Skip to main content
GrowthSpark Consulting
Legal

Privacy Policy

What we collect when you use this website, why we collect it, who processes it on our behalf, and how to reach us about it.

Last updated September 1, 2026

This policy explains how GrowthSpark Consulting Private Limited ("GrowthSpark", "we", "us") handles personal information collected through this website. It covers this website only — not any separate platform or service we may operate under an individual agreement with a client.

1. Who we are

GrowthSpark Consulting Private Limited is a digital growth consultancy based in Indore, M.P., India. We are responsible for the personal information described in this policy.

You can reach us about anything in this policy by email at growth@growthsparkconsultants.com or by phone at +91-8595138817.

2. Information you give us

We only collect information you actively type into a form on this site. There are three such forms, and each collects a different set of fields.

The contact form collects:

  • Your full name (required)
  • Your email address (required)
  • Your message (required)
  • Your company name (optional)
  • Your phone number (optional)

The Free SEO Audit request form collects:

  • Your full name (required)
  • Your email address (required)
  • The website address you want reviewed (required)
  • Your company name (optional)
  • Your phone number (optional)
  • Any additional context you choose to add (optional)

The newsletter signup collects your email address, and nothing else.

We do not operate user accounts on this website, so we never ask you to create a password. We do not ask for, and have no way to receive, payment card details through this site.

3. Information collected automatically

When you first arrive on the site, your browser stores a small record of how you got here, under the key gs_attribution in your browser's local storage. It contains:

  • Campaign tags present in the link you arrived through (utm_source, utm_medium, utm_campaign, utm_term and utm_content)
  • The address of the page that referred you, if your browser sent one
  • The path of the first page you landed on
  • The date and time this was recorded

This record is written once and never overwritten, so it reflects the campaign that originally brought you to the site. It stays in your browser and is only ever transmitted to us if you go on to submit one of the forms above, at which point it is saved alongside your enquiry so we can tell which marketing efforts are working. You can erase it at any time by clearing your browser's site data.

When you submit a form, our server reads your IP address from the request in order to apply a submission rate limit and to reject automated abuse. This is held in server memory only, for a rolling ten-minute window, and is discarded when that window passes or the server restarts. Your IP address is never written to our database and is never included in the notification email our team receives.

Our forms also carry a hidden field that a human visitor never sees or fills in, and we measure how long a form was on screen before it was submitted. Both are used solely to identify automated spam submissions.

4. Cookies and analytics

This site sets no cookies of its own. The attribution record described above uses your browser's local storage rather than a cookie, and it is not shared with any third party.

We use the following third-party measurement tools, which set their own cookies and collect usage data under their own privacy policies:

  • Google Analytics 4 and Google Tag Manager (Google LLC) — aggregate traffic and page-view measurement
  • Microsoft Clarity (Microsoft Corporation) — usage analytics including heatmaps and session replay, which records interactions such as clicks, scrolling and mouse movement on the pages you visit

These scripts load only after the page has become interactive, and each one runs only if it has been configured for this site. If you would prefer to block them, browser privacy settings and tracker-blocking extensions are effective against all of them.

5. Why we use your information

  • To reply to an enquiry you have sent us
  • To prepare and deliver an SEO audit you have requested
  • To send you our newsletter, if you asked for it
  • To understand which marketing channels bring people to this site
  • To detect and block spam and automated abuse of our forms

We do not sell your personal information. We do not share it with advertisers, we do not use it to build advertising profiles, and we do not use it for automated decision-making that produces legal effects for you.

6. Who processes it on our behalf

We use a small number of service providers to run this website. Each handles your information only in order to provide their service to us:

  • Supabase — hosts the database where form submissions and newsletter signups are stored
  • Resend — delivers the internal notification email that tells our team a new enquiry has arrived
  • Google LLC and Microsoft Corporation — provide the measurement tools listed in section 4

Some of these providers operate infrastructure outside India, which means your information may be stored or processed outside the country. We may also disclose information where we are legally required to do so, or where it is necessary to establish or defend a legal claim.

7. How long we keep it

We keep enquiry and audit-request records for as long as we need them to respond to you and to maintain a record of our business correspondence. Newsletter records are kept until you ask to be removed. If you would like your information deleted sooner, write to us at the address in section 9 and we will action it.

8. How we protect it

  • The site is served over HTTPS, so what you type into a form is encrypted in transit
  • Our database tables have row-level security enabled and are written to only by our server, never directly by your browser
  • The credentials that allow database writes are held server-side and are never included in the code sent to your browser
  • Form submissions are rate-limited per IP address to limit abuse

No website can promise perfect security, but we do not collect payment details or passwords here, which keeps the impact of any incident limited to the contact details you chose to send us.

9. Your choices and rights

You can ask us to give you a copy of the personal information we hold about you, correct anything inaccurate, delete it, or withdraw consent you previously gave. To do any of these, email us at growth@growthsparkconsultants.com and tell us what you would like us to do.

To stop receiving our newsletter, email us at growth@growthsparkconsultants.com asking to be unsubscribed, and we will remove you from the list.

If you are not satisfied with how we have handled a request, you have the right to raise the matter with the relevant data protection authority in your jurisdiction.

10. Children

This website is aimed at businesses and the people who run them. It is not directed at children, and we do not knowingly collect personal information from anyone under the age of 18. If you believe a child has sent us information, contact us and we will delete it.

11. Changes to this policy

If we change how we handle personal information, we will update this page and revise the date shown at the top. Material changes will be reflected here before they take effect.

12. How to contact us

Write to growth@growthsparkconsultants.com, call +91-8595138817, or reach us at Indore, M.P., India. We aim to respond to privacy requests promptly.