Privacy Policy
This policy explains what personal information ScaleFlow ("we", "us") collects when you use our website and our services, how we use it, and the choices you have. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and other privacy law that applies.
1. What we collect
- Information you give us. When you use a form (contact, call request, plan request) we collect your name, phone number, email address, business name, type of business, current website, desired domain, and any message or notes you write.
- Quick-answer chat. Messages you type into the on-site chat are answered in your browser by scripted replies. We don't receive or store them.
- Technical data. Our hosting provider and other infrastructure automatically log standard data such as IP address, browser type, pages requested and timestamps, to deliver the site and keep it secure. When you submit a form, our server briefly uses your IP address to limit repeated submissions and block spam. We don't keep it with your enquiry.
- Site analytics. We count visits and button clicks (for example, which pages are viewed and whether someone requests a call) using Plausible Analytics, which doesn't use cookies and doesn't build profiles of individual visitors.
- Records of our work with you. Emails, invoices, project files and payment records if you become a client.
2. How we use it
- To reply to your messages, call you back and give you quotes.
- To build, launch and support your website and CRM.
- To invoice, take payment, keep financial records and meet legal and tax obligations.
- To run, secure and improve our website and services.
- To send you information about your order. We only send marketing messages if you've agreed to receive them, and every one includes a way to unsubscribe, as Canada's Anti-Spam Legislation requires.
We rely on your consent, which you give when you submit a form and tick the agreement box. You can withdraw it at any time (see section 7).
3. Who we share it with
We don't sell your personal information. We share it with service providers who process it on our behalf, only as needed to provide their service:
- Web3Forms. Delivers the forms you submit on our site to our email inbox. Your submission passes through our own server first, which checks it for spam.
- Plausible Analytics. Provides privacy-focused, cookie-free statistics about how our site is used.
- Cloudflare Turnstile (if shown). If a spam check appears on a form, Cloudflare receives limited browser information to tell people from bots.
- Google (Gmail). Hosts the email inbox where we receive form submissions and correspond with you.
- Netlify. Hosts our website.
- Google Fonts. Delivers the fonts used on our pages. Your browser requests them from Google, which receives your IP address.
- Payment processors and CRM, messaging and domain providers. If you become a client, the providers we use to take payment, run your CRM, send messages and register your domain receive the information they need to do so.
We may also disclose information if the law requires it, to enforce our terms, or to protect people's safety, and as part of a sale or reorganization of our business.
4. Processing outside Canada
Some of these providers are based in, or process data in, the United States and other countries. Your information may therefore be stored or accessed outside Canada and can be subject to the laws and lawful access requests of those places.
5. How long we keep it
We keep enquiries for as long as needed to respond and follow up, and we delete them when they're no longer needed. Client records are kept while we provide services and afterwards for as long as the law requires. Canadian tax law generally requires financial records to be kept for six years.
6. Security
We use reasonable safeguards, including encrypted connections (HTTPS), access controls on our accounts and limiting data to what we need. No system is perfectly secure, so please don't send us sensitive information such as card numbers or government ID through our forms.
7. Your choices and rights
You can ask us to: tell you what personal information we hold about you; correct it; delete it where we're not required to keep it; and stop contacting you. You can withdraw consent at any time, subject to legal or contractual limits, though that may mean we can no longer provide a service. Email scaleflownowoffical@gmail.com and we'll respond within 30 days. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
8. Cookies and tracking
Our website doesn't use advertising cookies or tracking cookies. We use Plausible Analytics, which counts visits without cookies or personal profiles. Our hosting and fonts providers may log requests as described in section 3. If we add other tracking tools in future, we'll update this policy.
9. Our clients' customers
When we build or run a CRM, booking or messaging system for a client, the client decides what information about their own customers is collected and how it's used. We process that information for the client, on their instructions, and the client is responsible for having consent and for answering their customers' privacy requests. If you're a customer of one of our clients, contact that business first.
10. Children
Our website and services are for businesses and aren't directed at children. We don't knowingly collect information from anyone under 16. If you think a child has sent us information, email us and we'll delete it.
11. Changes and contact
We may update this policy and will change the date above when we do. For material changes we'll also tell you by email if we have your address. Questions or requests: scaleflownowoffical@gmail.com. See also our Terms of Service and Refund Policy.