GettingGrowth is my site, and I run it through my company. This page explains what the site collects about you, why, and what you can do about it.
Last updated: 21 October 2026
The short version
- If you sign up or write to me, I keep your email and what you sent, and use it only for that.
- If you buy a course, Stripe handles the payment, and this site never sees or stores your card details.
- With your consent, the site uses cookies to see which campaign brought you here and how the site is used (Straycy and Google Analytics).
- Without that consent, there are no tracking cookies, but the site still records an anonymous visit (more below).
- I don’t sell your data, and the site has no ad pixels.
Who is responsible
Digital Media Estonia OÜ (registry code 11697004), Narva mnt 7a, Tallinn, Estonia, is the controller of your personal data on gettinggrowth.com.
Email: hello@gettinggrowth.com
Newsletter and contact forms
The sign-up and contact forms run on Forminator, a WordPress plugin. The entries are stored in this site’s database.
- Newsletter: your email address, your name if you give it, which form you used (for example “footer”), and the campaign the visit came from if you’ve accepted marketing cookies. I use it to send the newsletter. The legal basis is your consent. Every email has an unsubscribe link. When you unsubscribe, the emails stop. To have your address deleted completely, email hello@gettinggrowth.com. Once the newsletter is running on Kit (Kit/ConvertKit LLC, USA), your address is stored there too.
- Free email course (Focus Sprint): your email address, which form you used, and the campaign the visit came from if you’ve accepted marketing cookies. I use it to send the five lessons, one a day, and then the newsletter. The legal basis is your consent. The lessons are sent through Kit (Kit/ConvertKit LLC, USA), so your address, and the campaign if you’ve accepted marketing cookies, is stored there too. Kit protects transfers from the EU under the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses. Every email has an unsubscribe link. When you unsubscribe, the emails stop and Kit keeps your address marked as unsubscribed, so you aren’t added again by mistake. To have it deleted completely, email hello@gettinggrowth.com.
- Contact form: your name, email, topic and message, so I can answer, and whether you ticked the box to get the newsletter. The legal basis is my legitimate interest in answering you (and your consent for the newsletter). I keep messages for 12 months after the conversation ends.
Each sign-up and message also comes to me as an email notification.
Course purchases (Stripe)
Paid courses, such as The Million-Dollar Landing Page, are paid on a checkout page run by Stripe (Stripe Payments Europe, Ltd., Ireland). You enter your name, email address, billing address (used for tax) and payment details there, directly with Stripe. This site never sees or stores your card details.
When you click a buy button, the site passes Stripe the campaign details from the page address (such as utm_source and utm_campaign) and, if you’ve accepted marketing cookies, Straycy’s visitor ID (see below), so I can see which campaign led to the sale. After you pay, Stripe sends you back to a thank-you page on this site with a reference to the payment. With your consent to analytics cookies, Google Analytics counts the purchase: the course, the amount and that reference, never your name or card details.
I use the purchase to give you access to the course, send your receipt and handle refunds. The legal basis is our contract. I keep purchase records for seven years, as Estonian accounting law requires. Stripe also uses payment data for its own purposes, such as fraud prevention, under its own privacy policy (opens in new tab).
Where your visit came from (Straycy)
I want to know which posts and campaigns bring sign-ups. For that the site uses Straycy, an attribution plugin for WordPress that I build myself.
It stores its data only in this site’s database and doesn’t send it to anyone. No ad platform connections are switched on.
With your consent to marketing cookies
Straycy sets these cookies:
| Cookie | What it holds | Kept for |
|---|---|---|
stry_attribution | The campaign parameters (utm_…), landing page and referrer of your first visit | 30 days |
stry_ads | Ad click IDs (such as gclid) if you arrived from an ad | 30 days |
stry_visitor_id | A random ID that links your visits | 1 year |
stry_pending_event | A one-time ID that stops a sign-up from being counted twice | Until the form is sent |
When you sign up, the campaign data is saved with your sign-up. The legal basis is your consent, which you can withdraw at any time (see “Cookies and your choices”).
Without that consent
Straycy sets no cookies. It still records an anonymous visit: the page you landed on, the referring site, the campaign parameters in the link, your device type and browser, and a one-way hash of your IP address made with a secret key that only this site has.
Your IP address itself is never stored.
If you later sign up, that visit is used to tell me which campaign the sign-up came from. Visits that don’t lead to a sign-up are deleted after 30 days.
The legal basis is my legitimate interest in knowing which content brings readers. You can object at any time by emailing me.
Analytics (Google Analytics)
With your consent to analytics cookies, the site uses Google Analytics 4, set up through Google’s Site Kit plugin, to count visits and see which pages are read.
It sets the cookies _ga and _ga_<ID> for up to 2 years. Google Analytics 4 doesn’t store your IP address. Analytics data is kept for 14 months.
Without your consent, Google Analytics doesn’t load at all.
The provider is Google Ireland Limited. Data can be transferred to Google LLC in the USA under the EU-US Data Privacy Framework. The legal basis is your consent.
Cookies and your choices
The cookie banner (CookieYes) asks for your consent before any non-essential cookie is set. It stores your choice in the cookie cookieyes-consent for 1 year and keeps a record of the choice, which the law asks me to be able to show.
You can change your mind at any time with “Cookie settings” at the bottom of every page.
The legal basis for the banner’s own cookie is my legal obligation to ask.
Hosting, delivery and embedded videos
- The site is hosted by Hostinger, on servers in the EU, and delivered through Cloudflare. Both process your IP address to deliver pages and protect the site from attacks. Cloudflare may set a short-lived security cookie (
__cf_bm, 30 minutes). - The contact form is protected from spam by Cloudflare Turnstile, which checks that a person is sending it. For that, Cloudflare processes your IP address and some information about your browser when you open the contact page. The legal basis is my legitimate interest in keeping spam out.
- Videos from YouTube are click-to-load: nothing is loaded from YouTube until you press play. After that, YouTube’s privacy policy applies.
Affiliate and sponsored links
Some links go through a short link on this site (/go/…) to a partner’s website. The site doesn’t pass your personal data to the partner. The partner’s own cookies and privacy policy apply once you’re on their site.
More on how this site makes money.
Your rights
You can ask me for a copy of your data, to correct or delete it, to limit how it’s used, or to receive it in a portable format. You can object to anything based on legitimate interest, and withdraw consent at any time.
Email hello@gettinggrowth.com. I’ll answer within one month.
If you think your data is mishandled, you can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee (opens in new tab)) or the authority in your own country.
Changes
When this policy changes, the date at the top changes with it.