How GroYo.co handles your data.
Written in plain English, because a privacy policy nobody can read isn't really a privacy policy.
The short version. GroYo.co doesn't set any cookies, doesn't track you around the internet, and doesn't sell or share your details with anyone. The only personal data collected is what you deliberately type into the sign-up form, or send in an email, a WhatsApp message or a phone call.
If you'd like that data removed at any point, email Leigh@Groyo.co and it will be deleted. No forms, no friction.
Who is responsible for your data
GroYo.co is a sole trader business based in the United Kingdom, and is the data controller for any personal data collected through this website. You can reach the business at Leigh@Groyo.co.
What is collected, and why
If you sign up for updates
The sign-up form asks for your first name, your email address, optionally your company, and which topics you're most interested in. It also records that you ticked the consent box, the wording you agreed to, and the time you agreed to it.
Why: to send you occasional emails, and to keep a record showing you asked for them. Lawful basis: your consent, which you can withdraw at any time.
If you get in touch
If you email, message on WhatsApp or call, whatever you choose to tell me is held in the ordinary way — an inbox, a phone, a message thread.
Why: to reply to you and, where relevant, to carry out work you've asked for. Lawful basis: legitimate interests, or the performance of a contract if we're working together.
If you refer a friend
The Refer a mate button opens WhatsApp on your own phone with a ready-written message. You choose who to send it to, and nothing about your friend is collected by this website. Your friend is never contacted by GroYo – they get in touch only if they want to.
If your friend mentions you, I keep a note of your name and how to reach you, and, when a reward is due, the details needed to pay you and your choice of charity. Why: to credit and pay your referral reward. Lawful basis: legitimate interests, and the performance of the referral terms below. These details are kept only as long as needed to pay the reward and to meet accounting record-keeping rules.
When you simply visit a page
The website is hosted by Netlify, which keeps standard server logs — your IP address, browser type, which page was requested and when. These are generated automatically by the hosting infrastructure and are used to keep the site running and secure.
Lawful basis: legitimate interests in operating a functioning, secure website.
Cookies
This site sets no cookies of its own. There is no advertising technology on it, no tracking pixels and no cross-site tracking. If analytics is added in future, a privacy-first, cookieless tool will be used and this page will be updated before it goes live.
Third parties that may see something
- Netlify hosts the website. Your IP address reaches their servers whenever you load a page, and any sign-up form submission is stored in your Netlify account area. See the Netlify privacy policy.
- Google Fonts serves the typefaces used on the site. Loading a page requests those font files from Google's servers, which means your IP address is visible to Google at that moment. See the Google privacy policy.
- Unsplash serves some of the photography. Those images load from Unsplash's servers, so your IP address is visible to them too. See the Unsplash privacy policy.
Nothing is sold, rented or passed to advertisers, and no profile is built about you.
How long things are kept
- Sign-up details: until you unsubscribe or ask for removal, and then deleted.
- Emails and messages: kept while there's a live conversation or relationship, and reviewed periodically after that.
- Server logs: retained by Netlify under their own retention schedule, typically a short rolling window.
Your rights
Under UK GDPR you have the right to ask what data is held about you, to have it corrected, to have it deleted, to restrict or object to how it's used, and to receive a copy in a portable format. Where processing relies on consent, you can withdraw that consent at any time — every email carries a one-click unsubscribe link.
To exercise any of these, email Leigh@Groyo.co. There's no charge, and you'll get a reply within 30 days — usually far sooner.
If you're not happy
Please raise it directly first — it will get sorted. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk.
Refer a mate: the terms
- Who can refer: anyone. The business you refer must be based in Berkshire and new to GroYo.
- Getting credited: your friend needs to mention your name when they first get in touch, so the referral can be matched to you.
- Your rewards: once your friend’s project is completed and paid in full, you receive £50 cash, and 10% of the project fees is donated to a UK-registered charity of your choice.
- Deposits: every project starts with a 50% deposit to secure the time and resource. Rewards are not paid on deposits – only on completed, fully paid projects. If a project is cancelled or refunded, no reward is due.
- Limits: one reward per referred business, and no limit on how many businesses you refer.
- Changes: GroYo may change or end the scheme at any time. Referrals already made before a change will still be honoured.
Changes to this policy
If how this site handles data changes, this page changes with it, and the date below is updated.
Last updated: 21 September 2026