Privacy policy

At Scalefinity we prioritise the privacy and security of our business partners. This policy explains how we collect, use and protect your data when you visit our website, submit information via our forms, schedule meetings or purchase our services. We operate in accordance with the General Data Protection Regulation (GDPR) and the Dutch Uitvoeringswet AVG.

1. Data controller

2. Data we collect

We collect information that you voluntarily provide to us, and technical data stored on your device by our website and the tools it runs on. Where the law requires it, non-essential storage is only used after you consent through our cookie banner.

• Identity and contact data. Name, business name, email address and phone number.
• Discovery and form data. We ask specific questions to understand your practice and whether we are a fit. This includes your goals, current bottlenecks, URLs and project requirements.
• Scheduling data. When you book a meeting with us we collect the date, time and any additional notes or topics you provide for the call. What you type into the booking form may also be stored temporarily in your own browser so the form can be completed across steps.
• Transaction data. Billing address and payment details. These are processed securely through Stripe and Wise. We do not store your full credit card or bank details on our own servers.
• Attribution and session data. GoHighLevel, the platform this site runs on, records how you arrived and how you move through the site. This includes the page you landed on, the referring source, a session identifier, the pages you visit and the time spent on each.
• Behavioural analytics. We use Microsoft Clarity to understand how visitors use our site. Clarity records page interactions such as mouse movement, clicks and scrolling, and combines this into session replays and heatmaps. Form fields and sensitive content are masked. Clarity sets cookies and collects technical data such as your browser, device type, operating system and approximate location derived from your IP address.
• Visitor identification. Our online data partners or vendors may use cookies and similar technologies to associate your activity on this site with other personal information they or others already hold about you, including by association with your email address. See section 8 for the full notice and how to opt out.
• Traffic analytics. We use Google Analytics to measure visits, traffic sources and which parts of the site are used. Google Analytics sets cookies containing a randomly generated identifier for your browser.

3. Cookies and similar technologies

Some of what we store sits in cookies, and some in your browser's local or session storage. Both are covered here. Essential items are needed for the site to work and are always present. Everything else only runs once you accept it in our cookie banner, and you can change or withdraw that choice at any time using the banner.

• Essential. __cf_bm for Cloudflare bot protection, set on scalefinity.agency, hub.scalefinity.agency, leadconnectorhq.com and filesafe.space, 30 minutes each. msgsndr_id to identify your visit to our booking funnel, 365 days. wl for the booking calendar. cookie-config to remember your cookie choice, 6 months.
• Functional. _ud and user_data_ keys, which keep what you have typed into the booking form so it is not lost between steps. These stay in your own browser.
• Analytics, consent required. Google Analytics sets _ga and a property key beginning _ga_ on both scalefinity.agency and leadconnectorhq.com, around 13 months, plus _gid for 24 hours. Microsoft Clarity sets _clck for 12 months and _clsk for 24 hours on our domain, and MUID on clarity.ms for around 12 months. GoHighLevel attribution keys beginning v2_ and v3_ record landing session, session history and page visit history. Our visitor identification partner RB2B sets _reb2bloaded, _reb2bsessionID (30 minutes), _reb2bgeo, _reb2bref (15 days), _reb2buid (360 days), _reb2bfxf, _reb2btd, _reb2bli, _reb2bresolve and _reb2butk. These are only set once you accept analytics cookies. See section 8. Some of these have no expiry date and remain until you clear your browser storage or withdraw consent.

4. How we use your data

• Qualification and strategy. To review your form answers and determine the best strategy for your funnel.
• Meeting coordination. To manage our calendar and prepare for discovery or strategy calls.
• Service delivery. To build, optimise and maintain your assets.
• Follow-ups and marketing. To contact you regarding your enquiry, provide updates on our services, or follow up on previous discussions to see if our services remain a fit for your business goals.
• Billing and accounting. To process payments and satisfy Dutch tax requirements.

5. Legal basis for processing

• Contractual necessity. To perform the services, or prepare a quote or strategy for you.
• Consent. When you voluntarily submit a form or book a meeting, and when you accept non-essential cookies and similar technologies through our banner. You can withdraw that consent at any time.
• Legitimate interest. To maintain a professional relationship with you, provide relevant follow-ups regarding our services, and understand how our site is used so we can improve it.
• Legal obligation. To maintain financial records for seven years as required by Dutch law.

6. Data sharing and third parties

We do not sell or trade your data. We only share it with essential service providers.

• GoHighLevel. Our CRM, calendar provider and website hosting platform. It also performs the attribution and session tracking described above.
• Google. Google Analytics, our traffic analytics provider. Google may use the data it collects in accordance with its own privacy policy.
• Online data partners and vendors. Third parties who may match your activity on this site to personal information they already hold, as described in section 8.
• Stripe and Wise. Our secure payment processors.
• Microsoft Clarity. Our behavioural analytics provider. Microsoft may use the data it collects in accordance with its own privacy statement. You can read it at privacy.microsoft.com/privacystatement.

7. International transfers

As GoHighLevel, Stripe, Wise, Microsoft, Google and our online data partners operate globally, your data may be processed in data centres outside the European Economic Area, including the United States. We ensure these transfers are compliant with GDPR through Standard Contractual Clauses.

8. Visitor identification and advertising

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting app.retention.com/optout.

9. Data retention

We retain your personal data, form submissions and meeting logs for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting or follow-up requirements.

• Leads and enquiries. We retain this data to facilitate future business discussions and follow-ups unless you explicitly request deletion.
• Financial records. Transaction data is kept for a minimum of seven years to comply with Dutch tax law.

10. Your rights

You have the right to access, correct or delete your data, and to withdraw your consent at any time. Cookie consent can be changed directly through the banner on our site. For anything else please contact us at [email protected].

11. Complaints

You have the right to lodge a complaint with the Autoriteit Persoonsgegevens.