Privacy Policy

1. Introduction

This Privacy Policy explains how Treasure Islands LLC, operating as Scaling Peak (“we”, “us”, “our”), collects, uses, shares and protects personal data when you visit scalingpeak.com, send a form, request a free Amazon audit, book a call or otherwise contact us.

We are a business-to-business marketing agency: we collect only the data we need to answer enquiries and deliver our services. We do not sell personal data.

2. Who we are

Treasure Islands LLC, operating as Scaling Peak, is the controller of the personal data described in this policy. You can reach us at any time at info@scalingpeak.com.

If you are a client, the agreement we sign with you may add further terms about how we process data on your behalf; that agreement prevails over this policy where the two differ.

3. Information we collect

We collect the following categories of personal data:

Contact and enquiry data

Your name, email address, company name, role and the content of the message you send through our contact form or by email.

Free audit questionnaire data

The information you provide when requesting a free Amazon audit: your storefront or listing link, brand website, marketplace, product category, revenue and ad-spend ranges, who currently manages your advertising, your goal and your timeline.

Booking data

When you book a discovery call, scheduling is handled by Calendly: the name, email address and answers you provide go to Calendly and appear in the calendar invitation. The booking itself is not stored in our own database.

Client and business data

For clients — the contact details of the people we work with, contract and billing information, and the account data you grant us access to so that we can deliver the services.

Technical data

Your IP address, browser type and version, device type, operating system, referring page and the pages you view. Some of this is written into standard server logs for security and troubleshooting.

Analytics data

Aggregated statistics about how the site is used, collected with a privacy-friendly, cookieless analytics tool that does not build profiles of individual visitors.

We do not knowingly collect special categories of data (such as health, biometric or political data), and we ask you not to include such information in the messages you send us.

4. How we use your information

We use personal data to:

• respond to your enquiry, prepare your free Amazon audit and send you the results;
• arrange and hold discovery calls and other meetings;
• provide, manage and improve the services agreed with you;
• send transactional emails, such as the confirmation that we received your request;
• send occasional updates and marketing about our services, where you opted in or where we may rely on legitimate interest under applicable law;
• keep the website secure, prevent spam and abuse, measure how the site performs and improve our content;
• comply with our legal, accounting and tax obligations.

We never use your data for automated decision-making that produces legal effects, and we do not sell it.

5. Legal bases for processing (EEA and UK)

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases under the GDPR:

• Consent — for non-essential cookies, for loading the scheduling widget and for marketing emails where consent is required. You can withdraw consent at any time.
• Performance of a contract — to deliver the services we agreed with you and to take steps at your request before entering into a contract.
• Legitimate interests — to answer business enquiries, secure the website, understand how it is used and promote our services to business contacts, balanced against your rights.
• Legal obligation — to keep accounting records and to respond to lawful requests from authorities.

6. How we share your information

We do not sell or rent personal data. We share it only with the service providers that help us run the business, and only as far as they need it:

• Hosting and infrastructure — the providers that serve and deliver this website;
• Database and storage — our backend platform, where enquiries and audit requests are stored;
• Email delivery — the provider that delivers our confirmation and notification emails;
• Scheduling — Calendly, when you book a call with us;
• Professional advisers and accountants, authorities where disclosure is legally required, and a successor entity in the event of a merger, acquisition or sale of assets.

All providers act on our instructions under contracts that require appropriate confidentiality and security measures.

7. International data transfers

We are based in the United States, and our providers may process data in the United States and other countries whose data protection laws differ from those in your country. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with additional technical and organizational measures where needed. Write to info@scalingpeak.com if you would like more detail.

8. How long we keep your data

We keep enquiry and audit-request data for as long as we need it to answer you and, where a business relationship develops, for the duration of that relationship. If no relationship develops, we delete or anonymize the request within 24 months.

Client contract, billing and accounting records are kept for the period required by law, typically up to seven years. Server logs are kept briefly for security purposes, and analytics data is aggregated so that it cannot be linked back to you.

9. How we protect your data

The site is served exclusively over encrypted HTTPS connections, data is stored with reputable providers with encryption at rest, and access to enquiries is limited to the team members who need it and protected by individual accounts.

No method of transmission or storage is completely secure. If a breach affects your personal data and is likely to present a risk to you, we will notify you and the competent authority as required by law.

10. Your data protection rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy of it;
• have inaccurate or incomplete data corrected;
• have your data deleted where we no longer have a legal ground to keep it;
• restrict or object to processing, including processing based on legitimate interests;
• receive the data you provided in a portable, machine-readable format;
• withdraw consent at any time, without affecting processing carried out before the withdrawal;
• unsubscribe from marketing emails through the link in every message or by writing to us.

To exercise any of these rights, email info@scalingpeak.com. We respond within 30 days and may first ask you to confirm your identity. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection authority.

11. California privacy rights

If you are a California resident, the CCPA as amended by the CPRA gives you the right to:

• know what personal information we collect, where it comes from, why we process it and with whom we share it;
• request a copy of the personal information we hold about you;
• request the deletion or correction of your personal information;
• not be discriminated against for exercising any of these rights.

We do not sell or share personal information as those terms are defined by the CCPA, and we do not use sensitive personal information to infer characteristics about you. To exercise your rights, email info@scalingpeak.com; an authorized agent may submit a request on your behalf.

12. Children's privacy

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us at info@scalingpeak.com and we will delete it.

13. Third-party websites and links

Our site links to third-party websites and platforms, including Amazon, Calendly, Trustpilot and our social profiles. This policy does not cover them, and we are not responsible for their content or privacy practices. Please read their own privacy notices before providing them with personal data.

14. Marketing communications

We send marketing emails only to business contacts who requested information from us or opted in. Every marketing email carries an unsubscribe link, and unsubscribing takes effect immediately. Transactional messages — such as the confirmation that we received your request — are not marketing and are sent regardless.

15. Cookies

We use a small number of cookies alongside a cookieless analytics tool. Which cookies we set, how long they last and how to manage them is described in detail in our Cookie Policy.

16. Changes to this Privacy Policy

We may update this policy as our services, our providers or the law change. The effective date at the top of this page shows the current version, and we will highlight material changes on the site.

17. Contact us

For any question about this policy or about the personal data we hold, write to Treasure Islands LLC at info@scalingpeak.com. We aim to respond within 30 days.