ScaleUp
Marketing

GDPR Privacy Notice

Last updated: 20 April 2026

Dear Sir / Madam,

SCALEUP MARKETING LTD, a company registered in the United Kingdom with Company Number 15793088, having its registered office at Unit A, 82 James Carter Road, Mildenhall, United Kingdom, IP28 7DE, legally represented by Vlad Cerghezan (hereinafter referred to as the "Company" or "Controller"), hereby presents this

PRIVACY NOTICE

regarding the processing of personal data in accordance with REGULATION (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter "GDPR"), with UK GDPR (as incorporated into UK law by the Data Protection Act 2018) and with applicable legislation on the protection and security of personal data.

1. Personal data processed

The Company processes your personal data, which includes in particular the following:

  • Personal identification data: name, surname, age or date of birth (if provided);
  • Contact data: phone number, email address, city or locality of residence, correspondence address (if provided);
  • Other relevant data within the contractual relationship: personal data provided for the purpose of participating in webinars organised by SCALEUP MARKETING LTD;
  • Data provided by you: by post, telephone, email, social media messages, WhatsApp or other communication platforms;
  • Communication history: contact details and the history of electronic messages within conversations held with the Company (including WhatsApp, Instagram, email messages);
  • Event recordings: audio/video recordings from webinars or other events organised by the Company;
  • Automatically collected data: IP address, browser and device type, cookies, timestamps, website browsing history;
  • Third-party tools: data collected through Facebook Pixel, Google Analytics and other advertising or analytics platforms.

We also inform you that by registering for a webinar or completing any form on the website, you consent to receiving emails, SMS messages and WhatsApp messages from us, which may include information relevant to the event, additional materials, bonuses, educational resources and subsequent marketing communications.

2. Purpose of processing

The Company processes your personal data for the following purposes:

  • Managing webinar and event registrations;
  • Presenting the Company's products and services;
  • Processing and recording your requests;
  • Sending promotional, educational and informational materials;
  • Sending notifications via email, SMS or WhatsApp (offers, bonuses, resources);
  • Verifying data accuracy and preventing fraud;
  • Conducting statistics and analyses (in anonymised form);
  • Personalising services and improving user experience;
  • Measuring marketing campaign performance;
  • Providing fast and efficient support;
  • Managing correspondence and financial-accounting documents;
  • Archiving in accordance with the law;
  • IT platform administration and system security;
  • Complying with legal obligations (GDPR, UK GDPR).

3. Legal basis for data processing

The legal bases for processing personal data are, as applicable:

  • Consent: Art. 6(1)(a) GDPR;
  • Performance of a contract: Art. 6(1)(b) GDPR;
  • Legal obligation: Art. 6(1)(c) GDPR;
  • Legitimate interests: Art. 6(1)(f) GDPR (the interests of the Company or a third party).

4. Persons who will have access to personal data

Your personal data is intended for use by the controller (the Company) and is communicated to the following recipients, where applicable:

Email marketing service providers; SMS marketing service providers; webinar platforms (e.g. Zoom); web analytics providers (Google Analytics, Facebook); hosting providers; tax and legal consultants; competent public authorities.

Disclosure of data to third parties is carried out exclusively on the basis of contracts that ensure the confidentiality and security of your data. Since the Company is registered in the United Kingdom, international data transfers are carried out in accordance with the protection mechanisms provided by GDPR and UK GDPR.

5. Period of retention of personal data

Your personal data is retained for as long as the purpose of processing persists.

Data collected through webinar registration forms will be retained for the duration of the commercial relationship and until withdrawal of consent, but not more than 5 years from the last activity. Archiving is carried out in accordance with legal obligations.

6. Your rights

In accordance with applicable legal provisions, you have the following rights:

  • 6.1. Right of access: Obtaining access to and copies of your data.
  • 6.2. Right to rectification: Correcting inaccuracies or completing incomplete data.
  • 6.3. Right to erasure: The "right to be forgotten" (subject to legal limitations).
  • 6.4. Right to restriction of processing: In case of dispute about accuracy or unlawfulness.
  • 6.5. Right to data portability: Transfer of data to another controller in a structured format.
  • 6.6. Right to object: Objection to processing, especially for direct marketing.
  • 6.7. Right to withdraw consent: At any time, processed within max. 3 business days.
  • 6.8. Automated decision-making and profiling: Right not to be subject exclusively to automated systems.
  • 6.9. Right to lodge a complaint: With the competent supervisory authorities.

ANSPDCP (Romania): B-dul G-ral Gheorghe Magheru 28-30, Sector 1, Bucharest (www.dataprotection.ro).

ICO (United Kingdom): Wycliffe House, Water Lane, Wilmslow, Cheshire (www.ico.org.uk).

7. Important notes

Exercising your rights over your data may prevent us from performing the contract, in which case the Company is discharged from liability. The information provided does not constitute income guarantees; results depend on individual implementation.

8. Contact

To exercise your rights or for enquiries: