Skip to main content

Growclub.lk

Privacy Policy

What personal information Growclub Research (Private) Limited collects, why, who it is shared with, and the rights you have over it.

Effective 20 October 2026

The short version

  • We collect only what we need to deliver what you ask for: your name, contact details, payment records and the strategy rules you send us.
  • We never sell your information, and we never share your strategy ideas with anyone.
  • We never ask for your passwords, card numbers, broker logins or exchange keys.
  • You can ask us to show you, correct or delete your information at any time.

This summary helps you read the policy below. The full policy is what applies.

1. Who we are

Growclub Research (Private) Limited is an engineering and research services company registered in Sri Lanka. We run growclub.lk and decide how the personal information described here is used, which makes us its “controller” under Sri Lanka’s Personal Data Protection Act, No. 9 of 2022.

This policy covers our website, our free tools, Algorithmic Research 101 and extra sessions, Inner Club, Private Desk (including applications), and our WhatsApp and email conversations with you. It should be read with our Terms of Service.

2. What we collect

Information you give us:

  • Contact details: your name, WhatsApp number and email address, when you message us, order, or subscribe to our newsletter.
  • Order and payment records: what you bought, the price, the promo code used, and the payment confirmation or transfer slip you send us, which may show your name, bank and a reference number.
  • Account usernames: your TradingView username, when we need it to give you access to a tool.
  • Strategy information: the rules and ideas you share for a strategy build or in a session (see section 4).
  • Private Desk applications: what you tell us on your application call, such as your experience and what you want to build. If we don’t offer you a place, we delete these notes within 6 months.
  • Messages: what you write to us on WhatsApp or email, and in the members’ groups.

Information collected automatically when you visit growclub.lk: your device and browser type, approximate location from your IP address, the pages you visit and how you found us. See section 6.

What we never ask for: passwords, card numbers, bank login details, broker or CDS account logins, or exchange API keys. If anyone claiming to be Growclub asks for these, it isn’t us.

You can use the fair value calculator without giving us any personal details.

3. Why we use it

  • To deliver what you asked for: confirming orders, switching on access, building and testing your strategy, and supporting you. This is needed to carry out our agreement with you.
  • To keep business records: invoices and payment records we must keep under tax and company law.
  • To contact you about your service: renewal reminders, changes to our terms, and replies to your questions.
  • To send our newsletter: only if you subscribe. Every email has an unsubscribe link.
  • To improve our website and tools: using analytics data, mostly in summary form.
  • To protect our services: preventing misuse, such as shared access or resale of our algorithms.
  • To consider a Private Desk application: deciding whether the membership is a good fit for you.

We do not use your information to make automated decisions about you, and we do not build profiles of your market activity.

4. Your strategy ideas

The rules and ideas you share for a strategy build or in a session are treated as confidential. We use them only to build and test your strategy, and to teach you.

  • We never share, publish, reuse or sell them.
  • Only the people working on your build can see them.
  • After delivery, you can ask us to delete our copies, except the record that the build happened, which we keep as an order record.

5. Who we share it with

We do not sell or rent your personal information. We share it only with services we need to run the business, and only what each one needs:

  • WhatsApp (Meta), for orders, support and the members’ groups. Other group members can see your name, number and messages in the group.
  • Google, for website analytics and email.
  • Our website hosting provider, which stores the website and its data.
  • TradingView, which receives your username when we grant you access to an algorithm or tool.
  • Banks and payment providers, which process your payments and refunds.
  • Professional advisers, such as our accountant or lawyer, under a duty of confidentiality.
  • Authorities, when the law requires it, such as a court order or a regulator’s request.

Each of these services has its own privacy policy, which applies to how it handles your data.

6. Cookies and analytics

Cookies are small files your browser stores so a website can remember things between visits. growclub.lk uses:

  • Essential cookies, which make the site work. These can’t be switched off.
  • Analytics cookies from Google, which tell us how many people visit, which pages they read and how they found us.
  • Advertising cookies from Google, only on pages where ads are shown. Google may use them to show ads based on your visits to this and other sites. You can turn off personalised ads at adssettings.google.com.
  • Browser storage on some of our pages, which remembers small choices such as a selected plan. It stays on your device and is never sent to us.

You can block or delete cookies in your browser settings. Most of the site will still work.

7. Data stored outside Sri Lanka

Some of the services we use, such as WhatsApp, Google and TradingView, store data on servers outside Sri Lanka. When your information is held by them, it is protected by their security measures and policies. We choose established providers with strong security for this reason.

8. How long we keep it

  • Order, payment and invoice records: for as long as tax and company law requires.
  • Strategy ideas and build files: until you ask us to delete them, or 2 years after your last build, whichever comes first.
  • WhatsApp conversations: while you are a customer, and for up to 2 years after, in case of questions or disputes.
  • Newsletter email address: until you unsubscribe.
  • Analytics data: according to Google’s retention settings, in summary form.

When we no longer need information, we delete it or remove anything that identifies you.

9. How we protect it

We limit access to people who need it, protect our accounts with strong passwords and two-step login, and use secure (HTTPS) connections on our website. No system is perfectly secure, but if a data breach affects your information, we will tell you and the relevant authority as the law requires.

10. Your rights

Under Sri Lanka’s Personal Data Protection Act, you can ask us to:

  • Show you the personal information we hold about you.
  • Correct anything that is wrong or incomplete.
  • Delete your information, unless the law requires us to keep it.
  • Stop using it for something you agreed to, such as the newsletter. You can withdraw your consent at any time.

Message us on WhatsApp or email us (section 13). We may ask you to confirm your identity first, and we will reply within 21 working days. It’s free. If you’re not happy with our response, you can complain to the Data Protection Authority of Sri Lanka.

11. Children

Our paid services are for people aged 18 or over. We don’t knowingly collect information from anyone under 18. If you think a child has given us their information, contact us and we will delete it.

12. Changes to this policy

We may update this policy, for example when we add a new service or the law changes. We will change the effective date at the top of this page, and tell customers about important changes on WhatsApp or email.

13. Contact us

For any privacy question or request, contact us:
Email support@growclub.lk or WhatsApp +94 77 780 7249.
Growclub Research (Private) Limited, Colombo, Sri Lanka.