Privacy Policy

This policy explains what the SCALE™ Business Dependency & Scale Assessment (the “service”) collects about you, why, who can see it, and what choices you have. The service is run by Tahaseen Khan, Business Scale & Transformation Strategist (“we”, “us”). We have tried to keep it short and plain.

1. What we collect

• Your account: your name, email address and password. If you use Google to sign in, we receive your name and email from Google instead. Your password is handled by Google Firebase Authentication and is stored in scrambled (hashed) form. We never see it.
• Your business details: phone number, company name, your role, industry, team size, country and city.
• Your assessment: your answers to the 30 questions, your score and zone, your lowest-scoring area, your action map, and whether you asked for a Strategy Session.
• Unfinished sign-ups: sign-up has two steps. If you finish step 1 (name, email, password) but not step 2, we keep what you entered so you can continue later. We may also use the email to remind you.
• Technical data: your approximate country is read from your connection by our hosting provider, only to pre-select your country in the form; we do not store it. Our service providers (see section 4) may log technical data such as IP address and browser type for security and to keep the service running.

We do not use advertising cookies or third-party analytics trackers. Your browser stores a small sign-in token (in local storage or IndexedDB) so you stay signed in. It is needed for the service to work.

2. Why we use it

• To create your account, run the assessment, save your progress and show you your personalised report.
• To contact you about your results and the Strategy Session, when you have agreed to that when signing up.
• To confirm your email address, prevent spam and fake sign-ups, and keep the service secure.
• To understand, in aggregate, how people score, so we can improve the assessment.

We rely on your consent (the box you tick when you sign up), and on our legitimate interest in keeping the service secure. You can withdraw consent at any time (see section 6).

3. Who can see your information

Only you and the people who run the service (an admin dashboard shows leads and their reports). We do not sell your information. We may share it if the law requires it.

4. Service providers we use

• Google Firebase (Authentication, Cloud Firestore database, App Check) stores your account and data and checks that requests come from a real browser. Google reCAPTCHA is used for that check.
• Vercel hosts the website.
• flagcdn.com supplies the small country flag pictures in the phone-number and country menus. Your browser downloads them from there, so that service sees your IP address.
• Google, only if you choose “Continue with Google”.

These providers process data for us under their own security and privacy terms. Their servers may be outside your country, including outside India.

5. How long we keep it

We keep your information while your account exists and for as long as we need it for the reasons above, or until you ask us to delete it.

6. Your choices and rights

• See and correct your details: open your profile any time to update them.
• Ask for a copy, deletion, or to withdraw your consent: contact us (below) from the email address on your account. We will act on your request within a reasonable time.
• Complain: if you are in India you can raise a concern with the Data Protection Board of India under the Digital Personal Data Protection Act, 2023. If you are in the UK or EU, you can contact your local data protection authority.

7. Security

Connections use HTTPS. Access to the database is controlled by security rules, so a signed-in person can read only their own record. Admin access is limited to named accounts. No system is perfectly secure, so please use a strong, unique password.

8. Children

The service is meant for business owners and professionals. It is not for anyone under 18, and we do not knowingly collect their information.

9. Changes to this policy

If we change how we use your information in a meaningful way, we will update this page and the date at the top, and ask for your consent again where the law requires.

10. Contact

For any privacy question or request, reply to any email we have sent you, or use the “Request my Strategy Session” button in your report and mention your request.