Privacy Policy

Who we are

ScaleCRM ("we", "us", "our") provides an all-in-one CRM and marketing platform, based in Leicester, United Kingdom.

For personal data we handle about our own visitors and customers, we act as the data controller. For personal data you load into the platform about your own contacts, you are the controller and we act as your processor.

If you have any question about this policy, contact us at hello@scalecrm.cloud.

Information we collect

We collect the following categories of information:

• Information you give us — name, email address, phone number, business name, and anything you write in a form or message.
• Account and billing information — your plan, billing contact, and payment records. Card details are handled by our payment provider and are never stored on our systems.
• Customer data — the contacts, conversations, appointments and records you create or import while using the platform.
• Usage data — pages visited, features used, approximate location derived from IP address, browser and device type.
• Cookies and similar technologies — see the Cookies section below.

How we use your information

We use personal data to:

• Provide, operate and support the platform.
• Set up and administer your account, and process payments.
• Respond to enquiries and provide customer support.
• Send service messages about your account, security or changes to the platform.
• Send marketing about our products, where you have consented or where we have a legitimate interest and you have not opted out.
• Monitor, secure and improve the service, including troubleshooting and analytics.
• Meet legal, accounting and regulatory obligations.

Our legal bases

Under UK GDPR we rely on the following legal bases: performance of a contract, to provide the service you have signed up for; legitimate interests, to secure and improve the platform and to market to business contacts; consent, where required, for example certain marketing and non-essential cookies, which you may withdraw at any time; and legal obligation, where we must retain records for tax or compliance purposes.

Sharing your information

We do not sell your personal information. We share it only with service providers who help us operate the platform, all of whom are bound by confidentiality and data protection terms.

These include our CRM and messaging infrastructure provider, hosting and infrastructure providers, payment processors, and analytics providers. We may also disclose information where required by law, or in connection with a merger, acquisition or sale of assets.

International transfers

Some of our providers are located outside the UK. Where personal data is transferred outside the UK, we rely on an adequacy decision or on appropriate safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

How long we keep it

We keep personal data for as long as your account is active and for as long as needed for the purposes described in this policy. After your account closes we retain data for a limited period to meet legal, tax and accounting obligations, then delete or anonymise it. You may request earlier deletion, subject to those obligations.

Your rights

Under UK data protection law you have the right to access your personal data, to have inaccurate data corrected, to request erasure, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent.

To exercise any of these rights, contact hello@scalecrm.cloud. We will respond within one month.

If you are unhappy with how we have handled your data you may complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to address your concern first.

Security

We use encryption in transit and at rest, role-based access controls, and regular automated backups. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the relevant regulator of any breach where the law requires it.

Cookies

We use cookies that are strictly necessary to operate the site, and analytics cookies that help us understand how it is used. You can control non-essential cookies through your browser settings. Blocking strictly necessary cookies may stop parts of the site working.

Children

The platform is intended for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. We will change the date at the top of this page, and where changes are significant we will notify you by email or through the platform.

Contact us

Questions, requests or complaints about this policy can be sent to hello@scalecrm.cloud, or by post to Leicester, United Kingdom.