Privacy & Data Protection Policy

Tier 1 — Website & Business Contact Data. Name, agency name, business email, phone number, billing details and site analytics collected when you book a call, submit a form or browse the site. For this data Skaling360 acts as Data Controller.

Tier 2 — Client / End-Customer Data Processed on Your Behalf. CRM contacts, leads, campaign records and communications inside your platforms. For this data Skaling360 acts solely as Data Processor, under your instructions and our Data Processing Agreement (DPA). We never use it for our own purposes.

Contract (Art. 6(1)(b)): delivering the fulfilment services you engage us for, onboarding and billing.

Legitimate interests (Art. 6(1)(f)): responding to enquiries, securing our systems, improving service quality — balanced against your rights.

Consent (Art. 6(1)(a)): analytics cookies and optional marketing communications, withdrawable at any time.

Legal obligation (Art. 6(1)(c)): tax, accounting and statutory record retention.

Strictly necessary cookies keep the site secure and functional and are set without consent, as permitted by law.

Analytics and performance cookies are set only after you consent, and can be declined or withdrawn at any time without losing access to the site.

We never sell, rent or trade your data to external advertising networks.

We engage a limited set of vetted sub-processors to deliver our services: Slack (communication), ClickUp (project management), 1Password (credential vaulting), GoHighLevel (CRM and campaign delivery) and Zapier / n8n (automation).

Each sub-processor is bound by confidentiality and data protection terms at least as protective as those in our own agreement with you. We notify partners of material changes to this list.

Encryption in transit using TLS 1.3 and at rest using AES-256.

Credentials held in encrypted vaults with mandatory multi-factor authentication and least-privilege access, granted per engagement and revoked promptly on rotation or termination.

Access logging, device security standards and staff confidentiality agreements across every delivery pod.

You may request access, correction, deletion, restriction, portability, or object to processing; California residents may additionally request disclosure of data categories and opt out of sale (we do not sell data).

Send any data subject request to info@skaling360.com. We acknowledge within 5 business days and respond within 30 days. Tier 2 requests are routed to the agency partner acting as Controller.