Privacy | The Growth Transfer

Who we are, and how to reach us

The Growth Transfer, the founder extraction advisory practice of Jordan Murphy, founder of Brain Apes, is the controller for thegrowthtransfer.com and the Founder Bottleneck Score diagnostic. Email jordan@brainapes.com, or write to The Growth Transfer, 1317 Edgewater Dr #7713, Orlando, FL 32804, USA.

What we collect

What you type: First name and email, required. The optional form adds company, a revenue range, which area to hand over first, "Hours a week you spend approving, reviewing, or answering the team's questions", and "People in the business, including you".
Your twenty answers: Which option you picked, plus the five area scores, overall score, stage and constraint they produce.
Three answers in your own words: What do you think is holding growth back right now? What's that getting in the way of? Why does that matter to you? Required, stored exactly as you typed it: your report opens with your own words, and a consented follow-up letter may quote them back to you.
How you took it: Only if you tick the second box at the end: time on each question, how often you went back, the order things happened.
What the site records on its own: Campaign tags on your link, the page you landed on and the site that linked you to it, server logs including IP address and browser, and the analytics under cookies.
Background notes: Public background on you or your company, with the source and a date.
If you book a call: Your name, email, chosen time and anything you write go to Calendly, then to Jordan's calendar and inbox.
Your report link: Not indexed. Anyone holding the link can see the report.

If you leave partway through, a short record is sent: the answers so far, anything half typed in one of those boxes, and where you stopped.

Why we have it, and what makes it lawful

Your report: Making it, sending it, keeping it to compare with a later one. In UK and EU terms, the contract basis.
The follow-up series and the newsletter: Your consent, given by the first box.
The record of how you took it: Your consent, given by the second box, and nothing else.
Site analytics, security, better questions, background notes: Our legitimate interest in how the pages are used, keeping the site up, improving the questions, and knowing who we are talking to, including the unfinished run.
The do-not-email list: A legal obligation.

The diagnostic is an automated scoring instrument: your answers become five area scores, an overall score, a stage and a named constraint, which also picks your follow-up series; it sets no price and affects no right of yours, and the logic is published in what the score measures and the methodology.

Who else holds a copy

A website host: The pages, the forms and the server logs.
A database host: The source of truth: your answers, score, details, consent record and background notes.
An email delivery service: Your report and the follow-up letters, with delivery and bounce records.
A newsletter and sequence platform: Only if you ticked the first box.
A CRM: Name, email, company, score, stage, constraint, report link.
A website analytics service: Counts the pages viewed here. The request carries the page address, your browser and your IP address.
Calendly: The booking tool, only if you book. It sets its own cookies.
Microsoft Clarity: Behaviour analytics, described below. Never your name, email or answers.

All of it is held in the United States, which for the UK and the European Economic Area is a transfer out relied on under the standard contractual clauses.

How long we keep it, and how to have it gone

Unfinished run, no email: 90 days.
The timings and the log: 2 years, then deleted while the assessment stays.
Your assessment, answers and details: 3 years from the day you took it, including anything you typed in the three open questions. The report link dies with it.
Records of emails sent to you: 3 years. The delivery log behind them, 2 years.
The click records below: These are kept for up to 24 months and then deleted.
The do-not-email list: Kept indefinitely: your address and the reason, nothing else.

To have yours gone sooner, email jordan@brainapes.com from the address you used: your record comes out, including anything you typed in the three open questions and any background notes about you as a named person, and the report link stops working. Notes about a COMPANY are not removed by one person, and the other services are cleared by hand.

Your rights

You can tell us to stop marketing to you

Absolute, with no reason to give. Every marketing email has a one-click unsubscribe in it, or email jordan@brainapes.com and say stop.

A copy of what is held.
A machine-readable copy to take elsewhere.
Correction of anything wrong.
Deletion.
Restriction.
Objection to anything on the legitimate-interest basis above.
Withdrawing either consent, as easily as you gave it.
Complaining to a regulator: the Information Commissioner's Office in the UK, your national authority in the EU.

In California you can also know what is collected, have it deleted or corrected, and not be treated worse for asking; we do not sell or share it for cross-context behavioural advertising. In the UK and the EU, the list above is your GDPR rights.

All of it goes to jordan@brainapes.com, and is done inside a month.

Cookies, tracking, and Do Not Track

No advertising or retargeting pixel, and no open pixel in the report email.

Three things are counted by us rather than by an analytics company: a booking click, a press on any other button or link, and how far the scheduling widget gets. No cookie is set for it, and your IP address is not stored with it.

Page views are counted by a website analytics service. Its script sets no cookie and stores nothing on your device, and the request it sends carries the page address, your browser and your IP address.

Behaviour analytics, and this one is a session recorder. We use Microsoft Clarity, which records your visit as a replay but not what you type, which is masked in your browser before anything leaves it. Its cookies are first party, not a profile of you across other websites; Microsoft's terms are at privacy.microsoft.com/privacystatement. If your browser sends a Do Not Track signal, Clarity is never loaded at all.

On your device: your answers so far, your first name and timings, cleared when you open your report or clear browser data.

Changes to this page

If what happens to your data changes, this page changes before the change ships, and the date moves.

Effective 2026-09-21. Questions: jordan@brainapes.com.

What we collect, and what we do with it.