Privacy Policy

CLINIC GROWTH DEPARTEMENT LTD, trading as GD Signal, is the controller for personal information we use to manage our business, enquiries and client relationships. Company number: 17201670. Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Privacy contact: yasmineteamwork@gmail.com.

• Enquiries: your name, business or creator profile, contact details, market, service interests, category preferences, references, optional budget and the information you choose to share.
• Client projects: business contacts, briefs, agreements, approvals, assets and project correspondence needed to deliver the agreed services.
• Invoices and payments: payer and billing details, invoice references, amounts and payment or refund status when an invoice is issued. This public site does not collect payment-card details or run a checkout.
• Website requests: technical information such as IP address, browser/device information, requested pages and security or error records processed by our hosting provider.
• Public professional information: where relevant to a business enquiry or proposal, business/creator profile details from the public website or social profile you provide. We do not buy personal lead lists through this website.

The form composes a message in your browser tab. Your entries are not submitted to a GD database or saved to cookies or local storage by our application. Opening WhatsApp passes the draft text to WhatsApp; opening email passes it to your email application. Those providers handle the draft under their own terms. GD receives the message only if you choose to send it.

Copying the brief writes it to your device clipboard. Do not include passwords, identity documents, customer lists, health information or card details. Fonts, images and video shown on this site are served with the website; we do not embed social feeds that receive your enquiry text.

• Responding to a person who asks about their own contract: steps requested before entering a contract, and performance of the contract once agreed.
• Business contact enquiries and managing client relationships: legitimate interests in communicating about our services, assessing a project and providing professional support.
• Delivering agreed client work, managing approvals and resolving issues: performance of a contract where the individual is the contracting party; legitimate interests for corporate client contacts.
• Accounting and legal records: compliance with legal obligations; legitimate interests in establishing, exercising or defending claims where applicable.
• Website delivery, security and preventing abuse: legitimate interests in operating and protecting the site.
• Optional marketing: only with the consent or other lawful permission required for the channel. Making an enquiry does not automatically subscribe you to a marketing list. Where we rely on consent, you can withdraw it at any time.

Vercel hosts the website and processes technical requests and security records. Google/Gmail handles our email correspondence, and WhatsApp/Meta handles conversations you choose to initiate there. Your own email or messaging provider also processes communications under its policies.

For an agreed project, necessary information may be shared with authorised contractors, selected suppliers and professional advisers who need it for that scope. Customer data is not given to manufacturers simply because a supplier is being researched. Any payment provider and the billing information it requires are identified when a company invoice is issued. Stripe is not embedded or collecting payments on this public site at this version.

We may disclose information where required by law, to comply with an authority's lawful request or to protect legal rights. We do not sell personal information.

Hosting, email and messaging services can involve processing outside the UK. We do not promise UK-only or EU-only storage. Each provider's privacy information explains its operations. For transfers that we control, we assess the relevant data protection requirements and use the required lawful transfer mechanism, such as an adequacy decision or appropriate contractual safeguards, before transferring the data. Contact us for information about a particular project or transfer arrangement.

• Enquiries that do not become a project: retained while the discussion is active and reviewed for deletion within 12 months of the last meaningful contact, unless a specific ongoing request or legal issue justifies longer retention.
• Agreements, invoices and financial records: kept for at least six years from the end of the company financial year they relate to, and longer if tax rules, an investigation or a legal hold require it.
• Working project files: kept for delivery, agreed support and handover, then reviewed for deletion or return when no longer needed. The SOW sets any client asset/archive period; we do not offer indefinite storage by default.
• Hosting/security records: retained for delivery, troubleshooting and security according to the provider's applicable controls, then deleted or rotated when no longer required. The period depends on the record and hosting service rather than a marketing profile.
• Backups or records subject to a legal claim can have a different deletion cycle. We minimise what remains and restrict its use.

Depending on the applicable law and the basis for processing, you may request access, correction, erasure, restriction or portability of your information. You may withdraw consent where consent is the basis, without affecting lawful earlier use.

You have the right to object to processing based on legitimate interests, and an unconditional right to object to direct marketing. Email yasmineteamwork@gmail.com to exercise these rights. We may need proportionate information to verify a request and normally respond within one month, subject to lawful extensions or exceptions.

You can complain to the UK Information Commissioner's Office at Information Commissioner’s Office ↗ or to your relevant supervisory authority. Please contact us if you would like us to investigate first; you do not have to do so before complaining.

This notice covers our own controller activity. If we operate a client's customer-support or ecommerce systems as a processor, the client's privacy notice and a separate data processing agreement govern those instructions. We agree scope, access, safeguards and deletion/return before receiving customer datasets.

We use proportionate access and security measures for the information handled. No system is risk-free, and no data-residency or certification badge is claimed here. We do not use this site's enquiry form to make automated decisions with legal or similarly significant effects.

The date on this page identifies this version. If we introduce new enquiry storage, tracking, payment tools or materially different processing, we update this notice and give any additional information or choices required. Ask our privacy contact about any part of the policy.