Privacy Policy

About the project and contact details

Scalefor Agency is the public name of the project and website, not the name of a registered legal entity. Website: https://scalefor.agency. Privacy contact: info@scalefor.agency.

This Policy applies to data submitted through the recruitment request form, by email or during subsequent business communications. The service is intended for company representatives and adult professionals.

Processing is subject to applicable data-protection law.

Data we may collect

• name and company name;
• the role or professional profile the user is seeking;
• selected messenger and contact details;
• email address;
• comments and other information voluntarily included in the request;
• for candidates: target role, professional level, traffic sources, verticals, experience, working model, compensation expectations, availability, and links to a CV, LinkedIn profile, portfolio or anonymised case studies;
• date, time, consent-text version and technical record of form submission;
• security logs that may include an IP address, browser and device type, requested-page address and request time.

Please do not include special-category data, health information, payment details, passwords or documents in the free-text field unless we have explicitly requested them for a lawful and previously explained reason.

Why we need the data

• receive and review a recruitment request;
• contact the user and clarify the vacancy, team and requirements;
• prepare a proposal, agree terms and enter into an agreement;
• conduct business correspondence and manage the client relationship;
• maintain an internal candidate network, match professional profiles against client-company briefs and contact a candidate when a relevant opportunity appears;
• after separate approval from the candidate, present the profile to a specific company for consideration for a role;
• protect the website, detect abuse and document consent;
• comply with legal obligations and protect legal claims.

We do not use form data for bulk promotional messaging without a separate legal basis and a separate, clear user choice.

Why processing is lawful

Depending on the circumstances, the basis for processing may be the user’s consent; the need to review a request or take steps before entering into an agreement; performance of an agreement; legitimate interests relating to security and the protection of rights, provided those interests do not override the user’s rights; or a direct legal obligation.

The form fields are required because we cannot process and respond to a request without contact details and role context. Users may choose not to submit the form and contact us by email instead.

Who receives access

Access is provided only to the extent necessary for a specific task:

• authorised persons involved in the Scalefor Agency project and engaged contractors;
• specialist experts involved in assessment or search preparation and bound by confidentiality obligations;
• client companies, only for a role agreed with the candidate in advance and only to the extent necessary to consider the profile;
• hosting, database, communications and information-security providers;
• public authorities where disclosure is required by applicable law.

Supabase is used as a technical service provider for processing and storing requests.

Joining the internal candidate network does not itself authorise bulk or automatic disclosure of candidate data to employers.

Processing infrastructure

Technical service providers receive access to data only to the extent necessary to operate the relevant website function.

No longer than necessary

Request data is retained until the processing purposes are fulfilled, but for no longer than three years from the last substantive interaction with the user. Data is deleted earlier following a valid request or withdrawal of consent unless another lawful basis for retention applies.

Certain information may be retained longer where necessary to comply with a mandatory legal requirement, resolve a dispute or protect legal claims. Technical security logs are retained only for the period objectively necessary to protect the website.

Control over your data

Where provided by law, users may:

• obtain information about processing and access their data, including a copy;
• request correction, updating or completion of inaccurate data;
• request that processing cease and that data be erased or destroyed;
• request restriction or blocking of data where applicable;
• withdraw consent without affecting the lawfulness of prior processing;
• receive data in a structured, machine-readable format where the right to portability applies;
• lodge a complaint with a competent supervisory authority or seek judicial remedy where available under applicable law.

Requests should be sent to info@scalefor.agency. To protect personal data, we may ask you to verify your identity.

Organisational and technical measures

Measures proportionate to the risk are applied to protect data, including role-based access restrictions, confidentiality obligations for persons with access, protected data transmission, processing records, software updates, backups and incident-response procedures. Absolute security of internet transmission cannot be guaranteed, but measures are reviewed regularly in light of the nature of the data and available technologies.

Your choice is remembered

The website uses essential browser technologies to function correctly and remember cookie preferences. In the current version, the user’s “accept” or “reject” choice is stored locally in the browser under the key scalefor_cookie_consent_v1.

Optional analytics, advertising pixels or other tracking technologies must not run before the user selects “Accept”. Selecting “Reject optional” does not limit the website’s core functionality. If such tools are added, the Policy will be updated to identify providers, purposes and retention periods.

You can change your choice through “Cookie settings” in the footer or by clearing site data in your browser settings.

Current version

This Policy may be updated when the website, processing practices or legal requirements change. A new version will be published on this page with an updated effective date. Where material changes affect previously given consent, new consent is requested when required by law.