Who we are
Scale Studios is a growth studio for small businesses, based in Surrey, United Kingdom. The data controller is Scale Studios Business Ltd (trading as Scale Studios), company no. 17243015, registered office Fiscal House, 367 London Road, Camberley, Surrey GU15 3HQ. You can reach us at contact@scalestudios.co.uk.
What we collect, and where from
✓
Enquiries and the contact form. Your name, the email address or phone number you give us, and whatever you write in your message. When you press Send, our website host (Framer) passes your message to our email inbox so a founder can reply. It is also added to a private list we keep in Google Sheets. Messages sent before 8 October 2026 are held in our earlier database on Cloudflare.
✓
The free 60-second check on our homepage. Your five answers stay in your browser, only to show you your result. They are not saved and not sent to us. Before 8 October 2026 the check worked differently: answers were stored without a name in our earlier database on Cloudflare, with contact details only where someone chose to leave them.
✓
The “Where’s Your Week Going?” check (retired September 2026). If you took it, we hold your answers to the 12 questions, your first name and email address, and whether you asked us to call. We used it to build your report and to follow up if you asked us to. It is stored in our own database on Cloudflare, not with any third party.
✓
Meta (Facebook and Instagram) lead forms. If you fill in one of our forms inside a Meta ad, Meta passes us the details you submit, usually your name, email and answers to the form questions.
✓
Newsletter signups. Your email address if you join a waitlist or newsletter.
✓
Email and calls. Whatever you share with us when we work together or talk about working together.
✓
Business details we look up ourselves, before you have ever heard of us. If we think our services might suit your business, we may get in touch directly. In that case we did not get your details from you. We got them from public sources: your own business website, your public entry on a regulator’s register (for law firms, the Solicitors Regulation Authority’s public register), Companies House, or a public business listing such as Google Maps. What we hold is business information only: the business name and address, its website, a business phone number, a business email address, the name and job title of a named contact where the business itself publishes it, what the business does, and its company or registration number. We record where each detail came from and the date we found it. We do not look up your personal, non-work contact details, and we never buy marketing lists.
Our website does not set advertising or analytics cookies. The contact form is handled by our website host, Framer, and by no one else.
Why we use it (our lawful bases)
✓
To reply to you and deliver what you asked for (your free check report, an answer to your enquiry, a call). Lawful basis: taking steps at your request before entering a contract, and consent where you gave it.
✓
To understand what visitors need from the anonymous answers given to the free 60-second check before 8 October 2026. These answers do not include your name or contact details and are not used to identify you. Lawful basis: our legitimate interest in understanding which problems small businesses bring to us, so we can improve what we offer.
✓
To see how many people visit our pages. Our website host counts visits without cookies and without storing anything that identifies you. To tell one visit from another on the same day, it briefly turns your IP address and browser type into a scrambled code using a key that is deleted every day. We see totals only, such as how many people read a page. We cannot see who you are. Lawful basis: our legitimate interest in knowing which pages are useful.
✓
To run our business relationship if you become a client (invoices, reports, delivery). Lawful basis: contract.
✓
To tell you about relevant services where you have enquired or opted in. Lawful basis: consent or legitimate interest in business-to-business contact. Every marketing email includes an unsubscribe link, and we stop the moment you ask.
✓
To approach a business we have not worked with before, using the public business details described above. Lawful basis: our legitimate interest in offering our services to businesses they may suit. We have written that decision down, along with the balance behind it, and you are welcome to ask us for a copy. We only do this where the business is a limited company or an LLP. We do not send this kind of email to sole traders or to ordinary partnerships. Every one of these emails says plainly who we are, comes from a named person here, and stops for good the moment you tell us to.
We never sell your data. We never share it with anyone except the service providers below.
Who processes it for us
✓
Tally (our contact form until 30 September 2026. Messages sent before then are held there. New messages are not).
✓
Google Workspace (email, and the private list of contact form messages).
✓
Meta (if you interact with our ads or lead forms, Meta processes data under its own privacy policy).
✓
Beehiiv (newsletters and waitlists).
✓
Framer (website hosting, the contact form, and the anonymous visit counts described above). Framer B.V. is based in Amsterdam and acts on our instructions under a data processing agreement. Its hosting runs on Amazon Web Services, including servers in the United States.
✓
Cloudflare (our domain settings, and the earlier database holding free-check and contact form submissions made before 8 October 2026).
Some providers store data outside the UK. Where they do, transfers are protected by recognised safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU standard contractual clauses, or the UK Extension to the EU-US Data Privacy Framework.
Cookies
Our own website sets no advertising or analytics cookies. Our host counts visits without using cookies at all. The only thing we store on your device is a small note of whether you have seen our intro animation. It stays in your browser and is never sent anywhere.
If we switch on the Meta Pixel to measure our ads, a banner will ask you first. Nothing loads until you choose, Reject is as easy as Accept, and you can change your mind any time using the Cookie choices link in the footer. If you accept, the Pixel sets a first-party cookie (called _fbp, lasting 90 days) and tells Meta which of our pages you visited, so we can measure and improve our advertising. If you reject, the Pixel never loads. Our contact form sets no cookies.
How long we keep it
Enquiries and free-check submissions: up to 2 years from our last contact, then deleted. To have a check submission removed sooner, email us and we will delete the record. Client records: for the length of our work together plus 6 years, as UK tax and legal rules require. Newsletter data: until you unsubscribe.
Business details we looked up ourselves: 6 months from our last contact with you, then deleted. If we looked your business up but never actually got in touch, 3 months from the day we found the details, then deleted. The one thing we keep for good is a short suppression record (your email address and business name) for anyone who has told us to stop. We keep it precisely so that we can honour that, and so that nobody here can add you back by accident.
Your rights
You can ask us at any time to access, correct, delete or hand over the personal data we hold about you, to restrict or object to how we use it, and to withdraw consent. Email contact@scalestudios.co.uk and a founder will sort it, normally within a few days and always within a month.
Telling us to stop marketing to you is absolute. You do not have to give a reason, we cannot refuse, and we will not ask you to reconsider. Reply to any email from us with “stop”, or email contact@scalestudios.co.uk, and that is the end of it permanently. If you are unhappy with how we handle your data, you can complain to the UK regulator, the Information Commissioner’s Office.
Children
Our services and website are for business owners and are not aimed at children. We do not knowingly collect data from anyone under 16.
Changes
If we change this policy, the new version appears here with a new date at the top. Big changes get flagged to anyone they affect.