Clear limits on the information we collect.
Effective date: 27 July 2026
1. Scope and responsibility
This policy applies to scopeledger.net and information submitted through its exposure-review form. The website is operated by Muhammad Shahbaz Ali under the ScopeLedger name. A separate signed agreement, statement of work or data-processing agreement may apply to a customer pilot or deployed ScopeLedger workspace.
2. Information we collect
When you request a review, we receive the work email and company information you provide; the currency, revenue assumptions, percentages and estimated exposure produced by the calculator; and limited campaign or personalization fields attached to the page link, such as source, campaign, target company, target contact and an opaque outreach reference.
Hosting and security providers may also process technical information needed to deliver and protect the site, such as IP address, request time, browser or device information, security signals and form-validation results.
3. How we use information
- Respond to your request and arrange a review, walkthrough or pilot discussion.
- Understand the commercial context behind your enquiry.
- Create or update the enquiry in our customer-relationship system and maintain a record of the interaction.
- Protect the form and website from spam, fraud and technical abuse.
- With your consent where required, measure website use and improve the site.
4. Service providers and data destinations
- Netlify hosts the website, runs the server-side form function and stores verified form submissions. Netlify privacy information.
- Cloudflare provides network security, Web Analytics and Turnstile bot protection. Turnstile evaluates browser and request signals and returns a validation token that the server verifies before accepting the form. Cloudflare Privacy Policy.
- HubSpot receives identified enquiry details, calculator context and campaign fields so the request can be recorded and followed up. A contact record and an activity note may be created or updated. HubSpot Privacy Policy.
- Zoho Mail handles ScopeLedger business email and may receive form-notification or follow-up messages containing enquiry information. Zoho Privacy Policy.
- Google provides Google Tag Manager and Google Analytics 4 only as described in the optional-analytics section below. How Google uses data from partner sites.
- Microsoft Clarity provides consent-controlled heatmaps and session recordings that help us understand clicks, scrolling and page-layout behaviour. Clarity is configured to mask page text and form-field content in recordings. Microsoft Privacy Statement.
- Sentry provides essential error monitoring so we can identify and repair website failures. Reports are minimized: query strings, form contents, contact details, calculator figures, cookies and session replay are not intentionally sent. Tracing and session replay are disabled. Sentry Privacy Policy.
5. Optional analytics, cookies and browser storage
Google Tag Manager, Google Analytics 4, Microsoft Clarity and the HubSpot visitor-tracking script remain off unless you select “Accept analytics”. When enabled, these services may measure page views, traffic sources, sessions, selected website interactions, heatmaps and masked session recordings. Advertising storage, advertising-user data and ad personalisation remain disabled. ScopeLedger does not currently run Meta Pixel.
Cloudflare Web Analytics measures aggregate website performance and traffic without creating an advertising profile. The site also uses local browser storage to remember your analytics choice and session storage to retain campaign or personalization context during the current browser session. Rejecting optional analytics does not prevent a form you choose to submit from being securely validated, stored and entered into HubSpot for follow-up.
You can change your analytics choice at any time using the “Cookie settings” button.
6. Sharing, transfers and retention
We do not sell personal information. Information is shared only with providers supporting hosting, security, analytics, email and lead handling; professional advisers where necessary; or authorities when legally required. These providers may process information in countries other than your own under their applicable contractual and legal safeguards.
Enquiry records are retained only as long as reasonably necessary to respond, evaluate a possible business relationship, maintain appropriate business and security records, and meet legal obligations. Form and CRM records are reviewed and may be deleted or anonymized when they are no longer needed.
7. Your choices and requests
You may request access, correction or deletion of information you submitted. Applicable rights vary by jurisdiction. We may retain limited records where required for security, legal or legitimate business purposes.
8. Security and sensitive records
We use HTTPS, restrictive browser-security headers, server-side input validation, Cloudflare Turnstile and form-spam controls. Access to the supporting accounts is protected with individual credentials and multi-factor authentication where available. No public website can guarantee absolute security. Do not submit contracts, claim files, evidence, credentials or other confidential project records through the public form; use an agreed private channel.
9. Contact and updates
Contact [email protected] for privacy requests. Material changes will be posted on this page with a revised effective date.