not be included in our benchmarking analysis, even in anonymized form, please notify your AGG engagement partner or contact us at [EMAIL]. We will exclude your data from future analyses.

8.5 Research Activities

Certain AGG services involve collecting information about third parties (such as your customers or prospects). When conducting such research on your behalf:

We act as a processor, and such data is governed by our Master Services Agreement
We do not use third-party data collected for one client for any other purpose

9. International Data Transfers

AGG operates in both the United States and United Kingdom. Your personal information may be transferred to and processed in countries other than your country of residence.

9.1 US-UK/EU Transfers

When we transfer personal information from the UK or EEA to the United States, we rely on:

EU-US Data Privacy Framework / UK Extension: For transfers to certified US organizations
Standard Contractual Clauses (SCCs): Commission-approved contractual terms that provide appropriate safeguards
UK International Data Transfer Agreement (IDTA): UK-specific transfer mechanism where applicable

9.2 Safeguards

We ensure that any international transfers are subject to appropriate safeguards as required by applicable data protection laws. You may request a copy of the relevant transfer mechanisms by contacting us.

10. Data Retention

We retain your personal information only as long as necessary for the purposes described in this Privacy Policy:

Data Category	Retention Period	Rationale
Website analytics	26 months	Industry standard for analytics data
Contact form submissions	2 years from last contact	Business development lifecycle
Newsletter subscribers	Until unsubscribe + 6 months	Compliance with unsubscribe requests
Prospective client data	2 years from last contact	Typical B2B consulting sales cycle
Marketing preferences	Duration of relationship + 2 years	Respect communication preferences
Event registration and attendance	1 year from event date	Program administration; longer if you opt into ongoing communications
Client engagement data	Duration of client relationship + 3 years	Contractual records and limitation period for potential claims
Testimonials and case studies	Until consent withdrawn	Marketing use with ongoing consent

Why these periods: Retention periods reflect: (a) typical business development cycles in B2B consulting, (b) legal requirements for financial and contractual records, (c) the limitation period for potential claims under applicable law (typically 6 years in the UK for contract claims, which informs our client engagement retention), and (d) your reasonable expectations based on your relationship with us. We delete data sooner when there is no legitimate reason to retain it, and we review our retention practices annually.

After the retention period, we securely delete or anonymize your information unless retention is required by law.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption of data in transit (TLS/SSL)
Access controls limiting who can access personal information
Regular security assessments of our systems and providers
Employee training on data protection
Incident response procedures

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

12. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

12.1 Rights for All Users

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information (subject to legal retention requirements)
Opt-out: Unsubscribe from marketing communications at any time

12.2 Additional Rights for UK and EEA Residents

Under the UK GDPR and EU GDPR, you also have the right to:

Restriction: Request restriction of processing in certain circumstances
Portability: Receive your data in a structured, machine-readable format
Object: Object to processing based on legitimate interests
Withdraw consent: Withdraw consent at any time (where processing is based on consent)
Lodge a complaint: File a complaint with a supervisory authority

UK Supervisory Authority:

Information Commissioner’s Office (ICO)

Website: https://ico.org.uk

Helpline: 0303 123 1113

EU Supervisory Authorities:

Contact details available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

12.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: hello@aligngrowthglobal.com

Address: Registered Office: 82 Station Road, Bishops Cleeve, Cheltenham, GL52 8HJ, England. United Kingdom.

We will respond to your request within one month (or as required by applicable law). We may need to verify your identity before processing your request.

13. Additional Information for California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide additional rights.

13.1 Categories of Information Collected

In the past 12 months, we have collected the following categories of personal information:

Identifiers (name, email, IP address)
Professional information (company, job title)
Internet activity (browsing history on our Site)

13.2 Your California Rights

Right to Know: Request disclosure of personal information collected, used, and disclosed
Right to Delete: Request deletion of personal information
Right to Correct: Request correction of inaccurate information
Right to Opt-Out: We do not sell or share personal information for cross-context behavioral advertising
Non-Discrimination: We will not discriminate against you for exercising your rights

13.3 Exercising Your Rights

California residents may submit requests by contacting us at [EMAIL]. We will verify your identity before processing your request.

14. Children’s Privacy

Our Site is not directed to children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete such information.

15. Links to Third-Party Sites

Our Site may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the updated policy on our Site with a new effective date
Sending email notification to subscribers (for material changes)

We encourage you to review this Privacy Policy periodically.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Data Protection Contact: William Cordis

Email: hello@aligngrowthglobal.com

Address: [To be updated]

For UK/EU data protection matters, you may also contact our UK entity:

Align Marketing & Sales Ltd

Registered address: 82 Station Road, Bishops Cleeve, Cheltenham, GL52 8HJ, England. United Kingdom.

Email: hello@aligngrowthglobal.com

END OF PRIVACY POLICY