Last updated: 30th August 2026
Klientscale is operated by Klientscale Ltd, 86-90 Paul street, London, EC2A 4NE, United Arab Emirates ("we", "us"). We are the data controller for the personal data described in this policy.
This policy explains what we collect when you visit our pages, buy our products or communicate with us, why we collect it, what we do with it, and the rights you have.
Privacy contact: [email protected]
If you are in the EU or UK, you may contact our representative instead of us on any matter relating to your personal data.
This policy covers personal data we hold about you — as a visitor to our pages, a prospect, a customer or a member of our community.
This policy does not cover the contact data inside your own CRM. Our products help you message people in a database you already hold. When you do that, you are the controller of that data, not us. We have no access to it. Your obligations to those contacts are yours, and they're set out in our Terms of Service, Section 09.
The one exception is where you engage us for Done-For-You Setup and grant us temporary access to your account. In that case we act as your processor, strictly on your instructions, as described in Terms of Service, Section 9.6.
| Data | When |
|---|---|
| Name, email address | Checkout, membership signup, booking a call, contacting us |
| Phone number | Where you provide it for SMS or WhatsApp contact, or booking |
| Business details | Where you provide them — business name, sector, country |
| Billing country and, where required, tax identifiers | Checkout |
| Payment card details | Entered directly with our payment processor. We never see or store your full card number — we receive a purchase confirmation and the last four digits for support |
| Consent records | Your checkout consent, marketing opt-ins, opt-outs, with timestamps |
| Anything you send us | Support emails, community posts, intake questionnaire answers, call bookings |
Two-step checkout. Our checkout captures your name and email before payment. If you don't complete the purchase, we may still hold those details — see Section 04.
Pages visited, buttons and links clicked, time on page, scroll behaviour, referring source and advertising click identifiers, approximate location derived from IP address, browser, device and operating system.
Session recordings. Microsoft Clarity records anonymised session replays and heatmaps of how visitors move through our pages. Recordings mask text input fields. This runs only where you have consented to analytics cookies.
| Purpose | Lawful basis |
|---|---|
| Delivering what you bought — access, membership, support | Contract |
| Processing payments and refunds | Contract |
| Keeping purchase and tax records | Legal obligation |
| Performing Done-For-You Setup | Contract |
| Emailing you about a checkout you started but didn't finish | Legitimate interests — recovering a transaction you initiated. You can opt out in any such email |
| Marketing emails to existing customers about similar products | Legitimate interests / soft opt-in, with an unsubscribe link in every message |
| Marketing emails, SMS or WhatsApp to non-customers | Consent, given when you subscribe |
| Cookies and similar technologies that are not strictly necessary | Consent, given through our cookie banner |
| Advertising measurement and audience building | Consent |
| Analytics and improving our pages | Consent |
| Preventing fraud, abuse and chargeback disputes | Legitimate interests |
| Establishing, exercising or defending legal claims | Legitimate interests |
Where we rely on consent, you may withdraw it at any time. Withdrawal doesn't affect processing already carried out.
Where we rely on legitimate interests, we have weighed our interests against your rights. You may object at any time — see Section 11. For direct marketing, an objection is absolute and we will stop.
We do not sell your personal data.
We use cookies and similar technologies. Non-essential cookies are set only after you consent through our cookie banner. You can change or withdraw your choices at any time via the cookie settings link in our footer.
| Tool | Purpose | Category |
|---|---|---|
| GoHighLevel / LeadConnector | Runs our pages, forms, checkout, CRM and messaging | Essential |
| Stripe | Payment processing and fraud prevention | Essential |
| Google Tag Manager | Loads and manages the tags below | Essential container; the tags it loads are consent-gated |
| Google Analytics 4 | How visitors use our pages | Analytics — consent |
| Microsoft Clarity | Session replays and heatmaps | Analytics — consent |
| Meta Pixel | Measures which ads led to visits and purchases; audience building | Advertising — consent |
| Google Ads tag | As above, for Google and YouTube ads | Advertising — consent |
| Microsoft Advertising (Bing) UET tag | As above, for Bing ads | Advertising — consent |
| TikTok Pixel | As above, for TikTok ads | Advertising — consent |
Blocking essential cookies may break checkout. Blocking analytics or advertising cookies will not.
We advertise on Meta (Facebook and Instagram), Google, Microsoft (Bing) and TikTok. Where you consent to advertising cookies, these platforms receive data about your visit — including page views, purchase events and, in some cases, a hashed version of your email address for matching purposes.
For the collection and transmission of this data we and the advertising platform may act as joint controllers. Once the platform receives the data, its own privacy policy and its own controllership apply to what it does next. We recommend reviewing the privacy and ad-preference settings of any platform you use.
You can withdraw advertising consent at any time through our cookie settings, and separately through each platform's own ad-preference tools.
We may contact you by email, SMS and WhatsApp.
Transactional messages — receipts, access links, booking confirmations, service updates about something you bought — are sent on the basis of our contract with you. You can't unsubscribe from these while you hold an active purchase, because you need them.
Marketing messages are sent only where we have a lawful basis to do so, and every one carries a free opt-out:
We honour opt-outs promptly and treat plain-language requests ("take me off your list") exactly the same as a keyword. Opting out of marketing does not affect transactional messages.
WhatsApp messaging is delivered through Meta's WhatsApp Business Platform; Meta's own terms and privacy policy apply to the transport of those messages.
We share personal data only with providers who help us run the business, and only what they need. Each acts as our processor under a written agreement, except where noted.
| Provider | Purpose | Where |
|---|---|---|
| GoHighLevel / LeadConnector | Pages, forms, CRM, memberships, email, SMS and WhatsApp delivery | USA |
| Stripe | Payments, refunds, fraud prevention | USA / EU |
| Skool | Community platform, where applicable. Its own privacy policy also applies to your activity there | USA |
| Calendly | Call bookings | USA |
| Analytics, tag management, advertising | USA / global | |
| Microsoft | Clarity analytics, Bing advertising | USA / global |
| Meta | Advertising, WhatsApp message delivery | USA / global |
| TikTok | Advertising | USA / global |
| Our accountants and professional advisers | Tax, legal and compliance | As applicable |
Advertising platforms may act as joint or independent controllers for parts of the processing, as described in Section 06.
We may also disclose data where required by law, to protect our legal rights, or as part of a business sale or transfer — in which case this policy continues to apply.
We are established in the United Arab Emirates, and our providers are located principally in the United States. If you are in the UK or EU, your personal data will be transferred outside the UK/EEA.
The UAE is not currently the subject of a UK or EU adequacy decision. Where we transfer personal data out of the UK or EEA — to ourselves or to our providers — we rely on appropriate safeguards, principally the Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with supplementary measures where required.
You can request a copy of the safeguards we rely on by emailing [email protected].
| Data | Retention |
|---|---|
| Purchase, invoice and tax records | As required by applicable tax law |
| Customer account and membership access | For as long as your access is active, then 12 months |
| Consent and opt-out records | At least 2 years after the consent or opt-out, as evidence of compliance |
| Marketing contact data | Until you unsubscribe or object, then deleted apart from a suppression record |
| Suppression list | Indefinitely — we keep the minimum needed to make sure we don't contact you again |
| Abandoned checkout details | 12 months |
| Support correspondence | 2 years from last contact |
| Intake data for Done-For-You Setup | Deleted or returned within 30 days of the engagement ending |
| Analytics data | Per each provider's retention settings |
We keep a suppression record after you unsubscribe specifically so that we can honour your opt-out. Deleting it entirely would risk contacting you again.
If you are in the UK or EEA, you have the right to:
To exercise any of these, email [email protected] with the subject "Privacy Request". We respond within one month. We may ask you to verify your identity. Exercising your rights is free, and we won't treat you differently for it.
Complaints. You have the right to complain to a supervisory authority. In the UK that's the Information Commissioner's Office (ico.org.uk). In the EEA it's the authority in your country of residence or workplace. We'd appreciate the chance to resolve it first, but you don't have to come to us before going to them.
If you're outside the UK and EEA, you may have equivalent rights under your local law, and we'll apply this section to you in any event.
We do not make decisions producing legal or similarly significant effects about you by automated means alone.
We do use automated tools for advertising audience-building and analytics, as described in Sections 05 and 06. You can opt out through our cookie settings.
Our pages are served over HTTPS. Payments are handled by a PCI-DSS compliant processor. Access to customer data is limited to those who need it. We use multi-factor authentication on the systems that hold personal data.
No system is completely secure, but we take this seriously and we'd expect the same of anyone holding our data.
Our products are for adults running businesses. We do not knowingly collect data from anyone under 18. If you believe a minor has given us personal data, contact us and we will delete it.
We may update this policy as our tools or the law change. The "Last updated" date reflects the current version, and material changes will be posted here. Where a change materially affects how we use your data, we will tell you directly.
Klientscale Ltd
86-90 Paul street, London, EC2A 4NE
[email protected]