Privacy

Who sees what, how long we keep it, and what we do not use it for.

This policy explains how Closing Foundry collects, uses, shares and retains data connected with Growth Score. It distinguishes company assessment data, institution-supplied contact data and messages sent through the contact form.

Last updated: 7 August 2026. Status: pending legal review.

1. Who we are

Growth Score is a measurement standard published and operated by Closing Foundry Ltd, registered in England and Wales, company number 14629519. Closing Foundry Ltd is the data controller for the assessment data described in this policy, subject to the controller and processor arrangements set out below.

Privacy contact: to be confirmed. ICO registration number: to be confirmed, or state why registration is not required.

2. What we collect

Source Data collected Purpose
Company completing the assessmentAnswers to the instrument, company name, sector, revenue band, business contact name and emailaddress To calculate the company's result and send it to the company
Institution inviting a cohortBusiness contact details for companies it asks us to contactTo send invitations and reminders under the institution's instructions
Person using the contact formName, organisation, email address and information supplied in the messageTo respond to the enquiry. The form sends the message to Closing Foundry through Web3Forms; the message is not stored by this site
Site visitor Analytics and cookie data:to be confirmed Purpose, lawful basis and retention:to be confirmed before publication

Growth Score does not require financial records, customer data or access to a data room. The assessment records the company's own account of how it operates.

Lawful bases. The assessment is based on consent given when the company completes it. Closing Foundry relies on legitimate interests when it operates and improves the instrument, where that basis applies. Where an institution supplies contact details for cohort invitations, the controller and processor responsibilities must be documented and followed for that activity.

3. Who sees what

The table below explains what each party can see and what remains unavailable to it.

WhoWhat they can seeWhat they cannot see
Company completing the assessmentIts own full result, free of charge, for as long as the published retention policy permitsAny other company's result
Institution licensing reportingAggregate reporting for its own cohort. Per-company results only where the company has given the required consent Resultsabout companies outside its cohort, or individual results where the company has not consented to that sharing
Support provider engaged by a companyOnly the information the company chooses to share when it accepts the indicated support routeThe company's result, unless the company shares it
Person checkinga result reference If the verification service is deployed, the reference's validity, method version, date taken, current status and evidence levelThe score, company name and answers, unless a separate share expressly provides them

Before a result is shared, the company is told what will be shared, with whom and for what purpose.

4. What we do not do with company data

  • We do not sell, broker, rent or trade company data.
  • We do not share a company's result with an institution unless the company has consented to that sharing.
  • Growth Score is not used, and must not be supplied for use, as a credit, lending, affordability, pricing, insurance, eligibility or employment decision.
  • The assessment and the result are free to the company. No charge is made at any stage.
  • Payment does not alter a score or the indicated constraint. If a support provider pays to appear in a routing directory, that payment can affect which provider is listed within a category already indicated by the result. Closing Foundry and affiliated providers are identified as such.
  • No generative model is used in the scoring calculation for method v1.4. The score is calculated from the published rules.

5. How long we keep data and where it is processed

Data categoryRetention and processing position
Assessment resultsRetained so a company can retake the assessment and review movement over time. Deleted on request, subject to applicable legal or contractual retention duties. Retention period: to be confirmed.
Contact details supplied by an institutionReturned or deleted within 60 days after the relevant agreement ends, unless a longer period is required by law or agreed in writing.
Hostinglocation and processing region To be confirmed before publication.
Sub-processorsWeb3Forms sends contact-form messages to Closing Foundry by email. The contact-form data is not stored by this site. Other sub-processors used by the instrument, their purposes and any notice arrangements must be listed before publication.
Aggregate and anonymised dataMay be retained for instrument development and aggregate reporting. It must not identify a company or an individual.

6. Your rights

Under UK data protection law, you may ask us for a copy of your personal data, to correct or delete it, to restrict or object to its use, or, where the right applies, to have it transferred elsewhere. Where we rely on consent, you may withdraw that consent at any time.

To exercise a right, contact the privacy address published above. We will respond within the period required by applicable law. If you are not satisfied with our response, you may complain to the Information Commissioner's Office at ico.org.uk.

7. Cookies and third-party requests

Cookie and analytics position: to be confirmed before publication. The site currently loads a web font from Google Fonts, which may send a request to Google's servers. Confirm whether the font, analytics and any other third-party requests require a cookie notice or consent mechanism.

8. Changes to this policy

We will record material changes to this policy here with a new effective date. Where an institution has a live agreement, we will notify it in accordance with that agreement.