Privacy policy

Form submissions: when you use the supplier intake or contact form, we receive the fields you complete (for example company name, contact name, email, and your message) so we can reply.

Aggregated analytics: we use Vercel Analytics and Vercel Speed Insights, which measure page views and performance without cookies and without building a profile of you. We do not run advertising trackers, marketing pixels or session recorders on this website.

Anti-abuse: form submissions are checked with Cloudflare Turnstile to block automated abuse.

Where the EU General Data Protection Regulation (GDPR) applies, we rely on: Article 6(1)(b) — taking steps at your request before entering into a contract, when you contact us about supplying or working with us; and Article 6(1)(f) — our legitimate interest in operating a secure website and responding to enquiries.

Form submissions are retained for 24 months from the date of the message, then deleted, unless they have become part of an ongoing business relationship with its own records.

Cookieless analytics data is aggregated and not tied to you as an individual.

Vercel Inc. — website hosting and cookieless analytics (hosting processor).

Resend (Plus Five Five, Inc.) — delivery of the transactional email generated by your form submission (email processor).

Cloudflare, Inc. — Turnstile anti-abuse verification.

We do not sell or share your personal data for cross-context behavioral advertising, and we do not disclose it to third parties except the processors above or where required by law.

Our processors may process data in the United States. Where data is transferred from the European Economic Area or the United Kingdom to the United States, the transfer is covered by the European Commission’s Standard Contractual Clauses (and the UK Addendum where applicable).

Under the GDPR you may request access to your data, correction, erasure, restriction, portability, and you may object to processing based on legitimate interests. You may also lodge a complaint with your local data protection supervisory authority.

Under the California Consumer Privacy Act as amended by the CPRA, you have the right to know what personal information we collect, to access and delete it, to correct it, and to opt out of sale or sharing — we do not sell or share personal information. You will not be discriminated against for exercising these rights.

To exercise any right, email privacy@scaleecom.io. We respond within the time limits set by applicable law.

Because ScaleEcom LLC is established in the EU market it serves and its stores sell to EU consumers, each store’s own privacy notice — not this one — governs data collected in the course of shopping, ordering and delivery on that store. Those notices live on each store’s own domain.

Data controller for this website: ScaleEcom LLC, 32 N Gould St, Sheridan, WY 82801, United States. Privacy contact: privacy@scaleecom.io.