Last updated 4 November 2026
Analytigrow is a sole-trader consultancy operated by Ghazanfar, based in Punjab, Pakistan. For anything in this policy, contact [email protected]. Analytigrow is the data controller for the personal data described here.
Audit and contact forms: name, email, WhatsApp number if you give it, your site URL, platform, ad spend range and anything you write in the message. I use this to reply to you and to carry out the audit you asked for. Legal basis: steps prior to entering a contract (GDPR Art. 6(1)(b)), and legitimate interest in responding to enquiries (Art. 6(1)(f)).
Free tool reports: the site URL you enter and the email you provide to receive the full report. Legal basis: performance of the service you requested (Art. 6(1)(b)). You will also be offered a tick box to receive occasional emails about tracking; that is consent (Art. 6(1)(a)) and you can withdraw it from any email.
Analytics and advertising: with your consent, GA4 and the Meta Pixel collect page views, approximate location, device and browser, and the pages that led to an audit request. Legal basis: consent (Art. 6(1)(a)), obtained through the cookie banner. If you decline, Google receives only cookieless, non-identifying pings through Consent Mode and Meta receives nothing.
Server logs: the hosting provider and Cloudflare record IP address, user agent and request time for security. Legal basis: legitimate interest in keeping the site running and secure (Art. 6(1)(f)).
Cookies and similar technologies are described in the cookie policy, which lists each one, who sets it, and how long it lasts. Non-essential cookies load only after you accept them in the banner.
Google LLC (GA4, Google Tag Manager, Google Ads), Meta Platforms Ireland Ltd (Meta Pixel and Conversions API), Stape Inc (server-side tagging on a first-party subdomain, so your browser talks to this site’s domain rather than directly to Google or Meta), Cloudflare Inc (DNS, CDN and security), the web host, and the email provider used for the contact form and the newsletter. Each is bound by a data processing agreement. Google and Meta may transfer data to the United States under the EU-US Data Privacy Framework or standard contractual clauses.
Enquiry and audit data: for the duration of our work together and 24 months after the last contact, in case you come back. Tool report emails: until you unsubscribe or 24 months of inactivity. GA4 data: 14 months, the property’s retention setting. Server logs: 30 days. If we sign a contract, I keep the records I need for accounting for as long as the law requires.
Under the GDPR and UK GDPR you can ask for a copy of your data, ask me to correct or delete it, restrict or object to processing, and receive it in a portable format. You can withdraw consent at any time; this does not affect processing that happened before. Email [email protected] and I will respond within one month. You can also complain to your local supervisory authority: in the UK that is the ICO, in the EU your national data protection authority.
I am based in Pakistan, which does not have an EU adequacy decision. Your data is therefore processed outside the EEA and UK. The safeguards are standard contractual clauses in my agreements with processors, and the technical measures described in the cookie policy. If you would rather not have your data processed this way, do not submit the forms and decline cookies in the banner.
If this policy changes in a way that affects you, the date at the top changes and, where I have your email, I will tell you.