Privacy policy

Last updated

Who we are

Scaledex Limited (“Scaledex”, “we”) is the controller of the personal data described in this policy. Our office is at House 8/B, Road 1, Gulshan-1, Dhaka 1212, Bangladesh. Questions about this policy and requests about your data go to admin@scaledex.com.

What this policy covers

This policy covers the website at scaledex.com and the contact form on it. It does not cover the products we build for clients, which have their own policies, and it does not cover other websites we link to.

What we collect on the contact form

When you send a message through our contact page we store: your name, your email address, your message, the time you sent it, the page you sent it from, and the hostname on which the Cloudflare Turnstile check that confirms the message came from a person rather than a script was passed.

When you send the form, our API uses your IP address for two things only: to limit how many messages one connection can send in a minute, and to pass to Cloudflare together with the Turnstile token so the token can be verified. We do not store it, and the form sets no cookies. The Turnstile check runs inside the widget on the page. Cloudflare processes technical signals from your browser to reach a verdict, does not read what you type into the form, and we receive only the verdict. Cloudflare’s Turnstile privacy addendum at cloudflare.com/turnstile-privacy-policy describes what it processes.

Why we use it

We use what you send to reply to you and to keep a record of the conversation while we discuss or carry out work together. That is a legitimate business need: you contacted us, and we need your details to answer.

We do not use your details for marketing unless you ask us to, we do not build profiles from them, and we do not sell them.

Who processes it for us

Cloudflare, Inc. hosts the site and runs the services behind the form. Your submission is stored in a Cloudflare D1 database whose primary location is set to Cloudflare’s Asia-Pacific region. The notification that a message has arrived is delivered through Cloudflare’s Email Service. The human check is Cloudflare Turnstile. Site usage is measured by Cloudflare Web Analytics, which sets no cookies, uses no browser storage for tracking and does not fingerprint visitors.

Google LLC, through Google Workspace, provides our company mailboxes. A copy of each submission is delivered by email to a Scaledex mailbox so that we can reply, and it stays there under Google’s terms for as long as we keep the email thread. Google LLC also provides Google Analytics 4, which measures how the site is used, and Google AdSense, which serves the advertisements on our blog pages; what each collects and how to avoid it is described under “Cookies and tracking” below.

Both providers act on our instructions under their standard data-processing terms. We use no other processors for the website, and we share your data with nobody else unless the law requires it.

Where it is stored

The site is served from Cloudflare’s network worldwide. Delivering a page involves Cloudflare seeing your IP address, as it does with any host; our own code never handles it except when you send the contact form, as described above, and we do not store it. Form submissions are stored in a database whose primary location is set to Cloudflare’s Asia-Pacific region; Cloudflare places the database as close to that region as it can but does not guarantee the exact location. The email copy is stored by Google Workspace, which may hold data in data centres outside your country.

How long we keep it

Contact submissions are deleted from our database automatically. A scheduled job runs on the first day of each month and removes every submission older than 12 months, so a record is gone no later than 13 months after it was sent. Cloudflare keeps point-in-time backups of the database for disaster recovery, so a deleted record can remain in those backups for up to 30 days before it is gone for good.

The email copy stays in our mailbox for as long as the conversation is useful to both of us, and is deleted on request.

Deleting or correcting your data

Email admin@scaledex.com from the address you used and we will delete or correct what we hold about you, usually within a few working days, and confirm when it is done. You can also ask us what we hold. If the law where you live gives you further rights, for example under the EU or UK GDPR, we will honour them.

Cookies and tracking

Pages under /blog carry advertisements served by Google AdSense; no other part of the site shows ads. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this or other websites: Google’s advertising cookies (such as the DoubleClick cookie) let it and its partners serve ads to you based on your visit to scaledex.com and other sites on the internet. You can opt out of personalised advertising at Google’s Ads Settings (https://www.google.com/settings/ads), or opt out of some third-party vendors’ personalised ads at https://www.aboutads.info/choices. If you are visiting from the European Economic Area, the United Kingdom or Switzerland, Google’s consent message asks for your choice before any personalised ad is shown; without consent you see non-personalised ads only. The rest of the site sets no advertising cookies and has no tracking pixel.

If you choose a light or dark theme, that preference is stored in your browser’s local storage on your own device. It is never sent to us.

Cloudflare Web Analytics measures page views and load performance without cookies, browser storage or fingerprinting, and reports aggregated numbers to us.

Google Analytics 4 measures which pages are visited, how visitors arrive and how they move through the site. It is loaded only after a page has finished rendering. If you are visiting from the European Economic Area, the United Kingdom or Switzerland, it runs without cookies or persistent identifiers and Google models the aggregate figures instead; elsewhere it sets the first-party cookies _ga and _ga_* on your device for up to two years to recognise a returning browser. Google LLC processes this data on our behalf under Google’s data-processing terms; IP addresses are truncated by Google before storage, advertising features and Google Signals are switched off, and we retain event data for 14 months. Blocking scripts from googletagmanager.com, or a browser setting such as a content blocker, stops the measurement entirely and the site works exactly the same.

Email you send us directly

If you email contact@scaledex.com or another Scaledex address, your message is stored in our Google Workspace mailbox and handled the same way: used to reply to you, shared with nobody, and deleted on request.

Changes to this policy

When we change this policy we update the date at the top of the page. Substantive changes, such as a new processor or a longer retention period, are described here at the time we make them.

Contact

Scaledex Limited, House 8/B, Road 1, Gulshan-1, Dhaka 1212, Bangladesh. Email admin@scaledex.com or call +880 1300 23 23 23, Sunday to Thursday, 9:00–18:00 (GMT+6).