Privacy Policy

1. Who we are

ScaleLayR is responsible for the processing of personal data as described in this privacy policy.

• Company name: ScaleLayR
• Chamber of Commerce (KVK): [KVK-NUMBER]
• Address: [ADDRESS], The Netherlands
• Email: info@scalelayr.com

2. What data we collect

We only collect data that you voluntarily provide through our forms or email:

• Contact form: name, email address, company name (optional), selected services, message
• Project form (Start): name, email address, company name (optional), project type, budget indication, message
• Email communication: name, email address, content of correspondence
• Invoicing: company name, address, VAT number, contact person

3. Why we collect this data

We process your data for the following purposes:

• Service delivery: to respond to your inquiry, prepare a proposal and deliver our services
• Communication: to contact you about your project or question
• Customer database: to maintain our relationship and assist you with future projects
• Marketing: to keep you informed about relevant services, updates and offers (only with your consent)
• Invoicing: to send invoices and process payments
• Legal obligation: to comply with tax and accounting requirements

4. Legal basis

We process your data based on:

• Consent: you give consent when submitting a form and checking the privacy checkbox
• Performance of a contract: for delivering the services you engage us for
• Legitimate interest: for maintaining our customer database and improving our services
• Legal obligation: for tax and accounting purposes

5. Retention periods

• Contact details and project data: maximum 2 years after last contact, unless there is an active client relationship
• Customer database: for the duration of the client relationship and maximum 2 years after
• Invoicing data: 7 years (legal retention requirement)
• Marketing: until you unsubscribe or withdraw your consent

6. Sharing with third parties

We do not share your data with third parties unless it is necessary for our services or we are legally required to do so. Where applicable, we use:

• Cloudflare: for hosting, security, bot verification (Turnstile) and website analytics (Cloudflare Web Analytics). Cloudflare processes limited technical data (IP address, browser, page views) in accordance with their privacy policy. Cloudflare Web Analytics does not use cookies and does not track individual visitors.
• Email provider: for sending messages and invoices

We never sell your data to third parties.

7. Cookies and analytics

Our website uses no tracking cookies, no Google Analytics, no Meta Pixel and no other advertising cookies.

We use Cloudflare Web Analytics to collect anonymous visitor statistics (page views, countries, device types). This is a privacy-friendly alternative that:

• Does not use cookies
• Does not track or identify individual visitors
• Does not collect personal data
• Is fully GDPR-compliant without requiring consent

Cloudflare may additionally place functional cookies for security (e.g. bot detection). These are strictly necessary and do not require consent.

8. Security

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss or misuse. Our website is hosted on Cloudflare with HTTPS encryption, and form data is protected by Cloudflare Turnstile and multiple anti-spam measures.

9. Your rights

Under the GDPR, you have the following rights:

• Access: you may request which data we hold about you
• Rectification: you may have incorrect data corrected
• Erasure: you may request deletion of your data
• Restriction: you may request restriction of processing
• Data portability: you may request your data in a structured format
• Objection: you may object to processing based on legitimate interest
• Withdraw consent: you may withdraw your consent at any time

Contact us at info@scalelayr.com to exercise your rights. We will respond within 30 days.

10. Complaints

If you have a complaint about how we handle your data, you can contact us. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

11. Changes

We may update this privacy policy from time to time. The most recent version is always available on this page. For significant changes, we will notify you via email or a notice on our website.