Template — requires professional legal review before commercial launch.
Privacy Policy
COMPANY_NAME_PLACEHOLDER ("we") is the data controller for personal data processed through SCALELEAD. This policy explains what we collect, why, and the rights you have under UK data protection law.
Data we collect
- Account data — name, email address, password (stored hashed) and account settings.
- Billing data — plan, subscription status and payment history. Card details are collected and stored by our payment provider, not by us.
- Content you create — prospects you save, project briefs, generated websites, audit reports and notes.
- Usage data — feature usage events (for example generation counts), device and log information used for security and to enforce plan limits.
- Prospect business data — information about businesses you search for or save. Where this includes personal data (for example a sole trader’s name), you act as controller for how you use it and must comply with applicable law when contacting people.
How and why we use it
- To provide the service — accounts, generation, publishing, audits, exports (contract).
- To take payment and manage subscriptions (contract / legal obligation).
- To secure the platform, prevent abuse and enforce limits (legitimate interests).
- To send service messages about your account and important changes (contract).
- To improve the product using aggregated, de-identified usage information (legitimate interests).
We do not sell personal data.
Processors and sharing
We use a small number of service providers to run the platform, acting under contract as processors or independent controllers as applicable:
- Cloud hosting and database infrastructure providers.
- A payment provider, which handles card data under its own terms.
- AI model providers, which process the briefs and content needed to generate websites and audits.
- Business-data providers used to return prospect search results.
We may also disclose data where the law requires it, or as part of a business transfer with equivalent protections. Where providers process data outside the UK, we rely on appropriate safeguards such as adequacy regulations or standard contractual clauses.
Retention
We keep account and content data while your account exists. After an account is closed, we delete or anonymise personal data within a reasonable period, except where we must keep records longer (for example billing records for tax purposes) or need them to resolve disputes.
Your rights (UK GDPR)
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete data (“right to erasure”) in certain circumstances.
- Restrict or object to processing based on legitimate interests.
- Receive your data in a portable format.
- Withdraw consent where processing relies on consent.
To exercise any right, contact PRIVACY_EMAIL_PLACEHOLDER. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).
Cookies
We use strictly necessary cookies to keep you signed in and secure the service. We do not use third-party advertising cookies on the platform.
Children
The service is for business use by adults. It is not directed at children and we do not knowingly collect children’s data.
Changes and contact
We will post any changes to this policy here and, for material changes, notify you by email or in-app.
Privacy contact: PRIVACY_EMAIL_PLACEHOLDER. COMPANY_NAME_PLACEHOLDER, ADDRESS_PLACEHOLDER. See also our Terms of Service.