Privacy Policy

1. Introduction

This privacy notice explains how we collect and process your personal data when you use our website https://scaleshift.io and any subdomains of scaleshift.io.

By providing your personal data, you confirm that you are over 13 years of age.

Kārlis Leilands (self-employed) is the data controller and responsible for your personal data (referred to as "we", "us", or "our" in this notice).

Please notify us if your personal information changes by emailing us.

2. What Data We Collect, the Purpose, and the Legal Basis

Personal data means any information capable of identifying an individual. Given the nature of our services, we only collect information you voluntarily provide. We do not use cookies, analytics trackers, or any automated data collection tools.

Communication Data

Includes any communication you send us via website forms, email, social media, or other channels.

• Purpose: To communicate with you, maintain records, and handle support or enquiries.
• Legal basis: Legitimate interests (to reply to messages and maintain records).

Lead / Customer Data

Includes your name, email address, business name, business description, and any other information you voluntarily provide when enquiring about or purchasing services.

• Purpose: To deliver services, prepare proposals, and manage client relationships.
• Legal basis: Contract performance or steps taken at your request to enter into a contract.

Business Information Data

Includes descriptions of your business, workflows, processes, goals, and any related information provided for automation audits or consultations.

• Purpose: To deliver consulting, automation, and related services.
• Legal basis: Contract performance and legitimate interests (to operate the business and provide requested services).

Technical Data

We do not collect technical data such as IP addresses, browser data, tracking data, or analytical usage information. We currently use no cookies, analytics tools, or external tracking scripts.

Sensitive Data

We do not collect any sensitive data (race, ethnicity, political opinions, health information, etc.).

Failure to Provide Data

If required information is not provided, we may be unable to deliver the requested services.

Purpose Limitation

We will only use your personal data for the purpose it was collected or for a closely related purpose. If we need to use it for something unrelated, we will notify you and explain the legal basis.

No Automated Decision Making

We do not perform automated decision making or automated profiling.

3. How We Collect Personal Data

We collect data in the following ways:

• Information you provide directly through forms on the website
• Information you provide via email, social media, or calls
• Information provided during consultations or service delivery

We do not collect any data automatically through tracking or cookies. We may receive data from third-party services you choose to use (e.g. email platforms or CRMs), but only where you voluntarily submit it.

4. Marketing Communications

Our legal basis for sending marketing communications is either your explicit consent, or our legitimate interests to grow the business.

You may opt out of marketing at any time by emailing us at karlis@scaleshift.io or clicking an unsubscribe link (if included in emails). Opting out of marketing does not affect service-related communications.

5. Disclosures of Your Personal Data

We may share your personal data with:

• Service providers who support IT, administrative, or communication functions
• Subcontractors or freelancers assisting with project delivery
• Professional advisers (legal, accounting, etc.)
• Government authorities where legally required

We require all third parties to handle your data securely and in accordance with the law.

6. International Transfers

If personal data is transferred outside the EU/EEA (for example, through tools you choose to use), we will ensure one of the following applies:

• The destination country has an adequate protection decision; or
• Appropriate safeguards (such as Standard Contractual Clauses) are in place; or
• You have provided explicit consent for a specific transfer.

You may withdraw consent at any time.

7. Data Security

We implement appropriate security measures to protect your personal data from loss, misuse, or unauthorised access. Access is limited to those who have a business need to know and who are required to keep the information confidential.

We maintain procedures for handling suspected data breaches and will notify you and relevant authorities if legally required.

8. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected and to meet legal obligations. Considerations include:

• Type of data
• Sensitivity
• Legal requirements
• Purpose of processing

For legal and tax purposes, basic customer information may be retained for up to 7 years. We may anonymise data for research or statistical purposes; anonymised data may be stored indefinitely.

9. Your Legal Rights

Under GDPR, you have the right to:

• Request access to your personal data
• Request correction of your data
• Request deletion
• Request restriction of processing
• Object to processing
• Request data portability
• Withdraw consent at any time (where consent is the legal basis)

To exercise any rights, contact us at: karlis@scaleshift.io

We may need to verify your identity before processing your request. We aim to respond within one month but may extend this period for complex requests.

If you are unhappy with how we handle your data, you may contact your local data protection authority. We ask that you contact us first so we can attempt to resolve the issue.

10. Third-Party Links

Our website may include links to third-party websites. We do not control these websites and are not responsible for their privacy policies. When leaving our website, we encourage you to read the privacy notice of any site you visit.

11. Cookies

We currently do not use cookies, tracking pixels, analytics, or any similar technologies on our website. If this changes in the future, we will update this policy and provide a clear cookie notice.