Data Processing Policy

At The Scale Up Collective Ltd, we are committed to protecting the privacy and data rights of individuals. As a small research and marketing agency, we process limited amounts of personal data on behalf of our clients, and we do so with care, transparency, and purpose.

1. Purpose of Data Processing

We process personal data solely to deliver our research and marketing services. This includes:

• Conducting qualitative and/or quantitative research
• Managing surveys or interviews
• Supporting targeted marketing campaigns
• Analysing or reporting customer insights

We do not use personal data for any purpose other than what is agreed with our clients.

2. Types of Data We Process

We may process the following types of data:

• Basic contact information (e.g., name, email, phone number)
• Demographic details (e.g., age, gender, location)
• Research responses (e.g., survey answers or interview transcripts)
• Marketing engagement data (e.g., open rates or click-throughs)

We avoid collecting or storing any sensitive personal data unless explicitly required and agreed upon.

3. Legal Basis for Processing

We act as a data processor on behalf of our clients, who act as data controllers. We process personal data under their instructions and in accordance with relevant data protection laws, such as the UK GDPR or EU GDPR.

4. Data Storage and Security

We store data securely using trusted platforms and tools with appropriate access controls. Data is only accessible to authorised team members and is protected against unauthorised access, loss, or misuse.

5. Data Sharing and Transfers

We do not sell or share personal data with third parties unless:

• Instructed by the client
• Required by law
• Necessary to deliver our services (e.g., trusted software providers under appropriate agreements)

6. Data Retention

We only retain personal data for as long as necessary to fulfil our services or comply with legal obligations. After this period, data is securely deleted or anonymised.

7. Rights of Individuals

We support the rights of individuals under data protection laws, including the right to access, correct, or delete their data. Where appropriate, we assist our clients in responding to data subject requests.

8. Contact

If you have any questions about this policy or how we handle data, please contact Lucy Woolfenden (lucy@thescaleupcollective.com)