Grantive
Last updated: July 2026
The short version: we collect only what we need to respond to you and to deliver our services — social media management, paraplanning, technology and design — we never sell data, and where we handle other people's personal data on a client's behalf, including the clients of adviser firms, we do so under a written data processing agreement. Questions to hello@grantive.co.uk.
Grantive Limited, registered in England and Wales, company number 17070259. Registered office: 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE. We are registered with the Information Commissioner's Office under registration number ZC190478.
We operate as four divisions — Grantive Social (social media management), Grantive Finance (outsourced paraplanning), Grantive Tech (AI consulting and automation) and Grantive Design (website and app design). This policy applies across all of them.
We do two different things with personal data, and different rules apply to each.
Data we control. When you contact us, enquire about our services, or work with us as a client, we decide how that information is used. This policy covers that data.
Data we process for our clients. When you engage us to deliver a service, we often handle personal data on your behalf and strictly on your written instructions — for example the audience and contact data behind a social media account, the client records inside an adviser firm's back office, the data flowing through an automation we build for you, or the content and user data on a website we design. In those cases you remain the data controller and your own privacy notice applies; we act as your data processor under a UK GDPR data processing agreement.
In particular, when an authorised adviser firm engages us for paraplanning, we handle personal information about that firm's clients strictly on the firm's written instructions, under a UK GDPR data processing agreement. The firm remains the data controller and its own privacy notice applies. If you are a client of an adviser firm and want to exercise your data rights, please contact your adviser; we will assist them fully.
Enquiries. Your name, email address, business or firm name and the content of your message, so we can reply. Lawful basis: our legitimate interest in responding to business enquiries.
Client records. Contact details of the people we work with at each client, engagement terms, correspondence and invoicing records, so we can deliver the services and keep proper accounts. Lawful bases: performance of a contract and our legal obligations, including tax record keeping.
Service delivery. To carry out the work, a client may give us access to their own systems and the personal data within them — social media and advertising accounts, an adviser firm's back office, automation and messaging tools, or website and hosting environments. We handle that data as the client's processor, on their instructions, as described above.
Business development. Contact details of businesses and adviser firms we believe may benefit from our services, gathered from public sources such as company and firm websites and professional directories. Lawful basis: our legitimate interest in marketing a business to business service. You can ask us to stop contacting you at any time and we will.
This website. Our site does not use advertising or tracking cookies. Our hosting provider keeps standard server logs for security purposes.
Nobody, except the service providers who keep the business running: Microsoft (email and encrypted file storage, with UK or European data residency), our accounting software provider, the platform providers we use to deliver each service — such as social scheduling, automation, hosting and design tools, configured within the client's own accounts wherever the work lives there — and professional advisers such as our accountant or insurer where necessary. Each is bound by contract to protect your data. We never sell personal information.
Enquiries that go nowhere are deleted within twelve months. Records of client engagements are kept for six years after the engagement ends, in line with limitation periods and tax rules, then securely deleted.
Encrypted devices, multi factor authentication on all accounts, access controlled cloud storage, and no client information sent as unprotected email attachments. Where a client gives us access to its own systems, we work inside those systems so the data never leaves the client's environment.
You can ask for a copy of the personal data we hold about you, ask us to correct or delete it, object to our use of it, or ask us to restrict it. Email hello@grantive.co.uk and we will respond within one month. If the data you are asking about is one we hold on a client's behalf as their processor — for example if you are a client of an adviser firm — please contact that organisation directly, as they control it, and we will assist them fully. If you are unhappy with how we handle a complaint, you can raise it with the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
If this policy changes we will update this page and the date at the top.