Privacy Policy and Data Protection

This Privacy Policy explains how ScalePlant (“we”, “us”) processes personal data when you visit our websites, use our platform or dashboards, communicate with us, or otherwise interact with our Services.

We are committed to protecting your privacy and processing personal data lawfully, fairly, and transparently.

We may collect: (a) identity and contact data, such as your name, email address, and company name; (b) account and technical data, including login identifiers, IP address, device and browser type, and approximate location derived from IP; (c) usage data, such as pages viewed, features used, and timestamps; (d) communications you send us, including support messages and form submissions; and (e) billing data where you purchase paid services (processed by our payment providers).

We may receive limited data from analytics or advertising partners where you have consented to such technologies in line with our Cookie Policy.

When you book a call, through the calendar on this website or at dashboard.scaleplant.com, we collect your name, email address and the day and time you chose, and, if you give them, your phone number, your company and a message. We also record the language of your browser, so the confirmation arrives in your language, and the page you booked from.

We use personal data to: provide, operate, and improve the Services; authenticate users and secure accounts; communicate with you about the Services, updates, and support; analyse usage to understand performance and product development; comply with legal obligations; and enforce our terms and protect rights, safety, and security.

Where we rely on legitimate interests, we balance those interests against your rights. Where consent is required (for example for certain cookies or marketing), we will obtain it separately.

We use booking details to confirm the call, create the Google Meet room, send the confirmation and any reminder, and follow up on what you asked about. The booking system is our own and this processing is needed to provide the call you requested (performance of a contract, Article 6(1)(b) GDPR). We do not use booking details for marketing unless you have separately agreed to it.

Depending on the processing activity, we rely on one or more of: performance of a contract; legitimate interests; consent; compliance with a legal obligation; or, in limited cases, protection of vital interests.

When you use our free website checker, we fetch the public web page whose address you enter and ask Google PageSpeed Insights how fast it loads. The address you enter is not personal data in itself, and nothing on your website is changed.

If you ask us to send you the full report, we collect your email address. We use it to email you the PDF report, which you requested (performance of a contract, Article 6(1)(b) GDPR). A copy of the request, with your email address, the website checked and its score, also goes to our team and to our customer records, so we can answer you if you reply (legitimate interest, Article 6(1)(f) GDPR).

We will only email you about fixing the results if you tick the optional box that says so. That box is never ticked for you and the report is sent whether you tick it or not. We record when you ticked it (consent, Article 6(1)(a) GDPR, and Article 13-A of Portuguese Law 41/2004). You can withdraw consent at any time by replying to any of our emails or contacting us, and we will stop. We do not send newsletters from the checker and we never sell or share your email address for others' marketing.

The report itself is kept in our server's memory for 45 minutes so the PDF can be produced, then discarded. Your email address and the request are kept in our email and customer records for as long as needed to answer you, and at most 24 months after our last contact, unless you ask us to delete them sooner. Emails are sent through our email provider, Resend, acting as our processor.

We share personal data with service providers who assist us (for example hosting, email delivery, analytics, and payment processing) under written agreements that require appropriate safeguards.

Our booking system runs on our own dashboard, hosted by our infrastructure providers under written agreements. Confirmation and reminder emails are sent through Resend, Inc., our email provider, acting as our processor. Video calls use Google Meet (Google Ireland Ltd.); when you join a call, Google processes data under its own privacy policy.

We may disclose information if required by law, to enforce our terms, or to protect users and the public. If we are involved in a merger or acquisition, personal data may be transferred as part of that transaction subject to appropriate protections.

Where personal data is transferred outside the United Kingdom or the European Economic Area, we implement appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or other mechanisms recognised under applicable law.

We retain personal data only for as long as necessary for the purposes described in this policy, including to satisfy legal, accounting, or reporting requirements. Retention periods vary by data category and context.

We implement technical and organisational measures designed to protect personal data against unauthorised access, loss, or alteration. No method of transmission over the internet is completely secure; we encourage strong passwords and safe account practices.

Depending on your location, you may have rights to access, rectify, erase, restrict, or object to certain processing, and to data portability. You may also withdraw consent where processing is consent-based, and lodge a complaint with a supervisory authority.

To exercise your rights, contact us using the details on our website. We will respond within the timeframe required by applicable law.

Our Services are not directed at children under 16, and we do not knowingly collect personal data from children. If you believe we have collected such data, please contact us so we can delete it.

We may update this Privacy Policy from time to time. We will post the revised policy on our website and adjust the “Last updated” date. Material changes may require additional notice where required by law.

For privacy-related requests or questions, please contact us through the channels provided on our website.