Privacy notice
Your information should serve a clear purpose.
This notice explains who controls the personal information collected through ScalePass, why it is used and the choices available to you.
Effective 17 September 2026.
Who is responsible for your information
TECHOPS ONLINE LIMITED is the data controller for information collected through the ScalePass website, campaign landing pages, business email, the free audit and the Pipeline Control Review.
TECHOPS ONLINE LIMITED is a company registered in the United Kingdom under company number 13014658. Its registered office is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. Campbell Bryan Limited is its parent company; ownership alone does not make the parent a controller for this website.
For privacy questions or rights requests, email privacy@scalepass.co.uk.
Information we collect
We may receive your name, work email, organisation, role, team size, enquiry details and the non-sensitive operating context you choose to provide. We also receive ordinary technical and security information needed to deliver and protect the website. If you request the audit, the request form says what it asks for at the point you complete it.
Important. Do not submit passwords, credentials or unnecessary sensitive client data.
Why we use it
We use business enquiries and audit requests to reply, understand your operating requirements, assess service fit, prepare requested information or proposals, maintain business records, prevent misuse and protect our systems.
Our lawful bases
Depending on the interaction, processing is necessary for one of four reasons. To take steps at your request before entering a contract, or to perform one. To comply with a legal obligation. Or for legitimate interests: responding to enquiries, operating and improving the service, maintaining records and securing the website. Non-essential analytics are used only after analytics consent is recorded through Concord.
Who receives information
When you send an enquiry or audit request, the website transmits it to a monitored ScalePass inbox through an authorised transactional email provider. The website does not store what you submit. Information is then handled through authorised hosting, communications, support-desk, workflow, operational-record, diagnostic and analytics providers under the applicable approved process and privacy controls. Google Tag Manager and Umami analytics are loaded only after Analytics consent through Concord. We do not sell personal information.
Pipeline Control Review journey
The recruitment Pipeline Control Review asks for your first name, last name, work email, agency name and consultant or user band. The landing page is hosted by FlexiFunnels. On submission, the form sends those details to ScalePass’s authorised workflow service, which validates the expected fields, prevents duplicate records and creates a raw enquiry in AITable for human review. You are then sent to Cal.com, where you may choose to book a call under Cal.com’s applicable privacy terms.
The initial campaign does not use the Meta Pixel, conversion API, advertising cookies, embedded calendars or newsletter consent. Ordinary campaign parameters, such as source, campaign or advertisement identifiers, may be stored with the enquiry so we can understand where it came from. Submission does not trigger automated rejection or a decision with legal or similarly significant effects.
International transfers
Where a provider processes information outside the United Kingdom, we assess the transfer mechanism and use an applicable safeguard, such as UK adequacy regulations or approved contractual protections, where required.
How long we retain it
We keep information only for as long as needed for the stated purpose, an active business relationship, legal and accounting obligations, dispute handling, security, or suppression of unwanted contact. Retention periods vary with the record and are reviewed when the purpose ends.
For the Pipeline Control Review, an unbooked or unqualified submission is normally deleted or anonymised 90 days after the last meaningful interaction. A booked review that does not convert is normally retained for up to 12 months after the review or last meaningful interaction. A qualified opportunity is reviewed for deletion or anonymisation after 24 months without meaningful activity. We may retain a minimal suppression record where needed to honour an objection, and may retain relevant information longer where a legal obligation, dispute, security investigation or legal hold requires it.
Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction or portability; object to relevant processing; and withdraw consent without affecting earlier lawful processing. You may complain to the UK Information Commissioner’s Office at ico.org.uk.
For a Pipeline Control Review request, we search the relevant landing-page, workflow-execution, AITable, calendar and monitored-email records needed to answer the request. We keep completion evidence proportionate and avoid copying unnecessary personal information into the rights-request record.
Cookies and analytics
Concord manages consent preferences. Google Tag Manager and Umami analytics must not load before analytics consent, and ScalePass events stop following withdrawal. Read the cookie notice for the current categories and controls.
Changes to this notice
We will update the effective date and this page when material practices change. Contact privacy@scalepass.co.uk if you need this notice in another format.