Privacy Policy

Who is responsible for the data

The personal data operator is Scale For Agency LLC, Georgia (referred to as “SCALEFOR”, the “operator”, “we” or “us”). Website: https://scalefor.agency. Privacy contact: info@scalefor.agency.

This Policy applies to data submitted through the recruitment request form, by email or during subsequent business communications. The service is intended for company representatives and adult professionals.

Processing is carried out with regard to the Law of Georgia on Personal Data Protection. Where mandatory laws of another country apply to a specific processing activity, the operator takes those requirements into account to the necessary extent.

Data we may collect

• name and company name;
• the role or professional profile the user is seeking;
• selected messenger and contact details;
• email address;
• comments and other information voluntarily included in the request;
• for candidates: target role, professional level, traffic sources, verticals, experience, working model, compensation expectations, availability, and links to a CV, LinkedIn profile, portfolio or anonymised case studies;
• date, time, consent-text version and technical record of form submission;
• security logs that may include an IP address, browser and device type, requested-page address and request time.

Please do not include special-category data, health information, payment details, passwords or documents in the free-text field unless we have explicitly requested them for a lawful and previously explained reason.

Why we need the data

• receive and review a recruitment request;
• contact the user and clarify the vacancy, team and requirements;
• prepare a proposal, agree terms and enter into an agreement;
• conduct business correspondence and manage the client relationship;
• maintain an internal candidate network, match professional profiles against client-company briefs and contact a candidate when a relevant opportunity appears;
• after separate approval from the candidate, present the profile to a specific company for consideration for a role;
• protect the website, detect abuse and document consent;
• comply with legal obligations and protect legal claims.

We do not use form data for bulk promotional messaging without a separate legal basis and a separate, clear user choice.

Why processing is lawful

Depending on the circumstances, processing is based on the user’s consent; the need to review a request or take steps before entering into an agreement; performance of an agreement; the operator’s legitimate interests in security and the protection of rights, provided those interests do not override the user’s rights; or a direct legal obligation.

The form fields are required because we cannot process and respond to a request without contact details and role context. Users may choose not to submit the form and contact us by email instead.

Who receives access

Access is provided only to the extent necessary for a specific task:

• authorised SCALEFOR employees and contractors;
• specialist experts involved in assessment or search preparation and bound by confidentiality obligations;
• client companies, only for a role agreed with the candidate in advance and only to the extent necessary to consider the profile;
• hosting, database, communications and information-security providers;
• public authorities where disclosure is required by applicable law.

Supabase is intended to be used as a technical processor for storing requests. Relationships with processors must be governed by agreements defining the subject matter, purposes, data categories, duration and security measures.

Joining the internal candidate network does not itself authorise bulk or automatic disclosure of candidate data to employers.

Where data may be stored

Supabase infrastructure hosts the project in a region selected by the operator. The exact project region has not yet been confirmed in this version of the Policy. It must be selected and stated before request processing begins.

Where data is transferred or made accessible outside Georgia, the operator assesses the lawfulness of the transfer and applies safeguards required by law, including contractual obligations for the recipient and appropriate security measures.

No longer than necessary

Request data is retained until the processing purposes are fulfilled, but for no longer than three years from the last substantive interaction with the user. Data is deleted earlier following a valid request or withdrawal of consent unless another lawful basis for retention applies.

Certain information may be retained longer where necessary to comply with a mandatory legal requirement, resolve a dispute or protect legal claims. Technical security logs are retained only for the period objectively necessary to protect the website.

Control over your data

Where provided by law, users may:

• obtain information about processing and access their data, including a copy;
• request correction, updating or completion of inaccurate data;
• request that processing cease and that data be erased or destroyed;
• request restriction or blocking of data where applicable;
• withdraw consent without affecting the lawfulness of prior processing;
• receive data in a structured, machine-readable format where the right to portability applies;
• challenge the operator’s actions before the Personal Data Protection Service of Georgia or a court.

Requests should be sent to info@scalefor.agency. To protect personal data, we may ask you to verify your identity. We respond without undue delay and within the time limits set by applicable law; for certain requests, Georgian law provides a period of up to ten business days unless a specific ground provides otherwise.

Organisational and technical measures

The operator applies measures proportionate to the risk, including role-based access restrictions, confidentiality obligations for persons with access, protected data transmission, processing records, software updates, backups and incident-response procedures. Absolute security of internet transmission cannot be guaranteed, but measures are reviewed regularly in light of the nature of the data and available technologies.

Your choice is remembered

The website uses essential browser technologies to function correctly and remember cookie preferences. In the current version, the user’s “accept” or “reject” choice is stored locally in the browser under the key scalefor_cookie_consent_v1.

Optional analytics, advertising pixels or other tracking technologies must not run before the user selects “Accept”. Selecting “Reject optional” does not limit the website’s core functionality. If such tools are added, the Policy will be updated to identify providers, purposes and retention periods.

You can change your choice through “Cookie settings” in the footer or by clearing site data in your browser settings.

Current version

This Policy may be updated when the website, processing practices or legal requirements change. A new version will be published on this page with an updated effective date. Where material changes affect previously given consent, the operator will request new consent when required by law.