1. Who we are
GrowthX20 is operated by Oxions LTD, a UK business. Oxions LTD decides how the personal information described in this policy is used.
Business address: 27 Old Gloucester Street, London WC1N 3AX, United Kingdom.
2. Information we collect
Depending on how you use the site or work with us, we may handle:
- Enquiry details: name, work email, optional phone number, brand name, Amazon storefront or product link, marketplace, approximate monthly revenue, parent-ASIN count, services of interest, challenge description, form submission time and the page from which you submitted the form.
- Booking details you provide through Calendly when choosing a meeting time.
- Technical information needed to deliver and protect the site, such as IP address, browser and device information, requested pages, referral information and security logs held by our hosting provider.
- Client Amazon account and product information shared through Amazon user permissions for the agreed engagement.
When you continue after the first form step, we save your name, work email, acknowledgement of the Terms of Service and Privacy Policy, and the page and form you used. If you leave before completing the remaining questions, we retain those details so we can respond to your account-review request. If you continue, we add the Amazon and service details you provide. Form enquiries are stored in a Google Sheet managed by Oxions LTD. We do not ask for Seller Central passwords or security codes through this site.
3. How we use information
We use enquiry details to respond to your request, prepare for and conduct an account-review call, assess service fit and follow up about that enquiry. We use client information to provide the agreed services, and technical information to operate, secure and troubleshoot the site.
We do not use enquiry details for unrelated promotional email or text messages. If that changes, we will provide any notice and choice required by law.
4. Legal bases
Where UK GDPR applies, we rely on the basis appropriate to each purpose: taking steps at your request before a contract when responding to an enquiry or account-review request; performing a contract when delivering agreed services; legitimate interests in operating, securing and administering our business, where those interests are not overridden by your rights; and legal obligation where records must be kept or information disclosed by law. We rely on consent where the law requires it, including for optional marketing if introduced.
7. Client account data
Amazon account data shared through user permissions is used for the relevant client engagement and handled confidentially. Access is limited to people who need it for the agreed work. We do not ask for Seller Central passwords. At the end of an engagement, client data is returned or removed when no longer needed, subject to legal obligations, security needs and routine backup cycles.
8. Retention
We normally keep enquiry records for up to 12 months after our last contact with you, unless you become a client, ask us to keep the details longer, or we need them to establish or defend a legal claim. Client delivery information is kept for the engagement and normally deleted or anonymised within 90 days after completion or handover, subject to legal, security and backup requirements. Company accounting records are kept for the period required by law.
We review information periodically and retain it only for as long as there is a relevant business or legal need.
9. Security
We use reasonable technical and organisational safeguards suited to the information and services involved, including access controls and secure provider services. No method of transmission or storage can be guaranteed completely secure.
10. Your rights
Depending on the law that applies, you may have the right to request access to, correction of, deletion of or restriction of your personal information; object to certain processing; request a portable copy; or withdraw consent where processing relies on consent. You may also object to direct marketing.
We do not sell personal information. To make a privacy request, use our contact form and select the closest relevant option or describe your request. You may also complain to the UK Information Commissioner’s Office or your local data-protection authority.
11. International transfers
Because our service providers operate internationally, information may be processed outside the UK or the country where you are located. Where data-protection law restricts a transfer, we will use a permitted transfer mechanism, such as an applicable adequacy decision or approved contractual safeguards, and take any additional steps required by law.
12. Children
This site and our services are intended for business users and are not directed to children under 16. We do not knowingly seek to collect children’s personal information.
13. Changes and contact
We may update this policy as the site, services or legal requirements change. We will revise the “Last updated” date when we publish a new version.
For privacy questions or rights requests, use the GrowthX20 contact form or write to Oxions LTD, 27 Old Gloucester Street, London WC1N 3AX, United Kingdom.