This policy explains what personal data ScaledOS collects, why, how it is used, and your rights under UK GDPR and the Data Protection Act 2018.
Scaled Consulting Limited ("Scaled", "we", "us", "our") operates the ScaledOS platform at scaledos.com. We are the Data Controller for personal data collected through this platform.
Registered address: Old Warden, St. Anns Fort, King's Lynn, England, PE30 1QS.
If you have questions about this policy or how we handle your data, contact us at privacy@scaled.co.uk.
We do not collect payment card details. We do not collect special category data (health, ethnicity, political views, etc.) and ask that you do not submit any.
| Purpose | Data used |
|---|---|
| Providing the ScaledOS platform and running your diagnostics | All account and diagnostic data |
| Sending your EV score, health score and priority actions | Email address, diagnostic outputs |
| Improving the EV benchmark and scoring model | Anonymised, aggregated diagnostic data only - never identifiable to you or your company |
| Sending product updates, new features and educational content (if opted in) | Email address, name |
| Routing high-intent leads to the Scaled advisory team (ScaledOS Lite) | Email, company name, revenue band, banded EV signal - only if you submitted through the Lite flow |
| Responding to your enquiries and support requests | Email address and any information you share with us |
| Platform security, fraud prevention and abuse detection | IP address, session data |
| Complying with legal obligations | As required by applicable law |
Under UK GDPR, we rely on the following lawful bases:
We do not sell your data. We share it only as follows:
Our development partner processes data on our behalf during the build and maintenance of ScaledOS. They operate under a Data Processing Agreement and are bound by confidentiality obligations. They do not use your data for any other purpose.
ScaledOS is hosted on Google Cloud Platform with UK/EEA data residency. Google processes data as a sub-processor under standard contractual clauses.
If you use the AI-assisted P&L extraction feature, your uploaded document is sent to the Google Gemini API (paid tier). Google's paid API does not use your data to train its models. Only the document you upload is sent - your name, email and account details are never transmitted. See the AI and your data section below for full detail.
If you complete the ScaledOS Lite diagnostic, your email address, company name, revenue band and banded EV signal may be shared internally with the Scaled consulting team to follow up. This is disclosed at the point of submission.
We may disclose data if required to do so by law, court order, or to protect the rights, property or safety of Scaled, our users or others.
| Data type | Retention period |
|---|---|
| Account data (email, name, company) | For the duration of your account, plus 2 years after deletion |
| Diagnostic submissions and EV scores | For the duration of your account - this is the historical trend data the platform depends on |
| P&L uploads | Retained for your account session; raw files deleted within 30 days of upload |
| Marketing email records (consent/opt-out) | 6 years from last interaction (legal obligation) |
| Anonymised benchmark data | Indefinitely - this data cannot be reversed to identify you |
| Server logs (IP, session) | 90 days |
Under UK GDPR you have the following rights. To exercise any of them, email privacy@scaled.co.uk. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
ScaledOS uses AI in one specific, optional feature: automated extraction of financial figures from an uploaded P&L document.
The Buyer's Verdict feature generates a simulated acquirer perspective from your EV score and domain sub-scores only - it does not receive your raw financials, your name, or any identifying information.
We do not use any free AI tiers, consumer AI products, or AI tools that train on submitted data.
We use cookies and similar technologies. See our Cookie Policy for full details, including how to manage your preferences.
We may update this policy as the platform develops. We will notify registered users of material changes by email at least 14 days before they take effect. The date at the top of this page shows when it was last updated.
For any privacy questions, data subject access requests, or to exercise your rights:
Email: privacy@scaled.co.uk
Post: Scaled Consulting Limited, Old Warden, St. Anns Fort, King's Lynn, England, PE30 1QS
