Privacy Policy

Effective Date: July 2025

1. Introduction

The Sustainable Scale Lab ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

2. Information We Collect

Personal Information You Provide

We may collect the following information when you voluntarily provide it:

Contact Information:

Name, email address, phone number

Business name and website

Mailing address

Business Information:

Annual revenue, years in business

Team size, industry sector

Business challenges and goals

Assessment responses and scores

Account Information:

Username and password

Profile information and preferences

Communication preferences

Payment Information:

Billing address and payment method details

Transaction history (processed through secure third-party providers)

Program Participation:

Course progress and completion data

Coaching session notes and action items

Mastermind participation and contributions

Feedback and testimonials

Information Automatically Collected

Website Usage Data:

IP address, browser type, and operating system

Pages visited, time spent on pages

Referring websites and search terms

Device information and screen resolution

Cookies and Tracking Technologies:

Session cookies for website functionality

Analytics cookies to understand website usage

Marketing cookies for advertising purposes

Local storage for user preferences

3. How We Use Your Information

We use your information for the following purposes:

Service Delivery

Provide and deliver our coaching services, courses, and programs

Process payments and manage your account

Communicate about your programs and progress

Provide customer support and respond to inquiries

Business Operations

Improve our website, services, and user experience

Analyze usage patterns and website performance

Conduct research to enhance our methodologies

Develop new services and features

Marketing and Communications

Send newsletters, updates, and promotional materials

Provide relevant content and offers

Conduct surveys and gather feedback

Share success stories and case studies (with permission)

Legal and Security

Comply with legal obligations and regulations

Protect against fraud and unauthorized access

Enforce our Terms & Conditions

Resolve disputes and legal matters

4. Information Sharing and Disclosure

We Do Not Sell Personal Information

We do not sell, trade, or rent your personal information to third parties for their marketing purposes.

Service Providers

We may share information with trusted third-party service providers who assist us in:

Payment processing (e.g., Stripe, PayPal)

Email marketing (e.g., ConvertKit, Mailchimp)

Website hosting and analytics (e.g., Google Analytics)

Customer relationship management

Technical support and maintenance

Business Transfers

If we undergo a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Legal Requirements

We may disclose information when required by law, court order, or government regulation, or to protect our rights and safety.

Consent

We may share information when you have given explicit consent for specific purposes.

5. Data Retention

We retain your personal information for as long as necessary to:

Provide ongoing services

Comply with legal obligations

Resolve disputes and enforce agreements

Maintain legitimate business records

Specific Retention Periods:

Account information: Until account deletion + 7 years

Payment records: 7 years for tax and accounting purposes

Marketing data: Until unsubscribe + 2 years

Website analytics: 26 months (Google Analytics default)

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

Technical Safeguards

SSL encryption for data transmission

Secure hosting with regular security updates

Regular security assessments and monitoring

Access controls and authentication requirements

Organizational Safeguards

Employee training on privacy and security

Limited access to personal information on need-to-know basis

Regular review of privacy practices and policies

Incident response procedures

Limitations

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

Access and Correction

You have the right to:

Access the personal information we hold about you

Request correction of inaccurate or incomplete information

Update your account information and preferences

Data Portability

You may request a copy of your personal information in a structured, machine-readable format.

Deletion

You may request deletion of your personal information, subject to:

Legal requirements for record retention

Legitimate business needs

Technical limitations

Marketing Communications

You can:

Unsubscribe from marketing emails using the link provided

Update your communication preferences in your account

Contact us to opt out of specific communications

Cookies

You can control cookies through your browser settings:

Block all cookies (may affect website functionality)

Delete existing cookies

Receive notifications before cookies are placed

8. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

10. Third-Party Services

Website Integrations

Our website may use third-party services including:

Google Analytics for website analytics

Social media platforms for content sharing

Payment processors for transaction processing

Email service providers for communications

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

11. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know

Categories of personal information collected

Sources of personal information

Business purposes for collection

Third parties with whom information is shared

Right to Delete

Request deletion of personal information, subject to certain exceptions.

Right to Opt-Out

Opt out of the sale of personal information (Note: We do not sell personal information).

Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

Exercising Rights

To exercise these rights, contact us using the information below. We may require verification of your identity.

12. European Union Rights

If you are in the European Union, you have rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

We process your information based on:

Consent for marketing communications

Contract performance for service delivery

Legitimate interests for business operations

Legal compliance where required

Additional Rights

Right to object to processing

Right to restrict processing

Right to data portability

Right to lodge a complaint with supervisory authorities

13. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:

Post the updated policy on our website

Update the "Effective Date" at the top

Notify you of significant changes via email or website notice

Obtain consent for material changes where required

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

The Sustainable Scale Lab
Email: [email protected]
Address: 853 Dauphin Street, Suite C, Mobile, AL 36602

For EU-related inquiries, you may contact our Data Protection Officer at: [email protected]

15. Effective Date and Previous Versions

This Privacy Policy is effective as of July 2025. Previous versions are available upon request.