Last updated: September 8, 2026

This policy explains how ScaleHaven handles information on scalehaven.io. It covers visitors to this website. If you are a ScaleHaven client, the handling of data inside your campaigns and your patients' information is governed by your client agreement, not by this page.

We are a marketing agency for med spas, aesthetic clinics, dermatology, and plastic surgery practices in the United States and Canada. We are not a healthcare provider, and this website does not collect patient health information.

Information You Give Us

You only give us information when you choose to. That happens when you:

  • Fill in a contact or enquiry form (name, email, phone, business name, website, and whatever you write in the message)
  • Complete the marketing scorecard or the ROI calculator
  • Book a call through Calendly
  • Complete a client onboarding form
  • Email us directly

We ask for the minimum we need to reply to you properly. You are never required to give us anything to read this site.

Information Collected Automatically

Like almost every website, we collect some technical information automatically: your IP address, browser and device type, the pages you visit, how you arrived (search, social, a link, or an ad), and roughly how long you stay. This is aggregate behaviour data, and we use it to understand which content is useful and which is not.

Cookies and Tracking Tools

We use three third-party tools on this site. Each one sets cookies or similar identifiers in your browser.

  • Google Analytics 4. Measures traffic, which pages get read, and which actions people take. Google processes this on our behalf. Their practices are described in Google's privacy policy.
  • Meta Pixel. Lets us measure the performance of our advertising and show relevant ads to people who have visited this site. We have Automatic Advanced Matching enabled, which means that if you submit a form, your email address is converted into an irreversible hashed value in your own browser before being sent to Meta, so Meta can match it to an account without us transmitting the address itself. Meta's practices are described in Meta's privacy policy.
  • Microsoft Clarity. Records anonymised session activity and heatmaps so we can see where pages confuse people. Clarity masks text input by default. Microsoft's practices are described in the Microsoft privacy statement.

We do not sell your personal information, and we do not share it with data brokers.

How We Use Information

  • To reply to your enquiry and, if it makes sense, to talk about working together
  • To deliver the scorecard or calculator results you asked for
  • To improve this website and the content on it
  • To measure our own advertising and show relevant ads to people who visited
  • To meet legal and accounting obligations

We do not send marketing email to people who have not asked to hear from us, and every email we do send has an unsubscribe link.

Who We Share It With

We share information only with the service providers that run this business, and only so far as they need it to do their job:

  • Netlify hosts this website and processes form submissions
  • Google provides analytics and advertising services
  • Meta provides advertising services
  • Microsoft provides session analytics through Clarity
  • Calendly handles call scheduling
  • Google Workspace handles our email

We may also disclose information if the law requires it, or to protect our legal rights.

Your Choices

  • Cookies. Every major browser lets you block or delete cookies. Blocking them will not stop you using this site.
  • Google Analytics. You can install the Google Analytics opt-out add-on.
  • Meta advertising. You can control what you see through your Meta ad preferences.
  • Microsoft Clarity. Clarity honours the Global Privacy Control signal, and browsers that send it are excluded.
  • Email. Unsubscribe from any message, or write to us and we will remove you.

Your Rights

Depending on where you live, you may have the right to ask us what personal information we hold about you, to have it corrected, to have it deleted, to receive a copy of it, or to object to how we use it. Residents of California and several other US states have these rights under state privacy law. Residents of Canada have comparable rights under PIPEDA and provincial equivalents.

To exercise any of them, email john@scalehaven.io. We will respond within the timeframe the applicable law requires, and we will not treat you differently for asking.

How Long We Keep Things

We keep enquiry and client records for as long as we have a working relationship and for a reasonable period afterwards, to meet accounting and legal obligations. Analytics data is retained for 14 months. If you ask us to delete your information and we have no legal reason to keep it, we will.

Security

This site is served over HTTPS, and the services we use are established providers with their own security programmes. No system is perfectly secure, so we do not claim otherwise, but we do not hold sensitive information on this website and we keep what we do hold to a minimum.

Children

This site is aimed at business owners and is not directed at anyone under 18. We do not knowingly collect information from children.

Where Your Information Goes

We operate in the United States and Canada, and our service providers are largely US-based. If you contact us from elsewhere, your information will be processed in those countries, which may have different privacy laws than your own.

Changes to This Policy

When we change how we handle information, we update this page and change the date at the top. Material changes will be obvious rather than buried.

Contact

Questions about this policy, or about anything we hold on you, go to john@scalehaven.io. A person reads that inbox.