Privacy Policy

1. Who we are

This Privacy Policy explains how personal information is collected and used when you visit this website or contact us. The party responsible for processing your personal information (the “controller”) is:

In this policy, “we”, “us” and “our” refer to Scalehaven Operations LLC, trading as Scalehaven Consulting.

2. Information we collect

a) When you visit this website

When you access the website, our hosting provider automatically processes technical information that your browser sends, such as your IP address, the date and time of access, the page requested, the referring URL, and your browser type and operating system (“server log data”). This is technically necessary to deliver the website and to protect it against misuse and attacks.

b) When you contact us

If you contact us by email, phone or via the contact form, we process the information you provide, such as your name, email address, phone number, company, role and the content of your message. The contact form does not transmit data to our servers; it prepares a message in your own email program, which you then send to us yourself.

c) What we do not use

This website does not use cookies, analytics or tracking tools, advertising pixels, social media plug-ins or externally loaded fonts. All fonts are hosted on our own website.

3. How we use your information

We use personal information only to:

• respond to your inquiry and, where requested, prepare a proposal;
• perform and administer engagements with our clients;
• operate, maintain and secure this website; and
• comply with legal, tax and accounting obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use your information for automated decision-making or profiling.

4. Legal bases (EEA, UK and Switzerland)

If the EU or UK General Data Protection Regulation (GDPR) or the Swiss Federal Act on Data Protection applies, we rely on the following legal bases:

• Art. 6(1)(b) GDPR – steps prior to entering into a contract, or performance of a contract, when your inquiry relates to a potential or existing engagement;
• Art. 6(1)(f) GDPR – our legitimate interests in answering general inquiries and in operating a secure, stable website;
• Art. 6(1)(c) GDPR – compliance with legal obligations, such as statutory retention requirements;
• Art. 6(1)(a) GDPR – your consent, where we ask for it. You may withdraw consent at any time with effect for the future.

5. Service providers and disclosures

We share personal information only where necessary and with service providers who process it on our behalf and under our instructions:

• Website hosting: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, which hosts this website and processes server log data.
• Email and IT services: providers that host our email and office systems.
• Professional advisors and authorities: lawyers, accountants and auditors, or public authorities where we are legally required to disclose information.

We are based in the United States, and our service providers may process information in the United States or other countries. Where transfers from the EEA, UK or Switzerland are subject to data protection law, they take place on the basis of an adequacy decision (including the EU-U.S. Data Privacy Framework, where the recipient is certified) or the European Commission’s Standard Contractual Clauses.

6. How long we keep information

We keep personal information only as long as necessary for the purposes described above. Inquiry correspondence is generally deleted no later than two years after our last contact, unless it leads to an engagement or statutory retention periods (for example, for commercial or tax records) require longer storage. Server log data is retained by our hosting provider for a limited period for security purposes.

7. Your privacy rights

U.S. state residents

Depending on your state of residence (for example California, Colorado, Connecticut, Virginia and other states with comprehensive privacy laws), you may have the right to know what personal information we collect and how we use it, to access, correct or delete your personal information, and to opt out of the sale or sharing of personal information or targeted advertising. As described above, we do not sell or share personal information or engage in targeted advertising. We will not discriminate against you for exercising any of these rights.

Visitors from the EEA, UK and Switzerland

You have the right to access your personal data, to have it rectified or erased, to restrict its processing, to data portability and to object to processing based on legitimate interests. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.

How to exercise your rights

To make a request, email us at info@scalehaven-consulting.com. We may need to verify your identity before responding. You may use an authorized agent where permitted by law. If we deny your request, you may appeal by replying to our decision.

8. Security

We use appropriate technical and organizational measures to protect personal information, including encrypted (HTTPS) connections for this website. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

9. Children

This website is intended for business audiences and is not directed to children. We do not knowingly collect personal information from children under the age of 16.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page, and the effective date below shows when it was last revised.

Effective date: October 17, 2026

11. Contact

If you have any questions about this Privacy Policy or how we handle personal information, please contact us: