ON THIS PAGE
01 Who we are02 What we collect03 Cookies and similar technologies04 What we do not collect05 Why we collect it06 Who we share it with07 Where your information goes08 How long we keep it09 Journalism10 Your rights11 Complaints12 Security13 Children14 Changes15 ContactLast updated: 2 September 2026
This policy explains what personal information Scale100 collects, why, who it goes to, and what you can ask us to do about it.
Scale100 is operated by Digital First Pty Ltd, ABN 40 157 690 330, trading as Scale100, of New South Wales, Australia.
Privacy contact: info@scale100.co
If you subscribe to the newsletter: your email address, your first name if you give it, and engagement data such as whether an email was opened or a link clicked.
If you create an account: your email address, and authentication data such as sign-in times and verification codes. We use a third-party authentication provider and we do not hold passwords – sign-in is by emailed code.
If you buy a report: a record of what you bought and when, so we know what your account may read. Payment card details are handled by our payment processor and never reach our systems.
If you contact us: whatever you put in the message, and your email address.
Automatically, when you visit: IP address, browser and device type, pages visited, referring page, and approximate location derived from IP. See clause 3.
If you appear in our journalism: we hold notes, recordings, correspondence and published material relating to interviews and reporting. See clause 9.
Cookies are small text files a site stores on your device, letting it remember things between pages and visits – that you are signed in, for example. We also use similar technologies such as local storage, which works the same way for our purposes. Everything in this clause applies to those too.
We do not run advertising, and we set no advertising or cross-site tracking cookies. No advertising network, ad exchange or third-party advertising partner receives anything from this site. Clause 6 covers who does receive your information.
Where analytics cookies do track how you arrived and where you went, that is for our own metrics only – to understand which research gets read so we can decide what to publish next. It is aggregated, it is not used to profile individuals, and it goes to no one outside Scale100.
What we use them for:
Strictly necessary. These make the site work and cannot be switched off. They keep you signed in, keep your session secure, and remember your cookie choices. Without them, gated content cannot work at all – there would be no way to know your session is yours.
Analytics. These tell us which research is read and how people arrive, on the terms above.
Functional. These remember preferences so you are not asked the same thing twice.
Some pages embed material from other services – YouTube videos in particular. Those services may set their own cookies when their content loads, under their own policies, and we do not control them.
On the site. Non-essential cookies are set only if you agree. You can change your mind at any time via the cookie settings link in the footer.
In your browser. Every major browser lets you block or delete cookies, in its privacy or security settings. Blocking strictly necessary cookies will stop sign-in working, so gated reports will not open.
Browsers vary in how they signal a tracking preference, and there is no agreed standard for responding to those signals.
We do not collect sensitive information as that term is used in the Privacy Act – health, race, religion, political or union membership, sexual orientation, biometric or genetic data. Please do not send it to us.
We do not buy personal data from brokers, and we do not sell yours.
Delivering what you asked for
WHAT IT INVOLVES
Sending the newsletter, giving your account access to reports you bought
Running the business
WHAT IT INVOLVES
Invoicing, tax and accounting records, responding to enquiries
Improving the work
WHAT IT INVOLVES
Understanding which research is read, so we publish more of what is useful
Security
WHAT IT INVOLVES
Detecting account sharing, credential abuse and attacks
Legal obligations
WHAT IT INVOLVES
Records we are required to keep
Where UK or EU data protection law applies, our lawful bases are: contract (account and report access), consent (newsletter, non-essential cookies), and legitimate interests (security, analytics, running the business). You can withdraw consent at any time.
We do not sell personal information. We share it with service providers who process it on our behalf, under contract:
Webflow·Site hosting and CMS
WHERE
United States
Clerk·Authentication
WHERE
United States
Brevo·Newsletter delivery
WHERE
European Union
We may also disclose information where the law requires it, or to establish or defend a legal claim.
We do not give advertisers, vendors or sponsors access to your personal information. A vendor who licenses or sponsors published work receives no reader data as part of that arrangement.
Scale100 operates from Australia and uses providers in the United States and the European Union, so your information will be stored and processed overseas.
Journalistic material
RETENTION
Indefinitely, as part of the published record
Some of what we hold is journalistic material: interview recordings, notes, correspondence and research relating to published or intended reporting.
Handling it is subject to different considerations from ordinary customer data, and in some jurisdictions to specific exemptions for journalism. We treat sources and off-the-record material as confidential, and we do not disclose source identities on request.
You can ask us to:
•
tell you what personal information we hold about you
•
correct anything wrong
•
delete it, where we are not required to keep it
•
stop sending you email – every newsletter has an unsubscribe link
•
give you a copy in a portable format
Ask at info@scale100.co. We may need to verify who you are first.
Where UK or EU law applies you also have the right to object to processing based on legitimate interests, and to restrict processing while a dispute is resolved.
These rights are limited where information forms part of journalistic material – we will explain if that is the case.
If you are unhappy with how we have handled your information, tell us first at info@scale100.co and we will try to resolve it.
If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. UK residents can complain to the Information Commissioner's Office at ico.org.uk. EU residents can complain to their national supervisory authority.
We use authentication that does not rely on passwords, encryption in transit, access controls on stored data, and providers who maintain their own security programmes.
No system is perfectly secure. If a breach occurs that is likely to cause you serious harm, we will notify you and the relevant regulator as required.
The site is for business readers and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe we have, tell us and we will delete it.
We may update this policy. The current version is always at scale100.co/legal/privacy-policy with its effective date. Material changes will be notified by email to subscribers and account holders.
info@scale100.co
Scale100, PO Box 4194, Maroubra South, NSW, Australia