Privacy and cookie policy

This policy explains which personal data we collect through this website and our services, why we do it, who we share it with and what your rights are. We keep it short and clear. In case of differences, the Dutch version prevails.

1. Who is responsible?

The controller is G2 Solutions Ltd (G2 Solutions EOOD), trading as Sales Scaling, registered at 44 Vitosha Blvd, floor 2, 1000 Sofia, Bulgaria, company number (UIC) 206420116, VAT BG206420116 ("we").

For any privacy question, email steven@sales-scaling.com. We have not appointed a data protection officer, as this is not required for a business of our size.

2. What data we process, why, and on what basis

• Playbook and newsletter. Your email address, your first name if you give it, the time you signed up and which page or video you came from. Purpose: sending you the free playbook and the weekly email. Basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Requesting a call. Company name, VAT or company number, role, team size, topic, business email, phone number, your note, the chosen time and whether you came via YouTube or Instagram. Purpose: checking whether a call makes sense, then scheduling and preparing it. Basis: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR).
• Leaving a review. Your name, company, rating, service and text. Purpose: checking the review and, with your explicit agreement, showing it on the site. Basis: your consent (Art. 6(1)(a) GDPR).
• Clients. Contact and billing details of our clients' contact persons, and the content you give us to build your website or carry out your assignment. Purpose: performing the contract, invoicing and support. Basis: performance of the contract (Art. 6(1)(b) GDPR) and legal obligations such as bookkeeping (Art. 6(1)(c) GDPR).
• Business prospecting. To contact businesses that don't have a website yet, we use publicly available business data such as company name, phone number, address and Google reviews, and where available the name of the manager from public registers. Purpose: contacting your business once or a limited number of times with a relevant offer. Basis: our legitimate interest in offering our services to businesses (Art. 6(1)(f) GDPR). You can object at any time and we will not contact you again.
• Email contact. If you email us, we keep your message and our reply. Basis: our legitimate interest in answering questions (Art. 6(1)(f) GDPR).

We do not make decisions about you based solely on automated processing, and we do not build profiles for advertising.

3. Who we share your data with

We never sell or rent your data. We work with these providers, who only process your data on our instructions:

• MailerLite (UAB MailerLite, Lithuania, EU): sending the playbook and newsletter.
• Calendly (Calendly LLC, United States): scheduling calls.
• Cloudflare (Cloudflare Inc., United States): hosting and securing this website.
• Google Workspace (Google Ireland Ltd.): email and file storage.
• YouTube (Google Ireland Ltd.): videos in articles, only after a click.

We also share data with our accountant and with public authorities where the law requires it.

4. Transfers outside the European Economic Area

Calendly and Cloudflare are based in the United States. Both are certified under the EU-US Data Privacy Framework. Where that is not sufficient, we rely on the European Commission's standard contractual clauses. You can request a copy of the relevant safeguards by email.

5. How long we keep your data

• Newsletter and playbook: as long as you're subscribed. After you unsubscribe we delete your data within 30 days. We keep proof of your consent for up to 3 years after you unsubscribe.
• Call requests that don't become clients: up to 12 months after the last contact.
• Reviews: as long as they are on the site, or until you ask us to remove them.
• Prospecting data: up to 12 months after the last contact, or blocked straight away if you tell us you don't want to be contacted. In that case we only keep your number on a list so we don't call you again.
• Client and billing data: for the duration of the contract and afterwards as long as accounting and tax law requires (usually 10 years).

6. Your rights

You have the right to access, correct or delete your data, to restrict processing, to data portability and to object to processing based on our legitimate interest, including prospecting. You can withdraw consent at any time, for emails with the unsubscribe link at the bottom of every email.

Send your request to steven@sales-scaling.com. We reply within one month. We may ask you to confirm your identity.

If you're not satisfied with how we handle your data, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg), the Belgian Data Protection Authority (www.dataprotectionauthority.be) or the supervisory authority in the EU country where you live or work.

7. Cookies and local storage

This website does not set tracking or advertising cookies and does not use Google Analytics, which is why we don't ask for cookie consent. We only use this storage in your browser:

• Pop-up seen (sessionStorage): remembers that you closed the pop-up so you don't see it again. Cleared when you close the tab.
• Source of your visit (sessionStorage): remembers whether you came from YouTube or Instagram, so we show you the right pages and know where a call request came from. Cleared when you close the tab.
• YouTube videos: a video in an article only loads when you click play, via youtube-nocookie.com. From that moment YouTube's (Google's) rules apply.
• Calendly: only when you schedule a call yourself does Calendly open a calendar on our site. Calendly may then set necessary cookies to make your booking work. See Calendly's privacy policy.

If we measure visitor statistics later, we will use a cookieless, privacy-friendly service without personal data, and update this policy.

8. Security

We protect your data with appropriate technical and organisational measures, such as encrypted connections (HTTPS), two-step verification on our accounts and limited access.

9. Changes

If this policy changes, we update the date at the top. For important changes, we let newsletter subscribers know.