Privacy policy

Who we are

ScaleArk Digital Solutions Pvt Ltd is a private limited company registered in India and based in Mumbai. For the data described in this policy we are the data controller, which means we decide why and how it is processed.

You can reach us about anything in this policy at m.ansari@scaleark.com. That address is read by Mohammad Majeed Ansari, our founder and director, who is also our contact for privacy questions and grievances under India's Digital Personal Data Protection Act 2023.

What we collect

When you contact us

Our enquiry form asks for your name, email address, website, which service you are interested in, and a description of the problem you want solved. You choose what to put in that last field, so please do not include anything sensitive or confidential in it.

If you email us or message us on WhatsApp at +1 724 419 1842 instead, we hold whatever that conversation contains, including your email address or phone number.

When you book a call

Booking runs on Google Calendar's appointment scheduling, embedded on our contact page. When you book, Google collects your name, email address and chosen time and passes the booking to us. That interaction is with Google directly and is also governed by Google's own privacy policy.

Automatically

Our hosting provider keeps standard server logs, which include IP addresses, timestamps, requested pages and browser user agent strings. These exist to keep the site running and secure. We do not use them to identify individual visitors.

What we do not collect

We do not ask for payment details on this site. We do not operate user accounts or a newsletter. We do not run advertising pixels or retargeting tags. We do not knowingly collect data about anyone under 18.

Why we use it, and on what legal basis

We use what you send us to reply to you, prepare and carry out the free audit you asked for, and if you become a client, to deliver the work and keep proper business records.

Where UK or EU GDPR applies, our legal basis is your consent when you choose to contact us, our legitimate interest in responding to business enquiries and running the agency, performance of a contract once you engage us, and legal obligation for records we are required to keep. Where India's DPDP Act applies, our basis is the consent you give by submitting an enquiry, and the legitimate uses that Act permits.

We do not use your enquiry to add you to a mailing list, and we do not pass it to anyone for their own marketing.

Cookies and tracking

As of the date at the top of this page, scaleark.com sets no first party cookies of its own and stores nothing in your browser. There is no cookie banner because there is currently nothing to consent to.

There is one exception. Our contact page embeds Google Calendar so you can book a call without leaving the site. That embed is loaded from Google and can set Google's own cookies in your browser. It loads only on the contact page, and only when you scroll to it.

We intend to add Google Analytics 4 to understand which pages are useful. It is not active yet. When it is switched on we will update this policy, state what it collects, and ask for your consent before any analytics cookies are set in the UK, the EU or anywhere else that requires it.

Who else sees your data

We do not sell, rent or trade personal data. We share it only with the service providers we need to operate, and only for that purpose:

• Google, which hosts our email, so any enquiry you send reaches an inbox on Google's infrastructure, and which provides the Calendar booking used on our contact page.
• WhatsApp, owned by Meta, if you choose to message us there.
• Our website hosting provider, which runs the servers that serve this site and keeps the access logs described above.
• Professional advisers such as accountants or lawyers, and government authorities, where we are legally required to disclose.

Separately from this site, we act as a processor rather than a controller when we handle data inside a client's advertising, analytics or ecommerce accounts as part of our work. In those cases the client decides what happens to that data and our contract with them governs it. This policy does not cover it.

International transfers

We are based in India and our providers, including Google, operate globally. If you contact us from the UK, the EU, Canada or the United States, your data will be transferred to and processed in India and potentially in other countries, which may not give it the same legal protection as your own.

Where UK or EU GDPR applies, we rely on your explicit consent for these transfers and on the safeguards our providers put in place, such as standard contractual clauses. Ask us if you want the detail for a specific provider.

How long we keep it

We keep enquiries for 24 months from your last contact with us, which covers a realistic business to business sales cycle and one round of follow up. After that we delete them.

If you become a client we keep records for as long as we work together and afterwards for as long as tax, accounting and contractual law requires. Server logs are kept for a short operational period and then discarded.

You can ask us to delete your data sooner. See below.

Your rights

Depending on where you live you can ask us to do some or all of the following, and we will honour these requests regardless of where you are:

• Tell you what personal data of yours we hold, and give you a copy.
• Correct anything inaccurate.
• Delete it.
• Restrict or object to how we use it, including any use based on legitimate interest.
• Provide it in a portable, machine readable format.
• Withdraw consent at any time, without affecting anything we did before you withdrew it.
• Nominate someone to exercise these rights for you if you die or become incapacitated, which is a specific right under India's DPDP Act.

We do not sell or share personal data as those terms are defined by California law, and we do not use it for automated decision making or profiling. If you are a California resident, you still have the rights listed above and we will not discriminate against you for using them.

How to exercise your rights, and how to complain

Email m.ansari@scaleark.com. Say what you want and we will respond within 30 days. We may need to confirm who you are before we act, to avoid handing your data to someone else.

If you are unhappy with our response, you can complain to your data protection authority: the Data Protection Board of India, the Information Commissioner's Office in the UK, your national supervisory authority in the EU, or the Office of the Privacy Commissioner in Canada. We would rather you told us first so we can put it right.

Security

The site is served over HTTPS and sends security headers including strict transport security. Enquiries go to accounts protected by strong authentication. We keep the number of people and systems that touch your data small, which is the most effective control available to an agency of our size.

No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. Please do not send confidential client information, credentials or account access through the enquiry form.

Links to other sites

This site links to third party sites, including our clients' sites and our certification partners. We are not responsible for their privacy practices. Read their policies before giving them anything.

Changes to this policy

When we change how we handle data, we update this page and change the date at the top. Anything material, such as switching on analytics, will be described here before or as it takes effect.