Privacy
How Two Birds Growth Ltd handles your data.
Last updated 2 November 2026.
Who we are. Grow Up, Red Lightbulb, We Chillin' and Roost are run by Two Birds Growth Ltd, company 17424009, registered in England and Wales. We decide how your personal data is used, which makes us the "controller".
Anything about your data: danny@timetogrowup.co.
We're registered with the Information Commissioner's Office (ICO).
We don't sell your data and we don't use it to train AI.
On our websites
| Where | What we collect | Why (legal basis) |
|---|---|---|
| Any site | What you put in an email to us | To reply (legitimate interest) |
| Booking a call | Calendly runs the booking and sets its own cookies on that page only. Its privacy policy covers what you enter there | To arrange the call (legitimate interest) |
| timetogrowup.co / redlightbulb.co onboarding form | Name, email, company, document links and your answers, including any names of colleagues or clients you choose to mention | To set up work you've hired us for (contract) |
| Saving onboarding progress | Your answers, stored against a scrambled version of your email and a scrambled 4-digit code | So you can come back to it (contract) |
| wechillin.co free email check | The domain you type. We look up its public DNS records. If you ask for the write-up: your name, work email and domain | To send the write-up, and we may follow up once (legitimate interest) |
| Campaign tag on forms and bookings | Which email link brought you (e.g. the campaign name) | To know which emails work (legitimate interest) |
| wechillin.co viability quiz | Your individual answers aren't stored. If you ask for your result: your name, work email, domain and the result | To send your result, and we may follow up once (legitimate interest) |
| Roost | See "Roost" below |
Roost (joinroost.co.uk)
- No sign-up. Your device gets an anonymous account, so we don't know who you are unless you tell us.
- What you add: your bills, renewal dates, home details (postcode, type, bedrooms) and quiz answers. Stored so the app works across visits (contract).
- Reminders: if you ask for renewal reminders, we store your email and send them through Resend. Every email has a way to stop them.
- Partner links: if you click through to a provider, we note the click so we can be paid a referral fee. We don't pass your details to them.
- Analytics: Plausible counts visits without cookies or personal data. Microsoft Clarity records how pages are used, with text and numbers hidden, and only if you accept cookies. Change your mind any time in the cookie settings.
- Deleting: clearing your browser removes the link to your data. Email us to have it deleted from our database, and we delete accounts unused for 12 months.
Business email outreach
- Who we email: people at UK limited companies, LLPs and public bodies, about their work. We don't email consumers, sole traders or partnerships without consent.
- What we hold: name, job title, work email, company and website, from business data providers and public sources, checked before use. We record where each list came from.
- Why we're allowed to: legitimate interests under UK GDPR, and the corporate subscriber rule in PECR.
- Stopping it: reply "no", use the unsubscribe link, or email us. You go on a do-not-email list that every new list is checked against.
- For clients: when we run a campaign for a client, the client decides who to contact and we act on their instructions.
Client work
When you hire us, we handle data inside your systems only on your instructions, under a data processing agreement. You stay in control of it. At the end we return or delete it within 30 days.
Cookies
timetogrowup.co, redlightbulb.co and wechillin.co set no cookies of their own and use no advertising. Plausible counts visits without cookies or personal data.
If you arrive from one of our emails, the link carries a short campaign tag. When you fill in a form or book a call, that tag is saved with your answers so we know which email brought you. It isn't stored in a cookie. Roost uses Clarity cookies only if you accept them. Calendly sets its own cookies on booking pages.
Our tools
These process data for us under their own data protection terms: Netlify (hosting, forms), Supabase (databases), Calendly (bookings), Google (email), Resend (Roost reminders), Plausible (website visit counts, no cookies), Microsoft Clarity (Roost analytics), Tally (Roost forms), Apollo and ZeroBounce (business contact data and checks), Instantly (outreach email), Xero (invoices) and Anthropic (Claude, our AI assistant, on business terms that don't train on your data).
Some are outside the UK. Where data leaves the UK, it's covered by UK-approved safeguards (the UK Extension to the EU–US Data Privacy Framework or standard contract clauses).
Google user data
We run an internal assistant called "Jess" that uses Google's Gmail API on one account only: our director's own Gmail. It is never used on anyone else's account.
- What it does: reads, labels and archives that inbox, finds receipts, and sets up labels and filters (permissions gmail.modify and gmail.settings.basic).
- Sending: the permission would allow sending email. We never use it, and sending is switched off in our code.
- Who sees it: the assistant runs on Claude, so message text is passed to Anthropic to be processed. Anthropic doesn't keep it for training. We don't store mail elsewhere, share it, sell it or use it for advertising. Sign-in tokens stay on our own computer.
Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
How long we keep it
- Emails and enquiries: 2 years after we last speak.
- Saved onboarding progress: 12 months.
- Outreach contact data: for the length of the campaign. Opt-outs we keep, so we never email you again.
- Roost: deleted after 12 months unused, or sooner if you ask.
- Client data: returned or deleted within 30 days of the work ending. Invoices: 6 years (tax rules).
Your rights
You can ask what we hold about you, have it corrected or deleted, object to us using it, or tell us to stop contacting you. Email danny@timetogrowup.co and we'll reply within a month.
If you're not happy, you can complain to the Information Commissioner's Office: ico.org.uk or 0303 123 1113.
How we keep data safe: timetogrowup.co/ai/security/