scalexo logo scalexo

Your trust isn't a checkbox. It's our operating system.

At scalexo, we build marketing systems that respect the people behind the data. This privacy policy is our blueprint for how we handle your information—not as a legal formality, but as a core design principle for every interaction we have with you, whether you're a client, a partner, or a prospect.

The Privacy Filter: What We Optimize For

Every data practice involves a choice. We've built an internal filter to guide those choices, prioritizing what delivers genuine value while sacrificing convenience for the sake of ethics.

Criteria: User Agency

Does this practice give the user clear, easy control over their data?

Optimizes for: Trust & Control

Criteria: Purpose Limitation

Is the data collected strictly necessary for the service being delivered?

Optimizes for: Relevance & Focus

Criteria: Data Minimization

Can we achieve the same goal with less data or fewer processing steps?

Optimizes for: Security & Simplicity

Data We Handle & Why

Transparency is non-negotiable. Here's a clear, no-argon breakdown of the information we process, the lawful basis for doing so, and how you can control it.

Communication Data

Email, phone number, message content. Collected when you contact us via our form or email. Purpose: To respond to your inquiry and deliver our services. Lawful Basis: Contractual necessity and legitimate interest.

Website Analytics (Anonymized)

Page views, session duration, referral sources. Collected via a privacy-focused analytics tool (e.g., Matomo). No IP storage, no cookie-based tracking for marketing. Purpose: To improve site usability and content relevance. Lawful Basis: Legitimate interest.

Client Project Files

Brand assets, campaign briefs, performance reports. Collected as part of active projects. Purpose: To execute agreed-upon marketing services. Lawful Basis: Contractual necessity. Handled under separate Data Processing Agreements (DPA).

Illustration

Our documentation process is designed for clarity, not obscurity. Every clause serves a purpose you can understand.

Your Data, Your Control

You are not a passive subject in our system. French and EU data protection laws (RGPD/GDPR) grant you specific rights, which we not only honor but actively facilitate.

A

Access

Request a copy of all personal data we hold about you. We'll provide it in a structured, commonly used format.

E

Erasure

Ask us to delete your personal data where there's no compelling legal basis for us to retain it.

U

Update

Correct inaccurate personal data or complete an incomplete profile. We rely on you to keep information current.

Key Terms, Plainly Spoken

Legal text can be a barrier. Here are the core concepts behind our privacy practices, framed for clarity and action.

Lawful Basis

The legal justification for processing data. For marketing agencies, this is often "contractual necessity" (to deliver a service) or "legitimate interest" (e.g., for basic website security).

Data Controller

The entity that determines why and how data is processed. For this website and our agency operations, scalexo is the Data Controller.

Data Processor

A third party that processes data on our behalf (e.g., a cloud hosting provider). We vet all processors for compliance and use DPAs to ensure your rights are upheld.

Anonymization

The process of removing all personally identifiable information. We apply this to analytics data, meaning you can't be tracked as a specific individual across our site.

Legitimate Interest

A flexible lawful basis that balances our need to operate a functional website (e.g., preventing fraud, securing infrastructure) against your privacy rights.

Retention Period

The duration we keep data. We don't keep it longer than necessary. For example, inquiry data is typically held for 2 years post-contact unless you ask for deletion sooner.

This policy is a living document. It may be updated as our services or legal requirements change. The version date at the top of the page indicates the latest revision.

Last Reviewed: 2026-05-15

Questions About Your Data?

Our designated Data Protection Officer handles all privacy inquiries. Reach out directly.

Email: [email protected] | Address: 31 Rue Saint-André des Arts, 75006 Paris, France