Privacy Policy

ScalePath OÜ (“ScalePath,” “we,” “us,” or “our”) is an Estonian private limited company registered in Tallinn, Estonia. We respect your privacy and are committed to protecting your personal data in accordance with the European Union General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) and the Estonian Personal Data Protection Act.

This Privacy Policy explains how we collect, use, store, and protect personal data when you interact with our website, products, or services.

The data controller responsible for your personal data is ScalePath OÜ, registered in Estonia. For any privacy-related inquiries, please contact us at privacy@scalepath.ee.

We may collect and process the following categories of personal data:

• Contact data: name, email address, phone number, and company details you provide via our contact or inquiry forms.
• Usage data: IP address, browser type, device information, pages visited, and interaction data collected through cookies and analytics.
• Communication data: records of correspondence when you email us or respond to our communications.
• Account data: where applicable, credentials and profile information for our SaaS platforms.

We process your personal data for the following lawful purposes:

• To respond to your inquiries and provide the information or services you request.
• To operate, maintain, and improve our website, products, and services.
• To analyze usage patterns and optimize user experience.
• To comply with legal, regulatory, and tax obligations under Estonian and EU law.
• To send relevant updates, where you have provided consent, which you may withdraw at any time.

Our legal bases for processing personal data under Article 6 of the GDPR include: (a) your consent; (b) performance of a contract or pre-contractual steps at your request; (c) compliance with a legal obligation; and (d) our legitimate interests in operating and securing our business.

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Inquiries and communication records are typically retained for up to 24 months after last contact.

We do not sell personal data. We may share data with trusted third-party service providers who process data on our behalf (e.g., hosting, analytics, email delivery), under written agreements that meet GDPR requirements. We may also disclose data where required by law or to protect our legal rights.

As an EU-based company, we primarily store and process data within the European Union. Where any data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

You have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data (“right to be forgotten”).
• Right to restrict or object to processing.
• Right to data portability.
• Right to withdraw consent at any time.
• Right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction, including encryption, access controls, and regular security reviews.

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised “last updated” date.

For any questions or requests regarding this Privacy Policy or your personal data, please contact us at privacy@scalepath.ee or write to ScalePath OÜ, Tallinn, Estonia.