Last updated: 14 September 2026
Scalerox is a social media marketing agency based in Lahore, Pakistan, working with clients around the world. This policy explains what information we collect, why we collect it, who sees it, and what you can ask us to do with it.
We have kept it in plain English. If anything is unclear, just ask.
1. Who we are
Scalerox
Main Boulevard, Airline Society, Lahore, Pakistan
Email: scalerox@gmail.com
Phone and WhatsApp: +92 320 488 4787
Scalerox is the data controller for the information described on this page. That means we decide what is collected and why.
2. Information you give us
When you fill in our contact form, we collect your first name, last name, email address, subject and message. We use it only to reply to you and to discuss the work you are asking about.
When you email, call or message us on WhatsApp, we keep that conversation so we have a record of what was discussed and agreed.
When you become a client, we collect what we need to do the job and invoice you — your business name and address, billing contact, and the brand materials, product information and content you send us for your campaigns.
3. Information collected automatically
Server logs. Like every website, our hosting server records basic technical information when a page is requested: IP address, browser type, device type, the page visited, the referring page and the time. This is standard security and troubleshooting data, kept by our hosting provider.
Cookies. Our website uses a small number of cookies. What they are and what they do is set out in our Cookie Policy.
Analytics. At the time of writing we do not run Google Analytics, Meta Pixel or any other visitor-tracking tool on this website. If we add one, we will update this policy and our Cookie Policy first, and you will be able to decline non-essential cookies.
4. Client accounts we are given access to
This one is specific to the work we do, so we want to be clear about it.
When you hire us to manage your advertising or social media, you give us access to accounts that belong to you — for example your Meta Business Manager, Google Ads account, social media profiles, YouTube channel or website admin. Through that access we can see information those platforms hold, which may include your advertising data, audience insights, messages from your customers, and performance reports.
Our rules for that access:
- We ask for the minimum level of access the job actually needs
- We use the platforms’ own access invitations rather than your raw passwords wherever possible
- We use that access only to do the work you hired us for
- We never download, export, sell or reuse your customer lists or audience data for anything else
- You can withdraw our access at any time, and we ask you to remove it when our work together ends
Where your customers’ personal information passes through accounts we manage, you remain the controller of that information and we act on your instructions.
5. Why we use your information
| What we use it for | Why we are allowed to |
|---|---|
| Replying to your enquiry | You asked us to, by contacting us |
| Sending proposals and doing the work | To perform our contract with you |
| Invoicing and keeping accounting records | Our legal obligation and legitimate interest |
| Keeping the website running and secure | Our legitimate interest in a working, safe site |
| Keeping a record of what was agreed | Our legitimate interest in resolving questions later |
We do not use your information for automated decision-making or profiling.
6. What we never do
- We do not sell your information. Not to anyone, for any price
- We do not rent, trade or share your details with advertisers or data brokers
- We do not add you to a marketing list because you filled in the contact form. If we ever start a newsletter, you will have to ask to join it
- We do not send unsolicited marketing emails
7. Who else sees your information
We share information only with the services we need to run the business, and only what those services need:
- Our hosting provider (Hostinger), which stores this website and any contact form messages sent through it
- Our email provider, which delivers and stores our correspondence with you
- Advertising and social platforms — Meta, Google and similar — when we run campaigns on your behalf, under your account and your instructions
- Payment and banking providers, which process payments between us. We do not see or store your card or bank credentials
- Professional advisers such as an accountant, where required
- Authorities, where the law requires us to disclose something
Each of these handles information under its own privacy terms. We choose established providers and we share the minimum needed.
8. Information leaving your country
We are based in Pakistan and work with clients worldwide, so your information will be processed in Pakistan and in the countries where our providers operate, which may include the United States and the European Union.
If you are in the UK, EU or another region with data transfer rules, this means your information may be transferred outside your home country. We only use reputable providers and we apply the protections described in this policy wherever your information is held.
9. How long we keep it
| What | How long |
|---|---|
| Contact form enquiries that do not become projects | 12 months |
| Client correspondence and project files | 3 years after the project ends |
| Invoices and accounting records | As long as tax law requires, normally 6 years |
| Server logs | As set by our hosting provider, typically a few weeks |
When a retention period ends, we delete the information or remove anything that identifies you.
10. How we keep it safe
- This website is served over an encrypted HTTPS connection
- Accounts that hold client information use strong, unique passwords and two-factor authentication where the platform offers it
- Access is limited to the people who need it to do the work
- We ask clients never to send passwords in plain text, and we use platform access invitations instead
- We remove our access to client accounts when a project ends
No system is perfect, and we will not pretend otherwise. If a breach ever affected your information, we would tell you and the relevant authority without delay.
11. Your rights
Wherever you live, you can ask us to:
- Show you what information we hold about you
- Correct anything that is wrong
- Delete your information, where we are not required to keep it
- Stop using it for a particular purpose
- Send you a copy in a portable format
- Object to how we are using it
Email us at scalerox@gmail.com with what you want and we will respond within 30 days. We will not charge you for this, and we will not treat you differently for asking.
If you are in the UK or EU, you also have the right to complain to your national data protection authority. We would appreciate the chance to put things right first.
12. Children
Our services are for businesses. This website is not intended for children under 16, and we do not knowingly collect their information. If you believe a child has sent us personal information, contact us and we will delete it.
13. Links to other websites
Our website links to other sites — social media profiles, platform documentation, our clients’ websites. Once you click through, you are on someone else’s site under their privacy policy, not ours. We are not responsible for how they handle your information.
14. Changes to this policy
We will update this page when our practices change — for example if we add analytics. The date at the top always shows the current version. If we make a significant change, we will say so clearly at the top of the page.
15. Contact us
Any question about privacy, or any request about your information:
Scalerox
Main Boulevard, Airline Society, Lahore, Pakistan
Email: scalerox@gmail.com
Phone and WhatsApp: +92 320 488 4787
Or use our contact form.