Scalexa Consulting / privacy
A clear view of what happens to your information.
This notice explains what information we use, why we use it and how you can exercise your privacy rights.
For website visits, project enquiries, bookings and privacy requests.
01 / Who is responsible
The organisation responsible for this site.
FLUXSCALE LIMITED (company number 14247405), trading as Scalexa, is the controller of personal information described in this notice. Its registered office is 27 Swanton Road, Dereham NR19 2HH. This notice covers the Scalexa website and the project enquiries, bookings and privacy requests made through it.
We do not use personal information from an enquiry to make a decision about you solely by automated means.
02 / Information we use
Information you choose to share and site signals.
A project enquiry or booking may include your name, reply email address, company or role, project context, the meeting details you give Calendly and the contents of your message. A privacy request may include your name, reply email address and the details needed to identify the information or right involved.
The website also receives basic technical information used to deliver and protect the service. Optional analytics and first-party marketing measurement are used only after you give consent. Please do not include passwords, payment details, special category data or other sensitive information in a website message.
03 / Purposes and lawful bases
We match each use to its purpose.
The UK GDPR requires a lawful basis for each purpose. The table describes the bases used for the website flows covered by this notice.
| Purpose | Lawful basis |
|---|---|
| Answering project enquiries and administering a booking you request | Contract or steps you ask us to take before entering a contract |
| Handling privacy-rights requests and keeping records required by law | Legal obligation |
| Optional Google Analytics, first-party marketing attribution and Calendly-click measurement | Consent, including any consent required by PECR |
| Website security and abuse prevention | Legitimate interests in protecting the website, its users and our business |
| Other business records | Legal obligation where required; otherwise legitimate interests in ordinary administration and establishing or defending claims |
05 / International transfers
Some providers process information internationally.
Calendly’s current documentation says it stores user and invitee data in US-based data centres and may process or store it in the US or other jurisdictions. It describes transfers to the United States under the applicable Data Privacy Framework. Its documentation also identifies Standard Contractual Clauses (SCCs), with the UK Addendum where applicable, for transfers where the framework is unavailable or no longer applies. These are safeguards reported by Calendly; they do not verify the settings of a particular booking account. See Calendly’s data storage and international transfer information.
Google says UK measurement data is collected through UK, EU or Swiss servers before it may be forwarded outside the UK to Analytics servers for processing. Google identifies the UK Extension to the EU–US Data Privacy Framework for applicable transfers to the United States and says SCCs may apply to certain transfers where it has not adopted, or no longer adopts, another transfer framework. These are vendor-reported safeguards, not confirmation of this website’s Google Analytics account settings. See Google’s UK data handling information and international transfer information.
Polsia’s published privacy information says its platform data may be transferred to, stored and processed in the United States or other countries. The current public platform documents do not establish which locations or transfer mechanism apply to this particular contact-message and email-fallback flow. Refer to Polsia’s current platform processing terms for those details.
06 / Retention and security
We keep information for a relevant period.
We retain enquiry, booking and privacy-request information for as long as it is needed for the purpose collected, to maintain records required by law, or to establish or defend a claim. The appropriate period depends on the record and its purpose; we do not state one fixed period for every submission.
We use practical access controls and limit access to people and providers who need the information to support the relevant purpose. No online service can be guaranteed to be completely secure.
07 / Your rights and requests
You can ask us to review your information.
Depending on the circumstances, you may have the right to:
- Access your personal information.
- Have inaccurate or incomplete information rectified.
- Request erasure of your information.
- Request restriction of processing.
- Object to processing where the right applies.
- Receive or transfer information where the right to portability applies.
You can make a rights request or raise a privacy concern using the form below. Please give enough detail to help us locate the relevant record, but do not include passwords or sensitive information. We may ask for proportionate information to verify your identity or authority before acting. We will review the request, explain any limits that apply and tell you how it has been handled.
Privacy-rights request
Tell us what you would like us to review.
We use your name, reply email address and message to identify and respond to your request.
You may also complain to the Information Commissioner’s Office (ICO) if you are concerned about how we have used your information. The ICO explains how to make a data protection complaint.
We follow the ICO’s guidance on lawful bases and data protection rights.
08 / Analytics and cookies
Optional measurement is off until you consent.
Google Analytics, first-party marketing attribution and Calendly-click measurement are optional. We do not send names, reply email addresses or project details in these measurement events. Where consent is required by PECR, we obtain it before placing or reading the relevant non-essential storage or similar technology. You can withdraw analytics consent at any time; withdrawal affects future measurement and does not change the lawfulness of processing before withdrawal.
09 / Policy changes
We will keep this notice current.
We may revise this notice when the website or its information practices change. The revision date at the top shows when this version was updated.