Legal
Last updated: 20 October 2025
This Privacy Policy explains how Time to Scale Ltd ("Time to Scale", "we", "us", or "our") collects, uses, discloses, and safeguards personal data in connection with our website www.timetoscale.co.uk (the "Site"), our marketing (including social media lead ads and cold outreach), and our services. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018, and comply with applicable PECR rules for electronic marketing.
Time to Scale Ltd is the controller for personal data described in this Policy. Contact: info@timetoscale.co.uk.
We collect and process: a) Data you provide — Name; email; phone; company; role; service interests; messages; appointment details; testimonials; billing and support information. b) Data we obtain automatically — IP address; device and browser data; time zone; pages viewed and time on page; referring URLs; clickstream; approximate location; form interactions; call metadata (duration, timestamps); session recordings where applicable. c) Data we obtain from third parties — Lead data from platforms (e.g., Facebook/Instagram/LinkedIn lead ads); business contact data from public sources or reputable B2B providers; analytics and advertising partners; Google Business Profile (GBP) messages and insights. d) Cookies & similar tech — We use cookies, pixels (e.g., Meta Pixel), tags, and unique identifiers. See our Cookie Policy below.
We only process personal data where we have a lawful basis: • Responding to enquiries; providing quotes; pre-contract steps and service delivery — Legal basis: Contract or Legitimate Interests. • Account management, onboarding, and customer support — Legal basis: Contract; Legitimate Interests. • Marketing communications (email, SMS, phone, messaging apps) — Legal basis: Consent or Legitimate Interests for B2B prospects where PECR permits, provided you can opt out at any time. • Cold outreach to business contacts (B2B) — Legal basis: Legitimate Interests; opt-out offered on every message. • Review requests and NPS/feedback — Legal basis: Legitimate Interests and/or Contract. • Improving the Site and Services; analytics and conversion tracking — Legal basis: Legitimate Interests. • Fraud prevention, security, and compliance with law — Legal basis: Legal Obligation; Legitimate Interests. We maintain a legitimate interests assessment and will provide key points upon request.
When you submit your details (e.g., via social media lead ads, our website forms, live chat) or reply to our cold outreach, we will send you marketing emails, texts (SMS/WhatsApp), and calls about our services until you opt out. • Email: Unsubscribe at any time using the link (or by replying with "OPT OUT") in our emails, or email info@timetoscale.co.uk. • SMS/WhatsApp: Reply STOP or STOP ALL to end messages; reply HELP for help. • Phone: Tell us on a call or email us to be added to the do-not-call list. • Soft opt-in: If you're an existing customer or have enquired, we may market similar services under the soft opt-in rule. You can opt out at any time. • Suppression list: If you opt out, we keep your email/phone on a suppression list so we don't contact you again for marketing. We do not sell your data.
We may segment contacts by business type, location, engagement, and service interest to send more relevant messages and to prioritise follow-ups. We do not make decisions with legal or similarly significant effects solely by automated means.
We may share personal data with: Service providers acting as processors (e.g., hosting, CRM/automation platforms, email/SMS providers, analytics and call-tracking vendors, payment processors); Professional advisers (legal, accounting) under confidentiality; Authorities where required by law. We require processors to implement appropriate security and only process data per our instructions.
Some providers may process data outside the UK. Where this occurs, we rely on a lawful transfer mechanism such as an adequacy decision (e.g., UK-US Data Bridge) or appropriate safeguards including the UK International Data Transfer Addendum (IDTA) and/or Standard Contractual Clauses (SCCs) with supplementary measures.
We keep data only as long as necessary: Marketing contacts — generally up to 24 months from the last meaningful interaction unless you opt out earlier. Client/account records — for the life of the relationship and then 6 years for tax/legal records. Call recordings/lead logs — typically 12 months unless needed longer for dispute resolution. We periodically review and delete or anonymise data.
We use appropriate technical and organisational measures to protect data (access controls, encryption in transit, least-privilege access, regular reviews). No method is 100% secure; we cannot guarantee absolute security.
We may record inbound and outbound calls for quality, training, lead verification, and dispute resolution. Where required, we will notify you at the start of the call. You may request that recording stop, or choose an alternative channel.
We maintain incident response procedures. Where required by law, we will notify the ICO and affected individuals without undue delay following a personal data breach.
You have the right to access, rectify, erase, restrict, object (including to direct marketing), and data portability, and to withdraw consent where we rely on consent. To exercise rights, contact info@timetoscale.co.uk. We aim to respond within one month. You can complain to the Information Commissioner's Office (ICO): ico.org.uk.
We do not intentionally collect special category data (e.g., health data, political opinions). Please do not submit such data to us. Our Site and Services are intended for business users. We do not knowingly collect data from children under 16.
Our Site may link to third-party sites. Their privacy practices and content are their responsibility.
For our own marketing, sales, and operations, Time to Scale Ltd acts as the controller. When we manage or process personal data on behalf of clients inside their systems, we act as a processor. A Data Processing Addendum (DPA) is available on request.
We may update this Policy. We will post changes with an updated Last Updated date. Material changes may be notified by email or prominent notice on the Site.
Time to Scale Ltd Email: info@timetoscale.co.uk Website: www.timetoscale.co.uk Company No: 16407166 Registered Office: 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE
Effective Date: 20 October 2025
• Strictly Necessary — required for core functionality (security, login, form submissions). • Performance/Analytics — to understand usage and improve the Site (e.g., Google Analytics). • Functional — to remember preferences. • Advertising/Retargeting — to measure and improve our ads (e.g., Meta Pixel, Google Ads). Subject to consent where required.
You can control cookies in your browser settings and, where applicable, via our cookie banner. Disabling some cookies may impact Site functionality.
For questions about cookies or privacy, contact info@timetoscale.co.uk.