Welcome to ScaleOpsHQ.

ScaleOpsHQ (“ScaleOpsHQ,” “Company,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the confidentiality, integrity, and security of the personal information entrusted to us.

This Privacy Policy describes how we collect, use, process, store, disclose, transfer, and protect personal information when you visit our website, communicate with us, engage our consulting services, use the ScaleOpsHQ Command Center, apply for employment opportunities, attend our events, subscribe to our communications, or otherwise interact with ScaleOpsHQ.

As a business consulting and operational transformation company serving organizations globally, we recognize that privacy and information security are fundamental to maintaining the trust of our clients, partners, employees, and website visitors. Accordingly, we have implemented administrative, technical, contractual, and organizational safeguards designed to protect personal information throughout its lifecycle.

This Privacy Policy is intended to comply with applicable privacy and data protection laws, including, where applicable:

• The General Data Protection Regulation (GDPR)
• The UK GDPR
• The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA)
• Other applicable United States federal and state privacy laws
• Other international privacy and data protection laws applicable to our operations

Nothing in this Privacy Policy limits any legal rights available under applicable law.

This Privacy Policy applies to personal information collected through:

• The ScaleOpsHQ website
• Contact forms
• Strategy call booking forms
• Consultation requests
• Client onboarding processes
• The ScaleOpsHQ Command Center
• Email communications
• Business development activities
• Marketing campaigns
• Social media interactions
• Online webinars and virtual events
• Recruitment and employment applications
• Surveys and feedback forms
• Any other services offered by ScaleOpsHQ unless a separate privacy notice specifically applies

This Privacy Policy applies whether you interact with us as a website visitor, prospective client, existing client, vendor or service provider, business partner, job applicant, contractor, event participant, newsletter subscriber, or any other individual who interacts with ScaleOpsHQ.

This Privacy Policy does not apply to third-party websites, products, platforms, or services that may be linked from our website. Those services are governed by their own privacy policies.

ScaleOpsHQ is a business growth, operational excellence, and systems implementation company that partners with organizations to eliminate operational bottlenecks, optimize revenue operations, improve execution, and build scalable operating systems for sustainable growth.

Our services may include:

• Business consulting and revenue optimization
• Operational transformation and organizational design
• Systems implementation and business process improvement
• Strategic advisory services and performance optimization
• Workflow automation and artificial intelligence implementation
• Executive advisory services
• Business intelligence and reporting
• Client success consulting and technology integration

As part of delivering these services, we may process business information and personal information on behalf of our clients.

Depending on the nature of our relationship with you, ScaleOpsHQ may act either as a Data Controller or as a Data Processor.

ScaleOpsHQ acts as a Data Controller when we determine the purposes and means of processing personal information for our own business operations. This includes managing our website, marketing our services, responding to inquiries, recruiting employees, managing supplier relationships, operating the ScaleOpsHQ business, maintaining security, conducting analytics, and providing newsletters and updates.

ScaleOpsHQ may act as a Data Processor when we process information on behalf of our clients as part of providing consulting, operational, automation, implementation, or advisory services. In these situations, our clients remain responsible for determining the purposes and legal basis for processing. We process such information only in accordance with documented client instructions and applicable contractual obligations.

The categories of personal information we collect depend on how you interact with us.

When you visit our website, certain information is collected automatically through cookies, log files, analytics technologies, and similar tools. This information helps us maintain website security, improve performance, diagnose technical issues, understand visitor behavior, enhance user experience, measure the effectiveness of our content and marketing efforts, and optimize our digital services.

Information collected automatically generally does not directly identify you on its own; however, when combined with other information, it may constitute personal information under applicable privacy laws.

ScaleOpsHQ uses cookies, web beacons, pixels, local storage, and similar technologies (“Cookies”) to improve the functionality, performance, security, and usability of our website and digital services. Cookies are small text files placed on your device when you visit a website.

Necessary for the operation and security of our website. They enable core functionality such as page navigation, secure access to protected areas, form submissions, and session management. Without these cookies, certain features may not function properly.

Allow us to remember your preferences, language settings, and other customizations to provide a more personalized browsing experience.

Help us understand how visitors interact with our website by collecting aggregated information regarding website traffic, visitor journeys, popular pages, user engagement, session duration, navigation behavior, and conversion events.

Assist us in identifying technical issues, optimizing loading times, improving reliability, and enhancing overall website performance.

ScaleOpsHQ uses Google Analytics to better understand how visitors interact with our website. Google Analytics collects information such as pages visited, time spent on pages, navigation paths, device and browser information, geographic region (general location), referral sources, and user engagement metrics.

Google Analytics uses cookies and similar technologies to generate aggregated reports that help us improve our website and services. The information generated may be transmitted to and stored on servers located in the United States or other jurisdictions where Google operates.

We do not use Google Analytics to intentionally collect sensitive personal information. You can learn more about Google’s privacy practices through Google’s Privacy Policy and may opt out using Google’s browser add-on where available.

To operate our business efficiently and deliver our services, ScaleOpsHQ uses HubSpot and other trusted third-party service providers. These providers assist us with customer relationship management, marketing automation, email communications, appointment scheduling, client onboarding, project management, cloud hosting, document management, customer support, security monitoring, data backup, business analytics, internal collaboration, and workflow automation.

These providers process information only on our behalf and only for the purposes necessary to deliver services to ScaleOpsHQ. Where appropriate, we require our service providers to maintain appropriate contractual, technical, and organizational safeguards. Our use of third-party providers does not permit them to use your information for their own independent marketing purposes unless you separately engage with those providers.

ScaleOpsHQ provides certain clients with access to our secure client portal known as the ScaleOpsHQ Command Center, designed to facilitate collaboration, project execution, operational management, reporting, workflow visibility, document sharing, and client communications.

When clients use the Command Center, we may process user account information, login credentials, authentication records, project documentation, operational data, uploaded documents, reports, workflow information, communications, tasks, activity logs, usage history, and audit records.

Access to the Command Center is restricted to authorized users. We implement appropriate technical and administrative safeguards including access controls, authentication measures, and security monitoring. Clients remain responsible for ensuring that authorized users maintain appropriate account security.

ScaleOpsHQ incorporates artificial intelligence (“AI”) technologies and workflow automation tools to improve the efficiency, accuracy, scalability, and quality of our services. AI technologies may be used to assist with workflow optimization, operational analysis, process automation, business intelligence, internal productivity, data organization, reporting, documentation, knowledge management, administrative support, and client workflow improvements.

Where AI tools process client information, such processing is conducted only for the purpose of delivering agreed services, improving operational efficiency, or enhancing client outcomes, subject to appropriate confidentiality and security measures.

ScaleOpsHQ processes personal information only where necessary to operate our business, fulfill contractual obligations, provide services, improve our offerings, comply with legal requirements, or pursue legitimate business interests. We may use personal information to:

• Respond to inquiries and schedule consultations
• Deliver consulting services and manage client engagements
• Provide access to the Command Center
• Develop operational strategies and improve business processes
• Communicate with clients and respond to support requests
• Improve website functionality and analyze performance
• Conduct research, analytics, and develop new services
• Recruit employees and evaluate job applicants
• Protect against fraud and maintain information security
• Enforce our agreements and comply with legal obligations
• Exercise and defend legal claims

We will not use personal information for purposes materially different from those described in this Privacy Policy without providing appropriate notice where required.

Where applicable under the General Data Protection Regulation (GDPR) and similar laws, ScaleOpsHQ processes personal information on one or more of the following legal bases:

Processing necessary to provide requested consulting services, manage client relationships, or fulfill contractual obligations.

Processing necessary for our legitimate business interests, including improving our services, managing operations, preventing fraud, securing our systems, conducting analytics, communicating with clients, and developing our business. We balance these interests against the rights and freedoms of affected individuals.

Where required by law, we rely on your consent, including for certain marketing communications or optional cookies. Consent may be withdrawn at any time, subject to applicable legal requirements.

Processing necessary to comply with applicable laws, regulations, court orders, or governmental requests.

In limited circumstances, processing may be necessary to protect the vital interests of an individual or another person.

Confidentiality is a fundamental principle of ScaleOpsHQ’s client relationships. Information provided by our clients is treated as confidential and is used solely for delivering contracted services, supporting client operations, improving service quality, fulfilling contractual obligations, maintaining secure client records, and providing ongoing support.

We do not sell, rent, or commercially exploit confidential client information. Access to client information is limited to authorized personnel, contractors, and approved service providers who require access to perform their responsibilities and who are subject to appropriate confidentiality obligations. Where appropriate, confidentiality obligations are further governed by contractual agreements, including non-disclosure agreements (NDAs) and client service agreements.

ScaleOpsHQ stores and processes information primarily on secure infrastructure located within the United States. Because we serve clients globally, personal information may be transferred to, stored in, or accessed from countries other than the country in which it was originally collected.

Where personal information is transferred internationally, we implement appropriate safeguards designed to protect such information in accordance with applicable data protection laws. These safeguards may include contractual protections, technical security measures, organizational controls, and other legally recognized transfer mechanisms.

By using our services or providing information to ScaleOpsHQ where permitted by law, you acknowledge that your information may be transferred to and processed in the United States and other jurisdictions in connection with the delivery of our services.

If you subscribe to our newsletter, request resources, register for an event, download content, or otherwise opt to receive communications from ScaleOpsHQ, we may send you industry insights, business updates, thought leadership content, event invitations, service announcements, product and service information, educational materials, and marketing communications.

You may opt out of receiving promotional communications at any time by using the unsubscribe link included in our emails or by contacting us directly. Even if you opt out of marketing communications, we may continue to send you important administrative or transactional communications relating to your client relationship, account, or services.

ScaleOpsHQ does not sell, lease, rent, or trade personal information to third parties for monetary consideration. We disclose personal information only where necessary to operate our business, deliver our services, comply with legal obligations, or protect our legitimate interests.

We engage carefully selected third-party service providers including cloud hosting providers, CRM providers, email communication platforms, document management providers, cybersecurity providers, data backup and recovery providers, IT support providers, analytics providers, collaboration and productivity platforms, marketing service providers, recruitment platforms, and AI and workflow automation providers. These providers are contractually required to process personal information only for authorized business purposes and to implement appropriate safeguards.

We may disclose personal information to our legal counsel, accountants, auditors, insurers, consultants, and other professional advisors where necessary to obtain professional services or comply with legal obligations.

If ScaleOpsHQ is involved in a merger, acquisition, investment, financing, reorganization, sale of assets, or similar corporate transaction, personal information may be transferred as part of that transaction, subject to applicable confidentiality obligations and legal requirements.

We may disclose information where required to comply with applicable laws and regulations, respond to lawful requests from courts, regulators, or governmental authorities, enforce our agreements and policies, detect, investigate, or prevent fraud, cyber threats, or other unlawful activities, or protect the rights, safety, property, or security of ScaleOpsHQ, our clients, our personnel, or others.

We may disclose personal information to other parties where you have expressly authorized or directed us to do so.

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including providing our services, maintaining business records, complying with legal obligations, resolving disputes, enforcing agreements, and protecting our legitimate interests. Retention periods may vary depending on the nature of the information, the purpose for which it was collected, contractual obligations, applicable legal, tax, accounting, or regulatory requirements, and ongoing business needs.

When personal information is no longer required, we will securely delete, anonymize, or otherwise dispose of it using commercially reasonable methods designed to prevent unauthorized access or recovery. Backup copies may remain in secure archives for a limited period as part of our disaster recovery and business continuity processes.

Protecting client information is a core priority at ScaleOpsHQ. We maintain administrative, technical, and physical safeguards designed to protect personal information against accidental loss, unauthorized access, misuse, disclosure, alteration, and destruction.

• Role-based access controls and identity management
• Password protection and credential management
• Encryption of data in transit using industry-standard protocols
• Encryption of sensitive data at rest where appropriate
• Secure cloud infrastructure and network security controls
• Continuous security monitoring, logging, and audit trails
• Regular software updates, patch management, and vulnerability assessments
• Backup and disaster recovery procedures
• Personnel training on information security and confidentiality
• Vendor security assessments where appropriate

Depending on your jurisdiction and applicable law, you may have certain rights regarding your personal information. These rights may include the ability to:

• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of personal information, subject to applicable legal exceptions
• Request restriction of certain processing activities
• Object to processing based on legitimate interests
• Withdraw consent where processing is based on consent
• Request portability of certain personal information
• Request information regarding disclosures of your personal information
• Submit complaints to applicable supervisory authorities

We will respond to verified requests within the timeframes required by applicable law. To protect your privacy and security, we may require reasonable verification of your identity before fulfilling a request.

Individuals located within the European Economic Area (EEA), the United Kingdom, and other jurisdictions with similar privacy laws may have additional rights under applicable legislation, including:

• The right of access
• The right to rectification
• The right to erasure (“right to be forgotten”)
• The right to restrict processing
• The right to data portability
• The right to object to processing
• Rights relating to automated decision-making where applicable
• The right to withdraw consent where consent is the legal basis for processing
• The right to lodge a complaint with the competent supervisory authority

Where ScaleOpsHQ processes personal information on behalf of a client as a Data Processor, requests relating to such information may be referred to the relevant client, who acts as the Data Controller.

Residents of California may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). Subject to applicable exceptions, California residents may request:

• Access to categories of personal information collected
• Access to specific pieces of personal information
• Correction of inaccurate personal information
• Deletion of personal information
• Information regarding categories of personal information disclosed
• Information regarding categories of third parties with whom personal information has been shared
• Limitation of the use of sensitive personal information where applicable

ScaleOpsHQ’s website, services, and client offerings are intended for businesses, professionals, and individuals who are at least eighteen (18) years of age. Our services are not directed toward children under the age of thirteen (13), and we do not knowingly collect personal information from children.

If we become aware that personal information has been collected from a child in violation of applicable law, we will take reasonable steps to delete such information as promptly as practicable. Parents or legal guardians who believe that a child has provided personal information to ScaleOpsHQ may contact us using the contact information provided in this Privacy Policy.

Individuals applying for employment or contractor opportunities through the ScaleOpsHQ Careers page may provide personal information during the recruitment process, including contact information, employment history, educational qualifications, professional certifications, CV or résumé, cover letters, references, interview notes, assessment results, work authorization information, and other information voluntarily submitted.

We use recruitment information solely for purposes related to evaluating candidates, communicating with applicants, making hiring decisions, maintaining recruitment records, and complying with applicable employment laws. Unless otherwise required by law or agreed with the applicant, recruitment information will not be used for unrelated marketing purposes.

Our website may contain links to third-party websites, software applications, social media platforms, or online services for your convenience. ScaleOpsHQ does not control and is not responsible for the privacy practices, content, or security of third-party websites or services. Your interactions with third-party services are governed by their respective privacy policies and terms of use. We encourage you to review those policies before providing personal information to any third-party website or platform.

ScaleOpsHQ has appointed a Data Protection Officer (“DPO”) to oversee our privacy program, monitor compliance with applicable data protection laws, respond to privacy-related inquiries, and support the continuous improvement of our information governance practices.

The Data Protection Officer is responsible for monitoring compliance with applicable privacy and data protection laws, advising the organization on privacy obligations, overseeing internal privacy policies and procedures, supporting privacy impact assessments where appropriate, coordinating responses to data subject requests, serving as a point of contact for privacy-related inquiries and regulatory matters, and promoting privacy awareness and best practices throughout the organization.

Privacy-related questions or concerns may be directed to our Data Protection Officer using the contact information provided in the “Contact Us” section of this Privacy Policy.

ScaleOpsHQ maintains incident response procedures designed to identify, investigate, contain, and remediate actual or suspected security incidents involving personal information. If we determine that a data breach involving personal information has occurred, we will take appropriate action consistent with applicable law, which may include:

• Investigating the nature and scope of the incident
• Securing affected systems and mitigating potential harm
• Notifying affected clients or individuals where required
• Reporting the incident to applicable regulatory authorities where legally required
• Implementing corrective measures to reduce the likelihood of similar incidents

Our response procedures are reviewed periodically as part of our broader information security and business continuity programs.

ScaleOpsHQ maintains business continuity and disaster recovery measures designed to support the ongoing availability, integrity, and resilience of our services. These measures may include secure data backups, redundant infrastructure where appropriate, disaster recovery planning, business continuity testing, incident response procedures, and recovery and restoration processes.

While no continuity program can eliminate all risks, we regularly evaluate and improve our operational resilience to minimize service disruptions and protect client information.

Confidentiality is a foundational principle of every client relationship at ScaleOpsHQ. All employees, contractors, consultants, and authorized personnel with access to confidential information are expected to maintain strict confidentiality and are subject to contractual or legal confidentiality obligations.

Client information is accessed only on a need-to-know basis and solely for legitimate business purposes directly related to the delivery, support, and improvement of our services. We do not use confidential client information for unrelated commercial purposes, nor do we disclose such information except as authorized by the client, required by law, or otherwise described in this Privacy Policy.

Some internet browsers provide a “Do Not Track” (“DNT”) feature that allows users to signal their preference regarding online tracking. Because there is currently no universally accepted standard governing how websites should respond to DNT signals, ScaleOpsHQ does not currently respond differently to browser-based Do Not Track requests. We will continue to monitor developments in applicable standards and may update our practices as industry guidance evolves.

ScaleOpsHQ reserves the right to modify or update this Privacy Policy at any time to reflect changes in our services, changes in applicable laws or regulations, technological developments, changes to our business operations, or improvements to our privacy practices.

When material changes are made, we will update the “Effective Date” at the beginning of this Privacy Policy and, where required by law, provide additional notice through our website or other appropriate communication channels. Your continued use of our website or services after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated Privacy Policy, to the extent permitted by applicable law.

This Privacy Policy shall be governed by and interpreted in accordance with the laws of the State of New York and applicable federal laws of the United States, without regard to its conflict of law principles. Nothing in this Privacy Policy limits any rights that individuals may have under mandatory privacy or consumer protection laws applicable in their jurisdiction.

ScaleOpsHQ is committed to making this Privacy Policy accessible and understandable. If you require this Privacy Policy in an alternative format or need assistance understanding its contents, please contact us, and we will make reasonable efforts to accommodate your request where practicable.

If you have any questions, requests, or concerns regarding this Privacy Policy, our privacy practices, or the processing of your personal information, please contact us using the details below.

For privacy-related matters, including requests to exercise your privacy rights, inquiries regarding this Privacy Policy, or communications for our Data Protection Officer, please contact us using the email address above. We will use reasonable efforts to acknowledge your request promptly and respond within the timeframes required by applicable law.

By accessing or using the ScaleOpsHQ website, submitting information to us, engaging our services, creating an account within the ScaleOpsHQ Command Center, applying for employment opportunities, or otherwise interacting with ScaleOpsHQ, you acknowledge that you have read, understood, and accepted the practices described in this Privacy Policy.

Where required by applicable law, we will obtain your consent before processing personal information for purposes that require such consent. If you do not agree with this Privacy Policy, you should discontinue use of our website and services or otherwise refrain from providing personal information to ScaleOpsHQ.