Subscribe

Privacy Policy

Last updated: 2 September 2026

This policy explains what personal information Scale100 collects, why, who it goes to, and what you can ask us to do about it.

1. Who we are

Scale100 is operated by Digital First Pty Ltd, ABN 40 157 690 330, trading as Scale100, of New South Wales, Australia.

Privacy contact: info@scale100.co

2. What we collect

If you subscribe to the newsletter: your email address, your first name if you give it, and engagement data such as whether an email was opened or a link clicked.

If you create an account: your email address, and authentication data such as sign-in times and verification codes. We use a third-party authentication provider and we do not hold passwords – sign-in is by emailed code.

If you buy a report: a record of what you bought and when, so we know what your account may read. Payment card details are handled by our payment processor and never reach our systems.

If you contact us: whatever you put in the message, and your email address.

Automatically, when you visit: IP address, browser and device type, pages visited, referring page, and approximate location derived from IP. See clause 3.

If you appear in our journalism: we hold notes, recordings, correspondence and published material relating to interviews and reporting. See clause 9.

3. Cookies and similar technologies

Cookies are small text files a site stores on your device, letting it remember things between pages and visits – that you are signed in, for example. We also use similar technologies such as local storage, which works the same way for our purposes. Everything in this clause applies to those too.

We do not run advertising, and we set no advertising or cross-site tracking cookies. No advertising network, ad exchange or third-party advertising partner receives anything from this site. Clause 6 covers who does receive your information.

Where analytics cookies do track how you arrived and where you went, that is for our own metrics only – to understand which research gets read so we can decide what to publish next. It is aggregated, it is not used to profile individuals, and it goes to no one outside Scale100.

What we use them for:

Strictly necessary. These make the site work and cannot be switched off. They keep you signed in, keep your session secure, and remember your cookie choices. Without them, gated content cannot work at all – there would be no way to know your session is yours.

Analytics. These tell us which research is read and how people arrive, on the terms above.

Functional. These remember preferences so you are not asked the same thing twice.

Third-party content

Some pages embed material from other services – YouTube videos in particular. Those services may set their own cookies when their content loads, under their own policies, and we do not control them.

Your choices

On the site. Non-essential cookies are set only if you agree. You can change your mind at any time via the cookie settings link in the footer.

In your browser. Every major browser lets you block or delete cookies, in its privacy or security settings. Blocking strictly necessary cookies will stop sign-in working, so gated reports will not open.

Do Not Track

Browsers vary in how they signal a tracking preference, and there is no agreed standard for responding to those signals.

4. What we do not collect

We do not collect sensitive information as that term is used in the Privacy Act – health, race, religion, political or union membership, sexual orientation, biometric or genetic data. Please do not send it to us.

We do not buy personal data from brokers, and we do not sell yours.

5. Why we collect it

Delivering what you asked for

WHAT IT INVOLVES

Sending the newsletter, giving your account access to reports you bought

Running the business

WHAT IT INVOLVES

Invoicing, tax and accounting records, responding to enquiries

Improving the work

WHAT IT INVOLVES

Understanding which research is read, so we publish more of what is useful

Security

WHAT IT INVOLVES

Detecting account sharing, credential abuse and attacks

Legal obligations

WHAT IT INVOLVES

Records we are required to keep

Where UK or EU data protection law applies, our lawful bases are: contract (account and report access), consent (newsletter, non-essential cookies), and legitimate interests (security, analytics, running the business). You can withdraw consent at any time.

6. Who we share it with

We do not sell personal information. We share it with service providers who process it on our behalf, under contract:

Webflow·Site hosting and CMS

WHERE

United States

Clerk·Authentication

WHERE

United States

Brevo·Newsletter delivery

WHERE

European Union

We may also disclose information where the law requires it, or to establish or defend a legal claim.

We do not give advertisers, vendors or sponsors access to your personal information. A vendor who licenses or sponsors published work receives no reader data as part of that arrangement.

7. Where your information goes

Scale100 operates from Australia and uses providers in the United States and the European Union, so your information will be stored and processed overseas.

8. How long we keep it

Journalistic material

RETENTION

Indefinitely, as part of the published record

9. Journalism

Some of what we hold is journalistic material: interview recordings, notes, correspondence and research relating to published or intended reporting.

Handling it is subject to different considerations from ordinary customer data, and in some jurisdictions to specific exemptions for journalism. We treat sources and off-the-record material as confidential, and we do not disclose source identities on request.

10. Your rights

You can ask us to:

•

tell you what personal information we hold about you

•

correct anything wrong

•

delete it, where we are not required to keep it

•

stop sending you email – every newsletter has an unsubscribe link

•

give you a copy in a portable format

Ask at info@scale100.co. We may need to verify who you are first.

Where UK or EU law applies you also have the right to object to processing based on legitimate interests, and to restrict processing while a dispute is resolved.

These rights are limited where information forms part of journalistic material – we will explain if that is the case.

11. Complaints

If you are unhappy with how we have handled your information, tell us first at info@scale100.co and we will try to resolve it.

If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. UK residents can complain to the Information Commissioner's Office at ico.org.uk. EU residents can complain to their national supervisory authority.

12. Security

We use authentication that does not rely on passwords, encryption in transit, access controls on stored data, and providers who maintain their own security programmes.

No system is perfectly secure. If a breach occurs that is likely to cause you serious harm, we will notify you and the relevant regulator as required.

13. Children

The site is for business readers and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe we have, tell us and we will delete it.

14. Changes

We may update this policy. The current version is always at scale100.co/legal/privacy-policy with its effective date. Material changes will be notified by email to subscribers and account holders.

15. Contact

info@scale100.co

Scale100, PO Box 4194, Maroubra South, NSW, Australia