How we handle your information.

1. Data controller

Scale Consulting ApS is the data controller for the processing of personal data described in this policy.

• Scale Consulting ApS
• Company reg. no. (CVR): [FILL IN CVR NUMBER]
• [FILL IN ADDRESS], Silkeborg, Denmark
• Email: christian@scaleconsulting.dk
• Phone: +45 22 99 84 79

This policy covers two things: part A concerns the website scaleconsulting.dk, and part B concerns our Shopify app, GENRISE Lab. If you have only visited the website, part A is the relevant one.

Part A — The website scaleconsulting.dk

A.1 The contact form

When you fill in the form to book a growth analysis, we process the information you enter yourself: name, email, phone number, company name, website, platform, stage of your growth journey, revenue range, ad spend, where you heard about us, and your description of your challenges.

Purpose: to contact you, assess whether we are a match, and prepare the analysis you asked for.

Legal basis: GDPR Article 6(1)(b) — steps taken at your request prior to entering into a contract. For information that is not necessary in order to reply to you (such as where you heard about us), the basis is Article 6(1)(f) — our legitimate interest in understanding what works in our marketing.

Voluntary: you decide what you write. Only your name and email are required for us to get back to you.

A.2 Cookies and the Meta Pixel

The website uses cookies. Necessary cookies make the site work. In addition, we use the Meta Pixel, which collects information about your visit — which pages you view, whether you click a button, and whether you submit the form — so we can measure the effect of our advertising and show relevant ads.

Legal basis: your consent, under the Danish Cookie Order and Article 6(1)(a). You can change or withdraw your consent at any time via the cookie settings at the bottom of the page. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

A.3 Who receives the information

We never sell, rent or trade your information. We use the following processors to run the website:

Transfers to third countries: some providers process information in the United States. Transfers are made on the basis of the European Commission's Standard Contractual Clauses and, where relevant, the EU-U.S. Data Privacy Framework. You can request a copy of the transfer basis by contacting us.

Beyond this, we only disclose information where we are legally required to do so.

A.4 How long we keep the information

• Enquiries that do not lead to a partnership: deleted no later than 12 months after the last contact.
• Enquiries that lead to a partnership: kept for the duration of the partnership and then for up to 5 years after the end of the financial year the agreement relates to, under the Danish Bookkeeping Act.
• Cookie and pixel data: retained according to Meta's own deletion periods, typically up to 24 months.

Part B — GENRISE Lab (Shopify app)

This part applies if your business installs and uses our Shopify app, GENRISE Lab. Here we process information on behalf of your store.

B.1 What information is processed

• Store information: store name, domain, store owner contact email and plan information from Shopify.
• Order, product and performance data: order IDs and order details, revenue and refunds, customer country/region as metadata, product IDs, titles, variants and pricing, plus traffic and event data from Shopify's APIs.
• App configuration: the settings, data mapping rules and integration preferences you configure yourself.
• Technical data: IP address, browser and device information, and log files for operations and troubleshooting.

We do not collect payment details such as card numbers or other sensitive financial data.

B.2 Purpose and legal basis

The information is used to deliver the app's features, sync Shopify data into your dashboard, calculate metrics such as revenue, growth and attribution, improve the app's stability and speed, and provide support.

Legal basis: Article 6(1)(b) — performance of the agreement on use of the app. For operations, troubleshooting and security, the basis is Article 6(1)(f) (legitimate interest in a stable and secure service). Where we process information on behalf of your store, this is done under a data processing agreement in which your business is the controller.

The app only accesses the data necessary for its purpose.

B.3 Retention and deletion

• Data is retained for as long as the store uses GENRISE Lab.
• After uninstallation, store data is deleted no later than 90 days afterwards, except for limited metadata we are required to keep for bookkeeping or documentation purposes.
• You may request full deletion at any time.

We comply with Shopify's data processing requirements as well as the GDPR's rules on retention.

2. Security

We have implemented technical and organisational measures to protect the information, including encrypted data transfer (TLS), access limited on a need-to-know basis, and secure server environments with established providers. However, no online system can guarantee absolute security.

If a personal data breach occurs that poses a risk to your rights, we report it to the Danish Data Protection Agency within 72 hours and inform you if the risk is high.

3. Your rights

Under the GDPR you have the right to:

• Access — to know what information we process about you, and receive a copy.
• Rectification — to have incorrect information corrected.
• Erasure — to have information deleted when we no longer have grounds to process it.
• Restriction — to have processing restricted in certain cases.
• Data portability — to receive the information you provided to us in a machine-readable format.
• Objection — to object to processing based on our legitimate interest, including direct marketing.
• Withdrawal of consent — at any time, without affecting the lawfulness of processing before the withdrawal.

Write to christian@scaleconsulting.dk and we will respond as soon as possible and within one month at the latest.

4. Children

Our services are aimed at businesses and are not intended for children under the age of 13. We do not knowingly collect information about children.

5. Changes to this policy

We may update this policy from time to time, for example if we add new tools or the law changes. The current version is always available on this page. In the event of significant changes, we will actively inform the users concerned. The GENRISE Lab policy lives here until GENRISE has its own website.

6. Contact

Questions about this policy or your information:
Scale Consulting ApS / GENRISE Lab — Support
Email: christian@scaleconsulting.dk
Phone: +45 22 99 84 79

Version 1.0 · Last updated 2 August 2026