Privacy Policy

1. Who We Are

ScaleYourCareer is a sole proprietorship operated by Nimesh Patel, based in the State of California, United States. For the purposes of applicable data protection laws, Nimesh Patel is the data controller of personal information collected through scaleyourcareer.com (the "Site") and related coaching services (collectively, the "Services").

Contact: nimesh@scaleyourcareer.com

2. Scope

This Privacy Policy applies to all personal information collected through the Site, email communications, and coaching sessions. It does not apply to third-party websites or services linked from our Site, each of which maintains its own privacy policy.

3. Information We Collect

3.1 Information You Provide Directly

• Scheduling information: Name, email address, and time zone when you book a coaching session through our scheduling provider (Calendly).
• Email correspondence: Name, email address, and the content of messages you send us.
• Session content: Career goals, professional background, interview preparation materials, and other information you share during coaching sessions. This may include information about your current or former employers, compensation, and career history.

3.2 Information Collected Automatically

• Server logs: Our hosting provider (Vercel) automatically collects standard server log data, including IP address, browser type and version, operating system, referring URL, pages visited, and access timestamps. This data is used for security monitoring and service reliability.

3.3 Information We Do Not Collect

• We do not use cookies, tracking pixels, or similar technologies for advertising or behavioral tracking.
• We do not use third-party analytics services (such as Google Analytics).
• We do not collect payment information directly. All payments are processed through third-party platforms.

4. Legal Bases for Processing (EEA/UK Visitors)

If you are located in the European Economic Area or United Kingdom, we process your personal data under the following legal bases under the General Data Protection Regulation (GDPR):

• Performance of a contract: Processing necessary to provide coaching services you have requested (Art. 6(1)(b) GDPR).
• Legitimate interests: Processing necessary for website security, service improvement, and responding to inquiries, where such interests are not overridden by your rights (Art. 6(1)(f) GDPR).
• Consent: Where required by law, we will obtain your consent before processing (Art. 6(1)(a) GDPR). You may withdraw consent at any time.

5. How We Use Your Information

• To schedule, deliver, and follow up on coaching sessions.
• To respond to your inquiries and support requests.
• To maintain session notes for continuity across multiple coaching sessions (if applicable).
• To ensure the security and proper functioning of the Site.
• To comply with legal obligations.

We do not use your personal information for automated decision-making or profiling.

6. Third-Party Service Providers

We use a limited number of third-party services to operate the Site and deliver our Services. Each processes personal data only as necessary for the function described:

Calendly's privacy policy is available at calendly.com/privacy. Vercel's privacy policy is available at vercel.com/legal/privacy-policy.

7. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may disclose personal information only in the following limited circumstances:

• Service providers: As described in Section 6, to third-party providers who assist in delivering our Services.
• Legal requirements: When required by law, court order, subpoena, or government regulation.
• Protection of rights: When necessary to protect our legal rights, enforce our Terms of Service, or protect the safety of any person.

8. Data Retention

• Email correspondence: Retained for as long as the coaching relationship is active, plus 12 months.
• Session notes: Retained for as long as the coaching relationship is active. Deleted within 90 days of the relationship ending, unless you request earlier deletion.
• Server logs: Retained by our hosting provider per their standard retention policy (typically 30 days).

You may request deletion of your data at any time by contacting us. We will process deletion requests within 30 days.

9. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information. The Site is served over HTTPS with TLS encryption. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Our Services are operated from the United States. If you are accessing the Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using our Services, you consent to such transfer.

11. Your Privacy Rights

11.1 All Users

Regardless of your location, you may:

• Request access to the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Opt out of any non-essential communications.

11.2 California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act (as amended by the California Privacy Rights Act), California residents have the right to:

• Know what personal information is collected, used, and shared.
• Delete personal information held by us.
• Opt out of the sale or sharing of personal information.
• Non-discrimination for exercising your privacy rights.

We do not sell or share personal information as defined by the CCPA/CPRA. To exercise your rights, contact us at nimesh@scaleyourcareer.com. We will verify your identity and respond within 45 days.

11.3 EEA/UK Residents (GDPR)

Under the GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You also have the right to lodge a complaint with your local data protection authority. To exercise your rights, contact us at the address above.

12. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will delete that information promptly.

13. Do Not Track Signals

Our Site does not track users across third-party websites and therefore does not respond to Do Not Track (DNT) signals. We do not engage in cross-site tracking.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Effective Date" and "Last Reviewed" dates at the top of this page. We encourage you to review this policy periodically. Continued use of the Site or Services after changes constitutes acceptance of the updated policy.

15. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal data, contact us at: