How Scalewell collects, uses and protects personal information.
Scalewell Ltd (“Scalewell”, “we”, “us”) is registered in England and Wales under company number 12636867. Our registered office is 11 Laura Place, Bath, BA2 4BL.
We help businesses and investors assess and improve leadership, organisational capability and execution.
We are responsible for personal information collected through our website and our own business activities. When working with clients, our responsibilities depend on the engagement. We may act as a data controller, making decisions about how information is used, or as a data processor, handling information on a client's instructions.
You can contact us about this notice or your personal information at info@scalewell.co.uk.
We may collect your name, organisation, job title, email address, telephone number and information you choose to share. We use Calendly for online bookings.
We collect business contact details, correspondence, contractual information and information needed to manage our services, relationships and invoices.
Our due diligence, Execution Radar, leadership assessment and advisory work may involve:
Some information may include opinions or assessments about identifiable individuals.
We aim to collect only what is necessary for the agreed work.
We may collect limited technical information needed to operate and secure the website. With your consent, Google Analytics may also collect information about website usage, such as pages visited, device type and interactions.
CookieYes records your cookie preferences so we can respect and demonstrate your choices.
See our Cookie Notice for further information.
Most information comes directly from you.
We may also receive information from your employer, colleagues, referees, clients, professional contacts or publicly available business sources, including company websites and professional profiles.
During an engagement, the client organisation may provide information needed to understand its leadership, organisation and execution challenges.
Where required, we or the relevant client will explain how information is being collected and used.
We use personal information for the following purposes.
Where we rely on legitimate interests, these include responding to enquiries, managing professional relationships, delivering our services, maintaining security and communicating with relevant business contacts. We consider whether these interests are outweighed by individuals' rights and expectations.
Where we process information solely on a client's instructions, the client determines the applicable lawful basis and is responsible for explaining it to participants.
We do not use consent as the default legal basis for all assessments. Where consent is required, we will explain what it covers and how it can be withdrawn.
We recognise that leadership assessments, organisational due diligence and Execution Radar can involve confidential and personally sensitive information.
Before an assessment, participants should be told its purpose, the information being collected, how it will be used and who may receive the findings.
We agree reporting and confidentiality arrangements with clients, including the treatment of identifiable responses and individual assessment results.
Where findings are reported in aggregated or anonymised form, we take steps to reduce the risk of identifying individual participants. We will not describe information as anonymous if individuals could reasonably be identified from it.
Execution Radar is designed to assess the demands placed on roles and the organisation's capacity to execute its plans. It is not intended to operate as an automated individual performance appraisal system.
Some engagements may involve personal information that requires additional protection, including information about health or disability. Where special-category information is processed, we identify an appropriate additional legal condition and apply safeguards relevant to the engagement.
Psychometric assessments may be delivered through specialist licensed providers, subject to their applicable privacy arrangements.
Where Scalewell acts as a processor, we handle personal information under our agreement with the client and its documented instructions.
Where Scalewell acts as a controller, we are responsible for our own processing decisions and the associated data protection obligations.
The relevant engagement documentation or participant privacy information will explain the arrangements where necessary.
If you have participated in an assessment and want to exercise your data protection rights, you can contact your organisation or email us. We will respond directly where we are responsible, or help direct your request to the appropriate controller.
We may use appropriately approved digital and AI-assisted tools to support research, analysis, drafting and delivery of our services.
Where personal information is involved, we assess the tool, its contractual protections, security arrangements and permitted uses before processing that information.
We do not use client information to train AI models.
AI-assisted findings are subject to appropriate human review. We do not rely solely on automated decisions that produce legal or similarly significant effects on individuals without meeting the applicable legal requirements.
We may contact relevant business professionals about Scalewell's services, research, events and insights.
Where permitted, we rely on our legitimate interests in maintaining relevant professional relationships and developing our business.
We comply with the UK rules governing electronic marketing. Where consent is required, including for certain individual subscribers, we obtain it unless a lawful exception applies.
Every marketing email identifies Scalewell and provides a straightforward way to opt out.
You can ask us to stop marketing communications at any time by using the unsubscribe option or contacting info@scalewell.co.uk.
We do not sell personal information or provide contact lists to third parties for their own marketing.
Some of our service providers may process or access personal information outside the UK.
Where UK data protection law restricts an international transfer, we use an applicable legal mechanism. This may include UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework where applicable, or appropriate contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum.
We assess whether additional protections are needed.
You can contact us for further information about safeguards relevant to your personal information.
We retain personal information only for as long as necessary for its purpose, taking account of legal requirements, client agreements and legitimate business needs.
Our general retention approach is:
We may retain limited information for longer where reasonably necessary to meet legal obligations, resolve disputes or establish or defend legal claims.
When information is no longer needed, we securely delete or anonymise it, or return it to the relevant client where required.
Depending on the circumstances, you have the right to:
These rights are subject to legal conditions and exceptions.
You have an absolute right to object to the use of your personal information for direct marketing.
To exercise your rights, email info@scalewell.co.uk.
We normally respond within one month. Where the law permits additional time for a complex request, we will explain this.
If we are processing information on behalf of a client, we may need to refer your request to that organisation.
We take reasonable technical and organisational measures to protect personal information.
These include access controls, secure systems, appropriate encryption, supplier checks and restrictions on who can access confidential information.
Access to engagement information is limited according to professional responsibilities and the arrangements agreed with clients.
No system can guarantee absolute security, but we work to reduce the risk of unauthorised access, loss, disclosure or misuse.
If you have concerns about how we handle your personal information, please contact info@scalewell.co.uk so we can investigate.
You also have the right to complain to the Information Commissioner's Office (ICO).
Website: https://ico.org.uk/make-a-complaint
We review this notice when our services, technology or legal obligations change.
The latest version will be published on this website, with its revision date shown above.
Last updated: 16 October 2026
