Privacy Policy

1. What this covers

This Privacy Policy applies to our website, landing pages, portals, forms, and the Services we provide (including advisory and subscriptions).

2. Personal data we collect

We may collect and process the following categories:

• Identity and contact data: name, email, company name, job title, phone number (if provided).
• Booking and transaction data: booking details (Apollo Calendar) and payment confirmation/transaction metadata (Stripe). We do not store full card details.
• Usage and device data: IP address, browser type, pages visited, interactions, and approximate location (via analytics/cookies).
• Messaging and communications data: communications, preferences, and engagement (e.g., Loops) where enabled.
• Service delivery data: information you provide in order to deliver advisory work (may include business contact details and operational context).

3. How we collect personal data

• Directly from you when you submit forms, book calls, purchase subscriptions, or contact us.
• Automatically via cookies and similar technologies (e.g., Google Analytics) and site interactions (Webflow).
• From third parties you authorise (e.g., if you invite us into your workspace or share documents).

4. Lawful bases for processing

We rely on one or more of these lawful bases:

• Contract: to provide Services you request (e.g., advisory delivery, subscriptions).
• Legitimate interests: to operate and improve our business, prevent fraud, secure systems, and understand usage.
• Consent: for certain marketing communications and non-essential cookies where required.
• Legal obligation: for tax, accounting, and compliance requirements.

5. How we use your data

• To provide and manage the Services (bookings, delivery, support, portal access).
• To process payments and prevent fraud.
• To communicate with you about the Services, changes, or support requests.
• To improve our website and Services (analytics, performance monitoring).
• To send marketing communications where permitted (you can opt out at any time).

6. Third parties and processors we use

We use trusted third-party providers to run our business and deliver the Services. Depending on your interaction, this may include:

Each provider acts as a “processor” (or sometimes an independent controller) under data protection law, and their own privacy policies may also apply.

7. International transfers

Some providers may process data outside the UK. Where this occurs, we take steps intended to ensure appropriate safeguards are in place, such as adequacy regulations or contractual safeguards (e.g., standard contractual clauses), as applicable.

8. Cookies and tracking

We use cookies and similar technologies to make the site work and to understand how it’s used. These may include:

• Strictly necessary cookies (site functionality, security).
• Analytics cookies (e.g., Google Analytics) to understand traffic and usage.
• Marketing or communications cookies (where enabled) to measure campaigns and communications performance.

Where required, we will request your consent for non-essential cookies. You can also control cookies via your browser settings.

9. Marketing preferences

If you opt in to marketing, you can unsubscribe at any time using the link in our emails or by contacting us via the contact form. We may still send important service messages (e.g., billing or account notices).

10. Data retention

We keep personal data only for as long as necessary for the purposes described, including legal, accounting, or reporting requirements. Typical retention periods:

• Client and billing records: up to 6 years (to meet tax/accounting obligations).
• Marketing contacts: until you unsubscribe or request deletion, unless legal obligations require retention.
• Analytics data: retained per our analytics configuration (often 14–26 months), then deleted or aggregated.

11. Your rights

Subject to applicable law, you may have rights including:

• Access to your personal data.
• Correction of inaccurate data.
• Erasure (deletion) in certain circumstances.
• Restriction or objection to processing in certain circumstances.
• Data portability (where processing is based on consent or contract and carried out by automated means).
• Withdrawal of consent at any time (where we rely on consent).

To exercise your rights, contact system@scalingrevops.com. We may need to verify your identity.

12. Security

We use reasonable technical and organisational measures to protect personal data. However, no method of transmission or storage is 100% secure. Please use strong passwords and keep access links and credentials confidential.

13. Children

Our Services are not intended for children and we do not knowingly collect data relating to children.

14. Complaints

If you have concerns, contact us first at system@scalingrevops.com and we will try to resolve it. You also have the right to complain to the UK supervisory authority: the Information Commissioner’s Office (ICO).

15. Changes to this Privacy Policy

We may update this policy from time to time. The “Last updated” date shows when changes were made.

16. Contact

Privacy questions or requests: Contact us.