Skip to main content
ScalePass
ServicesAboutBlog
Book a call
  • Services→
  • About→
  • Blog→
Book a call→

Privacy notice

Your information should serve a clear purpose.

This notice explains who controls the personal information collected through ScalePass, why it is used and the choices available to you.

First effective 17 September 2026

Cookies and analytics→

On this page

  1. Who is responsible for your information
  2. Information we collect
  3. Why we use it
  4. Our lawful bases
  5. Who receives information
  6. Pipeline Control Review journey
  7. International transfers
  8. How long we retain it
  9. Your rights
  10. Cookies and analytics
  11. Changes to this notice

Who is responsible for your information

TECHOPS ONLINE LIMITED is the data controller for information collected through the ScalePass website and its enquiry form, ScalePass campaign landing pages, business email and the Pipeline Control Review.

TECHOPS ONLINE LIMITED is a company registered in the United Kingdom under company number 13014658. Its registered office is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. Campbell Bryan Limited is its parent company; ownership alone does not make the parent a controller for this website.

For privacy questions or rights requests, email privacy@scalepass.co.uk.

Information we collect

When you send an enquiry through this website, the form asks for your name, your email address and what is getting in the way at the moment. You can also choose to give your business name, your website address, a phone number and the services you would like help with. These are optional.

Through business email and other enquiries we may also receive your organisation, role, team size and the non-sensitive operating context you choose to provide. We also receive ordinary technical and security information needed to deliver and protect the website.

Important. Do not submit passwords, credentials or unnecessary sensitive client data.

Why we use it

We use enquiries to reply, understand your requirements, assess service fit, prepare requested information or proposals, maintain business records, prevent misuse and protect our systems.

Our lawful bases

Depending on the interaction, processing is necessary for one of four reasons. To take steps at your request before entering a contract, or to perform one. To comply with a legal obligation. Or for legitimate interests: responding to enquiries, operating and improving the service, maintaining records and securing the website. Non-essential analytics are used only after analytics consent is recorded through Concord.

Who receives information

When you send an enquiry through this website, the website transmits it to a monitored ScalePass inbox through an authorised transactional email provider. The website does not store what you submit.

Information is then handled through authorised hosting, communications, support-desk, workflow, operational-record, diagnostic and analytics providers under the applicable approved process and privacy controls. Google Tag Manager and Umami analytics are loaded only after analytics consent through Concord. We do not sell personal information.

Pipeline Control Review journey

This section applies only to the separate recruitment Pipeline Control Review campaign at lp.scalepass.co.uk. It does not describe the enquiry form on this website.

The recruitment Pipeline Control Review asks for your first name, last name, work email, agency name and consultant or user band. The landing page is hosted by FlexiFunnels. On submission, the form sends those details to ScalePass’s authorised workflow service, which validates the expected fields, prevents duplicate records and creates a raw enquiry in AITable for human review. You are then sent to Cal.com, where you may choose to book a call under Cal.com’s applicable privacy terms.

The initial campaign does not use the Meta Pixel, conversion API, advertising cookies, embedded calendars or newsletter consent. Ordinary campaign parameters, such as source, campaign or advertisement identifiers, may be stored with the enquiry so we can understand where it came from. Submission does not trigger automated rejection or a decision with legal or similarly significant effects.

International transfers

Where a provider processes information outside the United Kingdom, we assess the transfer mechanism and use an applicable safeguard, such as UK adequacy regulations or approved contractual protections, where required.

How long we retain it

We keep information only for as long as needed for the stated purpose, an active business relationship, legal and accounting obligations, dispute handling, security, or suppression of unwanted contact. Retention periods vary with the record and are reviewed when the purpose ends.

For the Pipeline Control Review campaign only, an unbooked or unqualified submission is normally deleted or anonymised 90 days after the last meaningful interaction. A booked review that does not convert is normally retained for up to 12 months after the review or last meaningful interaction. A qualified opportunity is reviewed for deletion or anonymisation after 24 months without meaningful activity. We may retain a minimal suppression record where needed to honour an objection, and may retain relevant information longer where a legal obligation, dispute, security investigation or legal hold requires it.

Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction or portability; object to relevant processing; and withdraw consent without affecting earlier lawful processing. You may complain to the UK Information Commissioner’s Office at ico.org.uk.

For a Pipeline Control Review request, we search the relevant landing-page, workflow-execution, AITable, calendar and monitored-email records needed to answer the request. We keep completion evidence proportionate and avoid copying unnecessary personal information into the rights-request record.

Cookies and analytics

This notice explains the technologies used on the ScalePass website and how to control non-essential analytics.

Concord manages consent preferences. Google Tag Manager and Umami analytics must not load before analytics consent, and ScalePass events stop following withdrawal.

Technology categories and consent

TECHOPS ONLINE LIMITED uses Concord to present and record consent choices. Non-essential Umami analytics must remain off unless you grant analytics consent.

Strictly necessary

Hosting, security, network and consent-management technology may operate because it is needed to deliver the website, remember your privacy choice, prevent abuse and maintain service availability. These functions are not used for advertising.

Analytics

When you grant analytics consent, the site loads the governed Google Tag Manager container, which then loads the self-hosted Umami service at umami.scalepass.io. Umami measures page and selected conversion events without sending free text, names, email addresses, credentials, finance documents or sensitive client information. Neither GTM nor Umami loads before analytics consent.

Current event measurement

With analytics consent, this website records one custom event: cta_clicked, when a Book a call link is used, together with the page address it was used on. It records nothing you type into the enquiry form.

Campaign landing pages

The initial Pipeline Control Review campaign at lp.scalepass.co.uk is configured without Meta Pixel, Meta conversion API, advertising cookies, third-party analytics or an embedded calendar. Its form and security functions may use strictly necessary hosting and network technology. Ordinary campaign parameters in the page address may be submitted with the enquiry; they are record metadata, not permission to place non-essential cookies.

If ScalePass later enables advertising or analytics technology on that journey, this notice and the consent controls must be updated before the technology is activated.

Change or withdraw your choice

Where analytics is enabled, use the Concord privacy control displayed on the website to review or change your preferences. When analytics consent is withdrawn, the website checks the updated consent state before every custom event and stops sending ScalePass analytics events. Concord remains responsible for consent state and the site prevents GTM from loading until consent is granted. Withdrawal does not affect processing that was lawful before the change.

Controller and contact

TECHOPS ONLINE LIMITED, company number 13014658, is responsible for this website’s use of these technologies. Email privacy@scalepass.co.uk with questions.

Changes to this notice

We will update the effective date and this page when material practices change. Contact privacy@scalepass.co.uk if you need this notice in another format.

ScalePass

Websites, connected systems and ongoing support for service businesses.

  • Services
  • About
  • Blog
  • Contact
  • Terms
  • Privacy & Cookies

© 2026 TECHOPS ONLINE LIMITED