Privacy Policy

1. Introduction

ScaleHouse Agency ("we", "us", or "our") operates scalehouse-agency.com (the "Site"). This Privacy Policy explains what personal data we collect, why we collect it, and the rights you have over that data.

This policy is designed to comply with the European General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable U.S. state privacy laws.

2. Data we collect

Information you provide directly

• Contact form: your name, email address, and the content of your message.
• Creator inquiries: when you reach out about representation, we may collect your social media handles, audience information, and career background.
• Brand inquiries: company name, contact details, and campaign requirements.

Information collected automatically

• Technical data: IP address, browser type, device information, and pages visited.
• Cookies and similar technologies: see our Cookie Policy for details.

3. How we use your data

• To respond to your inquiry and provide our services.
• To evaluate creators for potential representation.
• To negotiate and manage campaigns with brands and partner networks.
• To improve, secure, and analyze the performance of our Site.
• To comply with legal, accounting, and reporting obligations.

4. Legal basis for processing (GDPR)

For users in the European Economic Area, we process data based on:

• Consent — when you submit the contact form or accept non-essential cookies.
• Contractual necessity — to take steps before entering into a representation or campaign agreement.
• Legitimate interests — to secure our Site, prevent fraud, and improve our services.
• Legal obligation — to meet applicable regulatory or tax requirements.

5. Who we share data with

We do not sell your personal data. We may share it with the following categories of recipients, only as necessary:

• Brand partners and advertising networks — to facilitate campaigns and deals you have agreed to.
• Service providers — email delivery, hosting, and analytics tools that help us operate the Site.
• Professional advisors — lawyers and accountants bound by confidentiality.
• Legal authorities — when required by law or to protect our rights.

6. International data transfers

Your data may be processed in the United States or other countries where we or our service providers operate. Where required by the GDPR, we rely on appropriate safeguards such as Standard Contractual Clauses to protect transfers outside the EEA.

7. Data retention

We keep personal data only as long as necessary for the purposes set out in this policy, to comply with legal obligations, or to resolve disputes. Inquiry data is typically retained for up to 24 months unless we begin a working relationship.

8. Your rights

GDPR rights (EEA, UK, and Switzerland)

• Access — obtain a copy of your personal data.
• Rectification — correct inaccurate or incomplete data.
• Erasure ("right to be forgotten").
• Restriction or objection to processing.
• Data portability — receive your data in a structured format.
• Withdraw consent at any time, without affecting prior processing.
• Lodge a complaint with your local data protection authority.

CCPA/CPRA rights (California residents)

• Know — the categories and specific pieces of data we collect, and whether it is sold or shared.
• Delete — request deletion of your personal data.
• Correct — request correction of inaccurate data.
• Opt-out — of any "sale" or "sharing" of personal data for cross-context behavioral advertising. We do not sell personal data.
• Non-discrimination — we will not treat you differently for exercising your rights.

To exercise any right, contact us at hello@scalehouse-agency.com. We will respond within 30 days (GDPR) or 45 days (CCPA), as applicable.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect your data. However, no method of transmission over the Internet is fully secure, and we cannot guarantee absolute security.

10. Children's privacy

Our Site and services are not directed to children under 13 (COPPA) or under 16 (GDPR). We do not knowingly collect their data. If you believe we have done so, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent version. Material changes will be highlighted on the Site.