Privacy
Who sees what, and what we never do with it.
Written for this instrument rather than adapted from a general policy, because the thing that matters here is unusual: companies give us data about themselves, and institutions pay for a view of it. That relationship needs stating plainly.
Last updated 7 August 2026 · pending legal review
1. Who we are
The Growth Score is published and operated by Closing Foundry Ltd, registered in England and Wales, company number 14629519. We are the data controller for assessment data.
Contact: privacy contact address to add. ICO registration: number to add.
2. What we collect
| From whom | What | Why |
|---|---|---|
| A company completing the assessment | Answers to the questions, company name, sector, revenue band, business contact name and email | To produce the result and send it to them |
| An institution inviting a cohort | Business contact details for the companies it wants to invite | To send invitations and reminders on its behalf |
| Anyone visiting this site | analytics position to confirm | to confirm |
We do not ask for financial records, customer data, or anything from a data room. The assessment is what the company reports about how it operates.
Lawful basis. Consent for the assessment itself, given at completion. Legitimate interests for operating and improving the instrument. Where an institution provides contact details to invite a cohort, that institution is the controller of those contact details and we process them on its instructions.
3. Who sees what
This is the section that matters, so it is set out in full.
| Party | Sees | Does not see |
|---|---|---|
| The company measured | Its own full result, permanently, free of charge, whether or not it ever speaks to anyone else | Any other company's result |
| An institution licensing the reporting | Aggregate reporting for its own cohort, and per-company results only where that company has consented | Anything about companies outside its cohort. Individual results where consent was not given |
| A support provider a company is routed to | Only what the company chooses to share when it accepts the routing | The result, unless the company shares it |
| Anyone using the verification endpoint | Whether a result reference is valid, its method version, the date taken, whether it is current, and its evidence level | The score. The company name. Any answer |
Every company is told, before anything is shared, exactly what will be shared and with whom.
4. What we never do
- We do not sell, broker, rent or trade company data. Not to advertisers, not to data platforms, not to anyone
- We do not share a company's result with an institution without that company's consent
- We do not use the Growth Score as, or supply it for use as, a credit, lending, affordability, pricing or eligibility decision
- We do not charge a company, at any point, for the assessment or its result
- We do not take payment that influences a score. Where a support provider pays to appear in a routing directory, that payment affects only which provider appears within a category the diagnosis has already indicated, never the diagnosis itself. Providers we own or are affiliated with are disclosed as such
- We do not use a generative model anywhere in the scoring path. The score is calculated, not written
5. Keeping it, and where
| Assessment results | Kept so a company can retake and see movement over time. Deleted on request. retention period to confirm |
| Contact details supplied by an institution | Returned or deleted within 60 days of that agreement ending, on request |
| Hosting | region to confirm |
| Sub-processors | list to add. We give 30 days' notice of any addition |
| Aggregate and anonymised data | Kept indefinitely and used to develop the instrument. It never identifies a company or an individual |
6. Your rights
Under UK data protection law you may ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, or to have it sent elsewhere. Where we rely on consent, you may withdraw it at any time.
Ask at contact address to add and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.
7. Cookies
cookie position to confirm before launch. This site loads a web font from Google Fonts, which involves a request to Google's servers.
8. Changes
If we change this policy materially we will say so here with a new date, and tell institutions with a live agreement in advance.