Growth & Search


Privacy & Data Protection


Privacy Policy


Growth & Search Strategic Operating System


Operated by Risk Management Recruiters Pty Ltd
ABN 23 089 022 999


Effective Date: 12 October 2026


Privacy in Plain English


Growth & Search is designed to help businesses understand their operating position,
establish clearer priorities and take more focused action. To do this, we need to
collect and process certain business and personal information.

✓ We use information to provide and improve the Growth & Search Platform.

✓ We do not sell your personal or business information.

✓ AI may assist with analysis, prioritisation, reporting and operating guidance.

✓ Business leaders retain judgement, ownership and responsibility for decisions.

✓ Information may be processed by trusted technology providers in other countries.

✓ We apply reasonable safeguards designed to protect information.


1. About This Privacy Policy

This Privacy Policy explains how Risk Management Recruiters Pty Ltd,
trading as Growth & Search (“Growth & Search”, “we”, “us” or “our”),
collects, holds, uses, processes, discloses and protects information
provided through the Growth & Search website and Strategic Operating System.

It applies to information collected through the Growth & Search website,
Strategic Clarity & Readiness Check, Annual Business Licence,
Operating Practices Reviews, Operating Assessments, Digital & Operational
Readiness activities, Operating System Assistant, Strategic Operating Review
Reports and related services and functionality.

Growth & Search is operated from Australia and is initially being made
available to users in Australia and the United Kingdom.

We seek to handle personal information consistently with applicable Australian
privacy requirements and, where applicable, United Kingdom data protection
requirements.


2. Personal and Business Information

Growth & Search primarily operates as a business-to-business platform.
Much of the information submitted to the Platform relates to a business,
its operations, priorities and plans rather than an identifiable individual.

Privacy laws generally regulate information relating to identifiable
individuals. Growth & Search nevertheless seeks to handle both personal
information and confidential business information responsibly and securely.


3. Information We May Collect

Depending on how you use Growth & Search, we may collect:


Contact and Account Information

  • Name
  • Email address
  • Telephone number
  • Business contact details
  • Account and licence information


Business Profile Information

  • Business name
  • Industry and business activities
  • Business size and stage
  • Customer type
  • Operational maturity
  • Growth priorities
  • Leadership and execution preferences
  • Owner direction and business dependency information where provided


Strategic and Operating Information

  • Strategic Clarity & Readiness Check responses
  • Operating Assessment responses
  • Operating Practices Review information
  • Strategic and operational priorities
  • Business objectives
  • Digital and operational readiness information
  • Priority actions and progress information
  • Information provided to the Operating System Assistant
  • Information used to prepare Strategic Operating Review Reports


Technical and Usage Information

  • IP address
  • Browser and device information
  • Account activity
  • Platform usage information
  • Website analytics
  • Cookie and tracking information
  • Security and system logs


4. Sensitive and Unnecessary Information

Growth & Search is not designed to collect sensitive personal information
unless it is genuinely necessary for a particular purpose and lawfully
provided.

Users should not submit passwords, payment card details, medical information,
confidential employee records, government identification documents,
customer personal information or other sensitive personal information unless
it is specifically required and appropriate for the relevant Growth & Search
function.

When describing business issues, users should wherever practicable avoid
identifying individual employees, customers, suppliers or other third parties
where their identity is not necessary.


5. How We Collect Information

Information may be collected when you:

  • Visit or interact with the Growth & Search website
  • Complete the Strategic Clarity & Readiness Check
  • Create an account or register your business
  • Activate an Annual Business Licence
  • Complete Operating Assessments or Operating Practices Reviews
  • Use the Operating System Assistant
  • Record priorities, actions or progress within the Platform
  • Request a Strategic Operating Review
  • Contact Growth & Search
  • Participate in product testing, surveys or feedback activities


6. How We Use Information

We may use information to:

  • Provide and operate the Growth & Search Platform
  • Personalise Platform outputs to the business using the system
  • Generate assessments, findings and operating insights
  • Identify possible priorities and areas requiring attention
  • Provide Operating System Assistant functionality
  • Generate Strategic Operating Review Reports
  • Administer accounts, licences and payments
  • Provide customer and technical support
  • Communicate important service information
  • Protect Platform security and prevent misuse
  • Understand and improve Platform performance and usability
  • Develop and improve Growth & Search methodologies and functionality
  • Meet applicable legal, accounting and regulatory requirements


7. UK Lawful Bases for Processing

Where UK data protection law applies, Growth & Search processes personal
information only where there is an appropriate lawful basis.

Depending on the circumstances, these bases may include:

  • Contract — where processing is necessary to provide an
    account, Annual Business Licence, report or other service requested by you.
  • Legitimate interests — where reasonably necessary to
    operate, secure, support and improve Growth & Search in ways that do not
    override individual privacy rights.
  • Consent — where consent is required, including for certain
    marketing activities and non-essential tracking technologies.
  • Legal obligations — where processing is necessary to
    comply with applicable legal, tax, accounting or regulatory requirements.


8. Strategic Operating System Processing

Information submitted through Growth & Search may be analysed and processed
to help generate outputs such as:

  • Strategic and operating assessments
  • Areas of relative strength or possible weakness
  • Operating-practice observations
  • Priority recommendations
  • Immediate Priority Actions
  • Digital and operational readiness observations
  • Operating System Assistant responses
  • Now / Next / Later priorities
  • Strategic Operating Review Reports

These outputs are designed to support structured business thinking,
prioritisation and operating discipline.

Growth & Search provides information and decision-support tools rather than
professional legal, accounting, financial, investment, employment or other
regulated professional advice.


9. Artificial Intelligence

Growth & Search uses artificial intelligence technologies, including the
OpenAI API, as an enablement layer within the Strategic Operating System.

AI may assist with:

  • Analysing business inputs
  • Identifying patterns and possible priorities
  • Generating operating guidance
  • Preparing summaries and reports
  • Supporting Strategic Operating Reviews
  • Improving Platform functionality and user experience


How Information Is Handled by Our AI Provider

Information processed through Growth & Search may be transmitted to OpenAI
through its API services where required to generate relevant analysis,
recommendations or other Platform outputs.

Under OpenAI’s standard API data controls, information submitted through
the API is not used by OpenAI to train or improve its general-purpose AI
models unless the API customer has expressly opted in to data sharing.

Growth & Search does not intend to opt in to the use of customer business
information for general-purpose AI model training.

OpenAI may retain limited API input and output information for a restricted
period for purposes such as abuse monitoring, security, legal compliance
and operation of its services, in accordance with OpenAI’s applicable
business terms and data controls.


Human-Governed Decision Support

AI-generated outputs may contain errors, omissions or assumptions and may not
be appropriate for every business situation.

Growth & Search is therefore designed as a
human-governed Strategic Operating System.
Technology supports analysis and prioritisation, but the business owner or
leadership team retains judgement, ownership and accountability for decisions
and actions.

Growth & Search does not currently use automated processing to make decisions
about individuals that produce legal or similarly significant effects.


10. Strategic Clarity & Readiness Check

The Strategic Clarity & Readiness Check uses responses provided by users to
generate indicative findings regarding the business’s strategic and
operational position.

The findings are intended to help business leaders identify areas that may
warrant closer attention. They are indicative and informational rather than
professional advice or a guarantee of business performance.


11. Strategic Operating Review

Where requested, Growth & Search may use information completed within the
Strategic Operating System to prepare a Strategic Operating Review.

The review may incorporate:

  • Business profile and owner-direction information
  • Operating Assessment responses
  • Operating Practices Review information
  • Recorded priorities and operating inputs
  • AI-assisted analysis
  • Quality assurance and human review

Strategic Operating Reviews are designed to help leadership establish clearer
priorities and sequencing. Growth & Search does not guarantee any particular
commercial or business outcome arising from a review.


12. Technology and Service Providers

Growth & Search relies on selected third-party technology and service
providers to operate the Platform.

Information may be disclosed or made available to providers where reasonably
necessary for services such as:

  • Website and cloud hosting
  • Payment processing
  • Email and customer communications
  • Artificial intelligence processing
  • Website analytics
  • Advertising measurement
  • Cybersecurity and technical support
  • Data storage and backup

We seek to use reputable providers and limit information made available to
them to what is reasonably necessary for the relevant service.

Growth & Search does not sell personal information or business information
and does not provide it to unrelated third parties for their independent
direct-marketing purposes.


13. Payment Information

Payments for Growth & Search products and services may be processed through
third-party payment providers such as Stripe.

Growth & Search does not need to store complete payment-card details where
payment information is processed directly by the payment provider.
Payment providers process information in accordance with their own privacy
and security obligations.


14. International Processing and Transfers

Growth & Search is operated from Australia but uses technology infrastructure
and service providers that may process or store information in other
jurisdictions.

Depending on the service being used, information may therefore be processed
in Australia, the United Kingdom, the United States, countries within the
European Economic Area and other jurisdictions in which our service providers
lawfully operate.

Where applicable, we seek to use contractual, organisational and technical
safeguards appropriate to the nature of the information and the processing
being undertaken.

Where UK data protection law applies to a restricted international transfer,
Growth & Search will seek to use an applicable lawful transfer mechanism or
other permitted basis.


15. Cookies, Analytics and Tracking Technologies

Growth & Search may use cookies, tags, pixels and similar technologies to
operate the website, protect security, understand Platform usage, measure
marketing effectiveness and improve user experience.

These technologies may include:

  • Essential website and account cookies
  • Security and authentication technologies
  • Website analytics
  • Google-related analytics and measurement technologies
  • Meta and similar advertising measurement technologies

Where required by applicable law, non-essential analytics, advertising and
tracking technologies will not be activated until the required consent has
been obtained.

Users will be provided with a reasonable means of accepting, rejecting or
subsequently changing their preferences for non-essential tracking
technologies where required by law.


16. Marketing Communications

Growth & Search may communicate with users about the Platform, their account,
assessment results, licence status, reports and related services.

Where we send marketing communications, recipients may unsubscribe at any
time using the unsubscribe facility included in the communication or by
contacting us.

Unsubscribing from marketing does not necessarily prevent Growth & Search from
sending essential account, licence, security, payment or service-related
communications.


17. Data Security

Growth & Search takes reasonable administrative, technical and organisational
measures designed to protect information from unauthorised access, misuse,
loss, interference, alteration or disclosure.

Measures may include:

  • Access controls
  • Secure hosting and infrastructure
  • Encryption where appropriate
  • Account authentication
  • System monitoring
  • Backup and recovery processes
  • Security and provider reviews

No internet-based or digital system can guarantee absolute security, and
users should also take appropriate steps to protect their login credentials
and devices.


18. Data Retention

Growth & Search retains personal and business information only for as long as
reasonably necessary for the purposes for which it was collected or as
required for legitimate operational, legal or regulatory purposes.

This may include periods necessary to:

  • Maintain an active account or Annual Business Licence
  • Maintain historical Platform information requested by the user
  • Prepare or retain reports
  • Maintain appropriate business and financial records
  • Manage disputes or complaints
  • Maintain security and fraud-prevention records
  • Meet tax, accounting or other legal obligations

When information is no longer reasonably required, it may be securely deleted,
archived or de-identified, subject to applicable legal requirements.


19. Aggregated and De-Identified Information

Growth & Search may use aggregated or de-identified information to understand
Platform usage, improve methodologies, improve operating insights, develop
Platform functionality and improve the overall user experience.

Where information is treated as de-identified, reasonable steps are taken so
that the resulting information is not intended to identify an individual
user or business.


20. Access, Correction and Privacy Rights

Depending on where you are located and the law that applies, you may have
rights relating to your personal information.

These may include rights to:

  • Request access to personal information
  • Request correction of inaccurate information
  • Request deletion where legally available
  • Request restriction of certain processing
  • Object to certain processing
  • Object to direct marketing
  • Request data portability where applicable
  • Withdraw consent where processing relies on consent

These rights are not absolute and may depend on the circumstances, the type
of information involved and the applicable law.

Requests can be made using the contact details below. We may need to verify
identity before providing access to or changing personal information.


21. Privacy Questions and Complaints

If you have a question, concern or complaint about how Growth & Search handles
personal information, please contact us using the details below.

We will review privacy complaints, investigate them where appropriate and
seek to respond within a reasonable period.

If you are not satisfied with our response, you may have the right to contact
the relevant privacy regulator.

In Australia, this is the
Office of the Australian Information Commissioner (OAIC).

In the United Kingdom, this is the
Information Commissioner’s Office (ICO).


22. Changes to This Privacy Policy

Growth & Search may update this Privacy Policy as the Platform, technology,
service providers, operating model or applicable legal requirements change.

Where changes are material, we will take reasonable steps to notify affected
users where appropriate.

The current version will be published on the Growth & Search website together
with its effective date.


Privacy Contact


Growth & Search


Risk Management Recruiters Pty Ltd


ABN 23 089 022 999


enquiry@growthandsearch.com


growthandsearch.com


© Risk Management Recruiters Pty Ltd.
Growth’s Magnificent Seven® is a registered trademark.
Growth & Search Strategic Operating System.
All rights reserved.