ScaleLocal
Request a Local SEO Review

Privacy Policy

Last updated:

IMPACTENGINE DIGITAL LLP, operating under the ScaleLocal brand ("ScaleLocal", "we", "us", or "our"), respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit scalelocal.io, contact us, or engage our local SEO and related digital marketing services.

ScaleLocal is operated from India and works with businesses in India and other markets, including the United States, Australia, Canada, and the United Kingdom. We handle personal information in accordance with laws that apply to the relevant processing, including applicable Indian data-protection and information-technology laws and, where they apply, privacy laws in the jurisdictions in which we offer services.

Questions or privacy requests can be sent to hi@scalelocal.io or made by phone at +91 90149 97870.

1. Scope of this Policy

This Policy applies to website visitors, prospective and current clients, client representatives, vendors, and other people whose personal information we process for our own business purposes. It also applies to information submitted through our contact and enquiry channels.

When ScaleLocal processes personal information solely on a client's documented instructions while delivering services, the client generally determines the purposes of that processing. In that situation, the applicable service agreement or data-processing terms govern our processing, and the client's own privacy notice may also apply.

2. Information we collect

  • Identity and contact information, such as your name, business name, job title, email address, telephone number, country, and preferred contact method.
  • Enquiry and onboarding information, such as your service interests, locations or service areas, website details, business goals, campaign brief, budget or timing information, and information you choose to include in a form, email, call, or meeting.
  • Service and account information, such as project settings, authorised user details, platform access permissions, campaign records, approvals, reports, and support requests.
  • Billing and transaction information, such as billing contacts, invoicing details, tax information, payment status, and transaction references. Payment-card details, if required, are handled by the relevant payment provider and are not intended to be stored on our website servers.
  • Communications, such as emails, meeting notes, call notes, feedback, approvals, and records of support or service-related correspondence.
  • Website and technical information, such as IP address, browser and device type, operating system, pages requested, referring URL, approximate location derived from IP address, timestamps, error information, and security logs.
  • Information from authorised platforms and public sources, such as business listings, websites, search results, analytics or advertising accounts, review platforms, directories, and other sources that you authorise us to access or that are lawfully available to the public.

Our services are not designed to require sensitive personal information. Please do not send government identification numbers, financial account credentials, health information, biometric information, or other sensitive data unless we have specifically agreed that it is necessary and established an appropriate secure process.

Where platform access is required, we prefer delegated, role-based, or client-controlled access. If credentials or access tokens are provided, we use them only for the agreed purpose and expect both parties to apply appropriate security controls.

3. How we collect information

  • Directly from you when you use our website, open or submit an enquiry form, email or call us, attend a meeting, accept a proposal, complete onboarding, or communicate during an engagement.
  • From your employer, colleagues, authorised representatives, referral partners, or other people acting on your behalf.
  • From platforms and accounts that you authorise us to access for service delivery.
  • Automatically through website infrastructure, essential technologies, server logs, and security controls.
  • From public business sources, including company websites, public directories, business profiles, review platforms, and professional networks.

4. How we use information

  • Respond to enquiries, assess fit, prepare proposals, and communicate with you.
  • Set up, provide, manage, and improve local SEO, Google Business Profile, Google Maps, website, content, citation, reputation, measurement, reporting, and related services included in an agreed scope.
  • Administer client relationships, obtain approvals, provide support, invoice for services, maintain business records, and manage access and offboarding.
  • Operate, secure, troubleshoot, and improve our website, systems, processes, and service quality.
  • Measure service activity and performance where the agreed access, data quality, and tracking setup permit.
  • Send service messages and, where permitted, relevant marketing communications. You can opt out of marketing at any time.
  • Prevent fraud, misuse, security incidents, and violations of our agreements.
  • Comply with legal, tax, accounting, regulatory, and dispute-resolution obligations and enforce our rights.
  • Create aggregated or de-identified information that does not reasonably identify an individual, for analysis and service improvement.

The legal ground we rely on depends on the context and applicable law. It may include performing a contract or taking requested steps before a contract; your consent; our legitimate interests in operating, improving, securing, and marketing our business where those interests are not overridden by your rights; and compliance with legal obligations. Where applicable law recognises other permitted or legitimate uses, we may rely on them only as allowed by that law.

You may withdraw consent at any time for future processing that depends on consent. Withdrawal does not affect processing that was lawful before withdrawal, and it does not prevent processing that is required or permitted on another legal ground.

6. Cookies, forms, analytics, and similar technologies

Our website may use technologies that are necessary to deliver pages, maintain security, remember essential choices, and support requested functions. You can control many cookies through your browser, but blocking essential technologies may affect website operation.

ScaleLocal uses a hosted Tally form for enquiries. Tally may receive the information you submit, the page URL, query parameters, and limited technical data needed to provide the form. Review Tally's privacy policy before submitting information if you would like more detail about its practices.

The current public brochure deployment does not use Google Analytics or Microsoft Clarity. If we introduce non-essential analytics, advertising, session-replay, or similar technologies, we will update this Policy and implement consent or opt-out controls where required before using them.

7. How we disclose information

We do not sell or rent personal information. We also do not share personal information for cross-context behavioural advertising. We may disclose information in the following limited circumstances:

  • Service providers that support hosting, forms, email, communications, project management, document storage, security, billing, professional advice, or other business operations. They may use information only to provide the relevant service, subject to their contracts and applicable law.
  • Platforms and partners involved in an engagement, such as search engines, business-profile services, analytics or reporting platforms, directories, website providers, and client-authorised contractors.
  • Professional advisers, auditors, insurers, banks, and tax or legal authorities where reasonably necessary.
  • Government bodies, regulators, courts, law-enforcement authorities, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, and security.
  • A buyer, investor, successor, or adviser involved in a proposed or completed merger, restructuring, financing, transfer, or sale of all or part of our business, subject to appropriate confidentiality protections.
  • Other parties when you direct us to disclose information or give valid consent.

8. Client data and authorised account access

A client is responsible for ensuring that it has the authority and a lawful basis to provide personal information, content, account access, and instructions to ScaleLocal. The client must give any notices and obtain any permissions required for ScaleLocal and authorised providers to perform the agreed services.

We access client systems and personal information only as reasonably necessary for the agreed scope, documented instructions, security, and legal compliance. If an engagement requires ScaleLocal to process personal information on a client's behalf, the parties may enter into appropriate data-processing terms addressing instructions, confidentiality, security, subprocessors, assistance, deletion or return, and international transfers.

9. International processing and transfers

ScaleLocal operates from India and may work with clients and service providers in other countries. As a result, information may be accessed, stored, or processed in India, the United States, Australia, Canada, the United Kingdom, or another country where an authorised provider operates.

Privacy laws and government-access rules differ between countries. Where applicable law requires safeguards for an international transfer, we use reasonable contractual, technical, and organisational measures appropriate to the transfer and the nature of the information.

10. Data retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing services, maintaining business and financial records, managing access, resolving disputes, enforcing agreements, and meeting legal, tax, accounting, or regulatory requirements.

Retention periods vary according to the nature and sensitivity of the information, the relationship, security needs, limitation periods, and legal obligations. When information is no longer required, we take reasonable steps to delete, securely destroy, or de-identify it. Residual copies may remain temporarily in protected backups until they are overwritten in the ordinary cycle.

11. Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information against unauthorised access, disclosure, alteration, loss, or misuse. Measures may include access controls, least-privilege permissions, secure transmission, authentication controls, logging, vendor review, and procedures for revoking access.

No internet transmission or storage method is completely secure. You are responsible for protecting your own accounts, devices, passwords, and authorised users and for notifying us promptly if you suspect that access connected with our services has been compromised.

12. Your rights and choices

Depending on your location and the law that applies, you may have the right to ask us to access, correct, update, complete, delete, or provide a copy of your personal information; restrict or object to certain processing; withdraw consent; opt out of direct marketing; or complain to a privacy or data-protection authority. Some laws may also provide rights relating to portability, nomination, appeal, or automated decision-making.

These rights are not absolute. We may need to verify your identity and authority, and we may retain or withhold information where permitted or required by law, including to protect another person's rights, preserve legal privilege, meet record-keeping duties, or establish, exercise, or defend legal claims.

To exercise a privacy right, email hi@scalelocal.io with the subject line “Privacy request” and describe your request and your relationship with ScaleLocal. We will respond within the period required by applicable law.

13. Marketing preferences

You can opt out of marketing emails by using the unsubscribe link in the message or contacting us. We may still send non-marketing communications that are necessary for an enquiry, active service, security matter, transaction, or legal notice.

14. Automated decisions

We do not use personal information collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects. If this changes, we will provide any notice and choices required by applicable law.

15. Children's privacy

Our website and services are intended for businesses and adults. They are not directed to children, and we do not knowingly collect personal information from anyone under 18 through this website. If you believe a child has provided personal information to us, please contact us so we can review and, where appropriate, delete it.

16. Third-party websites and platforms

Our website and services may link to or interact with third-party websites and platforms. Their privacy practices are governed by their own notices and terms. ScaleLocal is not responsible for a third party's independent handling of personal information.

17. Complaints

If you have a privacy concern, please contact us first so we can investigate. Provide enough information for us to understand the issue, but do not email passwords or other unnecessary sensitive data. We will acknowledge and address complaints in accordance with applicable law. You may also have the right to complain to the relevant privacy or data-protection authority in your jurisdiction.

18. Changes to this Policy

We may update this Privacy Policy to reflect changes in our services, technology, providers, or legal obligations. We will post the revised version on this page and update the “Last updated” date. Where required by law, we will provide additional notice or request consent before a material change takes effect.

19. Contact us

Privacy and grievance contact: