Privacy Policy

1. Who We Are

ScaleYourCareer is a sole proprietorship operated by Nimesh Patel, based in the State of California, United States. For the purposes of applicable data protection laws, Nimesh Patel is the data controller of personal information collected through scaleyourcareer.com (the "Site") and related coaching services (collectively, the "Services").

Contact: nimesh@scaleyourcareer.com

2. Scope

This Privacy Policy applies to all personal information collected through the Site, email communications, and coaching sessions. It does not apply to third-party websites or services linked from our Site, each of which maintains its own privacy policy.

3. Information We Collect

3.1 Information You Provide Directly

• Scheduling information: Name, email address, and time zone when you book a coaching session through our scheduling provider (Calendly).
• Email correspondence: Name, email address, and the content of messages you send us.
• Session content: Career goals, professional background, interview preparation materials, and other information you share during coaching sessions. This may include information about your current or former employers, compensation, and career history.

3.2 Information Collected Automatically

• Server logs: Our hosting provider (Vercel) automatically collects standard server log data, including IP address, browser type and version, operating system, referring URL, pages visited, and access timestamps. This data is used for security monitoring and service reliability.
• Website analytics: We use Vercel Analytics to collect aggregated, anonymous usage data such as page views, referral sources, browser type, device type, and geographic region. Vercel Analytics does not use cookies, does not track individual users across sessions, and does not collect personally identifiable information.
• Measurement and advertising technologies: Subject to your choices described in Section 3.4, we use Google Tag Manager to load Google Analytics 4 and Google Ads tags. These may set cookies or similar identifiers on your device and collect your IP address, device and browser information, pages viewed, referring URL, and the actions you take on the Site, including clicking a booking link and completing a booking. Google Ads uses this to measure which advertisements led to a booking and, where permitted, to show you relevant advertisements on other sites.
• Approximate location: We use a coarse country and region code derived by our hosting provider from your IP address, for the sole purpose of applying the correct privacy rules to your visit. We do not store your IP address for this purpose and the resulting code is kept only in a short-lived cookie on your own device.

3.3 Information We Do Not Collect

• We do not send your name, email address, phone number, or any other directly identifying information to Google or to any advertising platform. Booking events are reported to us as an anonymous confirmation that a booking occurred, together with an opaque scheduling reference.
• We do not collect payment information directly. All payments are processed through third-party platforms.
• We do not use the content of your coaching sessions for advertising, and we do not use any personal information to train artificial intelligence models.

3.4 Cookies and Similar Technologies

We use three categories of technology on the Site:

• Strictly necessary: Required to deliver the Site, remember your privacy choice, and protect against abuse. These cannot be switched off and do not require consent.
• Analytics: Google Analytics 4, used to understand how the Site is used.
• Advertising: Google Ads conversion measurement and remarketing, used to measure advertising performance and to show relevant advertisements.

How the optional categories are treated depends on where you are when you visit, because the applicable law differs:

• European Economic Area, United Kingdom, Switzerland, India, and Quebec: Analytics and advertising technologies are switched off by default and are used only after you give consent through our banner. We rely on your consent under Art. 6(1)(a) GDPR and Art. 5(3) of the ePrivacy Directive, on Section 6 of India's Digital Personal Data Protection Act, 2023, and on Section 8.1 of Quebec's Law 25. You may withdraw consent at any time, as easily as you gave it, using the "Privacy preferences" link in the footer of every page. Withdrawal does not affect processing carried out before withdrawal.
• United States and Canada outside Quebec: Analytics and advertising technologies operate by default, which those laws permit, and you are given notice of them at or before collection. You may opt out at any time using the "Privacy preferences" or "Do Not Sell or Share My Personal Information" link in the footer of every page.
• Anywhere else, or where we cannot determine your location: We apply the stricter consent-first approach described above.

We use Google Consent Mode v2, which means that when you have not consented, Google tags do not read or write advertising or analytics identifiers on your device.

You can also block or delete cookies through your browser settings. Doing so does not affect your ability to use the Site or to book a session.

4. Legal Bases for Processing (EEA/UK Visitors)

If you are located in the European Economic Area or United Kingdom, we process your personal data under the following legal bases under the General Data Protection Regulation (GDPR):

• Performance of a contract: Processing necessary to provide coaching services you have requested (Art. 6(1)(b) GDPR).
• Legitimate interests: Processing necessary for website security, service improvement, and responding to inquiries, where such interests are not overridden by your rights (Art. 6(1)(f) GDPR).
• Consent: Analytics and advertising cookies and similar technologies are used only with your consent (Art. 6(1)(a) GDPR, together with Art. 5(3) of the ePrivacy Directive). You may withdraw consent at any time from the "Privacy preferences" link in the footer of every page, without affecting the lawfulness of processing carried out before withdrawal.

We do not carry out automated decision-making producing legal or similarly significant effects, and we do not use special category data.

4A. Notice to Visitors in India (DPDP Act, 2023)

If you are a Data Principal in India, this section serves as the notice required under Section 5 of the Digital Personal Data Protection Act, 2023.

• Personal data processed and purpose: Your name, email address and time zone, to schedule and deliver coaching sessions you request; the content you share during sessions, to deliver the coaching itself; and, only with your consent, the analytics and advertising data described in Section 3.2, to measure how the Site and our advertisements perform.
• Consent: Analytics and advertising technologies are switched off for you by default and are used only after a clear affirmative action on our consent banner. Consent is not a condition of using the Site or booking a session.
• Withdrawing consent: Use the "Privacy preferences" link in the footer of every page. Withdrawal is as simple as giving consent was.
• Your rights: You have the right to access a summary of your personal data and our processing of it, to correction and erasure, to nominate another individual to exercise your rights in the event of death or incapacity, and to grievance redressal.
• Grievance redressal: Contact us at nimesh@scaleyourcareer.com with "DPDP grievance" in the subject line. We will respond within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
• Language: This notice is available in English. On request to the address above, we will provide it in any language listed in the Eighth Schedule to the Constitution of India.
• Children: Our Services are not directed to anyone under 18. We do not knowingly process children's personal data, and we do not carry out tracking, behavioural monitoring, or targeted advertising directed at children.

5. How We Use Your Information

• To schedule, deliver, and follow up on coaching sessions.
• To respond to your inquiries and support requests.
• To maintain session notes for continuity across multiple coaching sessions (if applicable).
• To ensure the security and proper functioning of the Site.
• To comply with legal obligations.

We do not use your personal information for automated decision-making or profiling.

6. Third-Party Service Providers

We use a limited number of third-party services to operate the Site and deliver our Services. Each processes personal data only as necessary for the function described:

Calendly's privacy policy is available at calendly.com/privacy. Vercel's privacy policy is available at vercel.com/legal/privacy-policy. Google's privacy policy is available at policies.google.com/privacy, and you can opt out of Google Analytics in any browser using Google's opt-out browser add-on.

For visitors in the EEA, the UK, and Switzerland, Google acts as our processor for Google Analytics and as an independent controller for certain Google Ads processing. Transfers to Google in the United States are made under the European Commission and UK adequacy decisions for the EU-US Data Privacy Framework and its UK extension, and under Standard Contractual Clauses where the framework does not apply.

7. Data Sharing and Disclosure

We do not sell your personal information for money, and we never disclose the content of coaching sessions to advertisers. We do, however, use Google Ads remarketing and conversion measurement, which California, Colorado, Connecticut, Virginia and similar laws treat as "sharing" personal information for cross-context behavioural advertising, or as "targeted advertising." You can opt out of that at any time using the "Do Not Sell or Share My Personal Information" link in the footer of every page, and we honour Global Privacy Control signals automatically.

Beyond that, we may disclose personal information only in the following limited circumstances:

• Service providers: As described in Section 6, to third-party providers who assist in delivering our Services.
• Legal requirements: When required by law, court order, subpoena, or government regulation.
• Protection of rights: When necessary to protect our legal rights, enforce our Terms of Service, or protect the safety of any person.

8. Data Retention

• Email correspondence: Retained for as long as the coaching relationship is active, plus 12 months.
• Session notes: Retained for as long as the coaching relationship is active. Deleted within 90 days of the relationship ending, unless you request earlier deletion.
• Server logs: Retained by our hosting provider per their standard retention policy (typically 30 days).
• Analytics and advertising data: Where you have consented, or where you have not opted out in a region that permits this by default, event-level and user-level data collected through Google Analytics is retained for 14 months. For returning visitors the 14-month period restarts on each visit. Aggregated reports that cannot be tied to an individual are retained by Google for longer. Google Ads conversion and remarketing data is retained according to Google's own schedules, described in its privacy policy. Withdrawing consent stops further collection but does not by itself delete data already collected; use the deletion request process below if you want that data removed.

You may request deletion of your data at any time by contacting us. We will process deletion requests within 30 days.

9. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information. The Site is served over HTTPS with TLS encryption. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Our Services are operated from the United States. If you are accessing the Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using our Services, you consent to such transfer.

11. Your Privacy Rights

11.1 All Users

Regardless of your location, you may:

• Request access to the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Opt out of any non-essential communications.

11.2 California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act (as amended by the California Privacy Rights Act), California residents have the right to:

• Know what personal information is collected, used, and shared.
• Delete personal information held by us.
• Opt out of the sale or sharing of personal information.
• Limit the use of sensitive personal information (we do not collect sensitive personal information for advertising).
• Correct inaccurate personal information.
• Non-discrimination for exercising your privacy rights.

We do not sell personal information for money. We do use Google Ads remarketing, which the CPRA treats as sharingpersonal information for cross-context behavioural advertising. Use the "Do Not Sell or Share My Personal Information" link in the footer of any page to opt out, or enable Global Privacy Control in your browser, which we honour automatically as a valid opt-out request. To exercise your other rights, contact us at nimesh@scaleyourcareer.com. We will verify your identity and respond within 45 days.

11.3 EEA/UK Residents (GDPR)

Under the GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. Where processing is based on consent, you have the right to withdraw it at any time using the "Privacy preferences" link in the footer of every page. You also have the right to lodge a complaint with your local data protection authority, or with the Information Commissioner's Office if you are in the United Kingdom. To exercise your rights, contact us at the address above.

11.4 Other US State Residents

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have the right to confirm whether we process their personal data, to access, correct and delete it, to obtain a portable copy, and to opt out of targeted advertising and of profiling in furtherance of decisions producing legal or similarly significant effects. We do not engage in such profiling. Opt out of targeted advertising using the footer links described above. Where your state provides one, you may appeal a denied request by replying to our response, and you may contact your state attorney general.

11.5 Canadian Residents

Under PIPEDA and provincial privacy legislation you may request access to the personal information we hold about you, request correction, and withdraw consent to non-essential uses at any time, subject to legal and contractual restrictions and reasonable notice. If you are in Quebec, analytics and advertising technologies are deactivated by default under Law 25 and used only after you consent, and you may request that we cease disseminating your personal information where the law allows. Complaints may be directed to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information.

11.6 Indian Residents

See Section 4A for the notice, rights, and grievance redressal process under the Digital Personal Data Protection Act, 2023.

12. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will delete that information promptly.

13. Opt-Out Preference Signals

Global Privacy Control (GPC): We honour GPC. If your browser or an extension sends a GPC signal, we treat it as a valid request to opt out of the sale and sharing of your personal information and of targeted advertising, and advertising technologies stay switched off for your visit without you needing to do anything else. Because GPC is sent by the browser and not tied to an account, it applies to that browser on that device.

Do Not Track (DNT): There is no common industry standard for how sites should respond to DNT headers, so we do not respond to them. Use the GPC signal or the footer links described in Section 11.2 instead.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Effective Date" and "Last Reviewed" dates at the top of this page. We encourage you to review this policy periodically. Continued use of the Site or Services after changes constitutes acceptance of the updated policy.

15. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal data, contact us at: