Privacy Policy

What we collect, why we collect it, who sees it, and how to make us stop. Written to be read, not skimmed past.

01Who we are

KlientsGrowth is a trading name of Scalix KlientsGrowth LLP, a limited liability partnership registered in India ("KlientsGrowth", "we", "us"). We run klientsgrowth.com and provide a research and introductions service: we read public records and business news to spot companies that are about to need something, and we introduce them to companies that can help.

For the personal data described in this policy, we are the data controller (or "data fiduciary" under India's Digital Personal Data Protection Act, 2023). Where we process data on a client's instructions under a written agreement, we act as their processor and their privacy notice also applies.

02Who this policy covers

• Visitors to klientsgrowth.com.
• People who contact us, book a call, or ask for the monthly signal brief.
• Clients and the people who work for them.
• Business contacts we research, reach out to, or introduce, such as decision-makers at companies that appear in public records or that may be a fit for one of our clients.

03What we collect

Information you give us

• Contact details such as your name, work email, company, and job title when you email us or book a call.
• Booking details you enter on our scheduling page (Cal.com), including any notes about what you want to discuss.
• Signal brief requests. The sign-up box on our site opens a pre-filled email in your own mail client. Nothing is stored by the website itself. If you send that email, we receive your email address and keep it on our list.
• Client information needed to run an engagement: who you want to meet, your offer, your target accounts, meeting notes, and billing details such as company name, address, and tax identifiers.
• Correspondence, including emails and LinkedIn messages you send us.

Information from public sources and data providers

• Public records and publications, for example regulator enforcement records (such as FDA warning letters and Form 483 observations), company press releases, hiring announcements, filings, and trade press.
• Professional contact data about people at those companies: name, job title, employer, work email address, business phone number, and professional profile URL (for example LinkedIn). We get this from public websites and professional networks, and from business data and email verification providers.

We do not seek out sensitive data such as health, financial account, religious, or biometric information about individuals, and we ask clients not to send it to us.

Information collected automatically

• Technical data such as IP address, browser type, and pages requested. Our site is served through Cloudflare, which processes this data to deliver the site and protect it from abuse.
• No analytics or advertising trackers. klientsgrowth.com does not currently run analytics tools, advertising pixels, or tracking cookies. If that changes, we will update this policy first.
• Email engagement data. Some of our outreach tools record whether an email was delivered, opened, or replied to, so we can avoid emailing people who are not interested.

04How we use it

We use personal data only for the purposes below. Where the EU or UK GDPR applies, the legal basis for each is shown in brackets.

• To answer you and hold calls you book with us (steps taken at your request before a contract, and legitimate interests).
• To deliver our services to clients, including research, outreach, introductions, reporting, and invoicing (performance of a contract).
• To research companies and contact business professionals about introductions that may be relevant to their role (legitimate interests, explained in section 05).
• To send the monthly signal brief to people who ask for it (consent, which you can withdraw at any time).
• To keep our site, systems, and email sending secure and reliable, including verifying email addresses before we send to them (legitimate interests).
• To meet legal, tax, and accounting obligations and to establish or defend legal claims (legal obligation and legitimate interests).

We do not sell personal data. We do not use it for targeted advertising, and we do not make decisions about people that have legal or similarly significant effects based only on automated processing.

05Research, outreach and introductions

This is the part of our work most likely to involve you without you having contacted us first, so here is exactly how it works.

• What we look at. Public signals about companies, such as a regulatory citation, a large hiring commitment, or a change in leadership. The signal is about the company. We then identify the people in relevant business roles there.
• How we contact you. By work email or professional networks such as LinkedIn, about a business matter connected to your role. We keep messages short and few. Every email tells you who we are and how to opt out.
• When we share your details. We introduce you to another company only when you reply and agree to the introduction, or when you have already asked to be connected. Before that, we may share limited business details (your company, your role, and the public signal) with a client so they can judge whether an introduction makes sense.
• Why we think this is fair. Under the GDPR we rely on legitimate interests: ours in running a business-to-business introductions service, and our clients' in finding relevant partners. We limit the data to professional details, contact people only about their professional role, and honour every opt-out straight away. You can object at any time.
• Opting out. Reply "unsubscribe" or "remove me" to any email, or write to [email protected]. We add you to a suppression list so you are not contacted again by us. We keep only the minimum needed (your email address or domain) to make sure the opt-out sticks.

06Who we share it with

We share personal data only with the following, and only as much as each needs:

• Service providers who work on our behalf under contract: website hosting and content delivery (Cloudflare), email and file storage (Google Workspace), scheduling (Cal.com), email sending and deliverability platforms, LinkedIn messaging tools, business data enrichment and email verification providers, CRM and project tools, payment providers (bank transfer providers and Razorpay), and our accountants and professional advisers.
• Clients and introduction counterparties, as described in section 05.
• Authorities where the law requires it, or where we need to protect our rights, our clients, or the public.
• A buyer or successor if our business, or part of it, is reorganised, merged, or sold. They would be bound by this policy.

07International transfers

We are based in India and work with clients and contacts in the United States, Europe, and elsewhere. Our service providers may store data in the United States, the European Union, India, or other countries. When we move personal data out of the EU, UK, or another region with transfer rules, we use the safeguards those rules require, such as the European Commission's Standard Contractual Clauses or the provider's own approved transfer mechanism.

08How long we keep it

• Enquiries and booked calls: up to 24 months after our last contact, unless you become a client.
• Client records: for the length of the engagement, then for as long as Indian tax and accounting law requires (generally up to 8 years for financial records).
• Prospect and research data: up to 24 months from when we collected it, unless it remains relevant to an active engagement or you ask us to delete it sooner.
• Signal brief list: until you unsubscribe.
• Suppression list: indefinitely, because that is what keeps an opt-out working.

09Security

We use access controls, two-factor authentication on the accounts that hold personal data, encrypted connections, and reputable providers with their own security programmes. Only people who need the data to do their work can see it. No method of storing or sending data is perfectly secure. If we learn of a breach that affects your personal data, we will notify you and the relevant authorities where the law requires it.

10Your rights

Depending on where you live, you may have the right to:

• ask what personal data we hold about you and get a copy;
• have inaccurate data corrected or completed;
• have your data deleted;
• object to, or ask us to restrict, how we use it, including for outreach;
• withdraw consent where we rely on it, without affecting what we did before;
• receive your data in a portable format;
• nominate someone to exercise your rights if you die or become unable to (India);
• complain to a data protection authority, such as your local EU supervisory authority, the UK Information Commissioner's Office, or the Data Protection Board of India.

California residents. You have the right to know, delete, and correct personal information, and to opt out of its sale or sharing for cross-context behavioural advertising. We do not sell or share personal information in that sense. We will not treat you differently for using any of these rights.

To use any of these rights, email [email protected]. We will reply within 30 days. We may need to confirm your identity before acting on the request.

11Cookies

klientsgrowth.com does not set analytics or advertising cookies. Cloudflare may set a small number of strictly necessary cookies to detect bots and keep the site secure. These do not track you across other websites and do not need consent.

When you follow a link to Cal.com, YouTube, or LinkedIn, or play an embedded video from one of those services, that service may set its own cookies under its own policy.

12Children

Our site and services are for businesses and working professionals. They are not directed at anyone under 18, and we do not knowingly collect personal data from children. If you think we have, contact us and we will delete it.

13Other websites

Our site links to public records, news sources, and third-party services. We are not responsible for how those sites handle personal data. Please read their privacy policies.

14Changes to this policy

We will update this policy when our practices change. The effective date at the top always shows the latest version. If a change materially affects how we use personal data we already hold, we will tell the people affected before it takes effect, where we have a way to reach them.

15Contact and grievance officer

For any privacy question, request, or complaint, contact our grievance officer:

Harsh Shah, Partner, Scalix KlientsGrowth LLP
Email: [email protected]

We aim to acknowledge every message within 3 working days and resolve it within 30 days.

Effective 21 October 2026. Scalix KlientsGrowth LLP, trading as KlientsGrowth.