Privacy Policy

Script & Scale Ltd (“we”, “us”) provides a revenue enablement subscription to UK small businesses. This policy explains what data we collect when you use our website (scriptandscale.co.uk) and the client portal.

Questions or data requests: hello@scriptandscale.co.uk.

• Contact enquiries: name, company, email, and message when you submit the contact form.
• Client profile: full name, company, email, phone number, tier, monthly fee, start date, status, and internal notes.
• Account credentials: email and password (hashed) for portal sign-in.
• Deal data: deal titles and values (GBP) you log against the 3-month guarantee.
• KPI figures: monthly opportunities, average deal value, estimated close rate, closed deal value, and dead pipeline value.
• Workshop and session data: attendance, topics covered, action items, and internal notes.
• Roleplay recordings: audio or video files uploaded for coaching, plus your notes.
• Payment status: whether your subscription is active, paused, or ended. We do not store card numbers.
• Activity log: sign-in timestamps and which library items you open, so your coach can see engagement.

To deliver the service: run workshops, track your progress against the guarantee, assign scripts and SOPs to you, review recordings, invoice you, and reply when you contact us. We do not use your data for advertising and do not sell it to anyone.

Application data lives in a managed Supabase (Postgres) database, and roleplay files live in Supabase Storage. Access is restricted with row-level security so each client can only see their own data, and admin access is limited to Script & Scale staff. Data centres are located in the EU/UK region.

Only the sub-processors we need to run the service:

• Supabase (database, auth, storage)
• Our email provider, when you receive a portal invite or password reset link
• Our payment processor, if you are on a paid subscription

We do not share your data with third-party marketers, analytics networks, or data brokers.

For as long as you are a client, plus a reasonable window afterwards for accounting and legal obligations (typically up to 6 years for financial records). Roleplay recordings are kept only while they are useful for coaching and can be deleted on request at any time.

Under UK GDPR you can:

• Ask for a copy of the data we hold on you
• Ask us to correct anything that’s wrong
• Ask us to delete your account and associated data
• Withdraw consent for optional processing at any time

To request deletion, email hello@scriptandscale.co.uk from the address on your account. We will delete profile, deal, KPI, workshop, and roleplay data within 30 days. We may keep minimal invoice records for tax purposes.

We use only functional cookies required to keep you signed in to the portal. No advertising or third-party tracking cookies.

If we materially change this policy we’ll email active clients before the change takes effect.