Privacy policy

Who we are, and how to contact us

This policy is about the Brandscaling Collaboration Club. In it, “we” and “us” means Brandscaling. “You” means you.

The Club is sold by Brandscaling Ai Ltd, DIFC, Dubai. Registered number 14230. Brandscaling Ai Ltd is the data controller. That means we decide how your information is used, and we answer for it.

[CONFIRM — Brandscaling Ltd (UK) also appears on the designs. Which entity is the controller, whether both are, and the registered addresses.]

Questions about your information: email [CONFIRM — privacy email address], or use our contact page.

What this policy covers

It covers every place you give us information about you or your business:

• the website, brandscalingai.com
• checkout, where you join the Entry and Expert plans
• the Elite “Request a call” form
• the Collaboration Club app

Most of our members are UK businesses. The Club launches on 22 October 2026.

What we collect, by source

We set this out in the order you meet it: checkout first, then your profile, then the Interview, then the room.

3.1 Website checkout (Entry and Expert)

• Your name, email and company name.
• Your card number, expiry date, security code and billing postcode.

Card payments are handled by our payment provider, Stripe. We see only the card type, the last four digits and the expiry date. That is what you see in Plan and billing. [CONFIRM — Stripe holds the full card details, not us]

We keep order references, invoices and receipts. We email you your receipts and VAT invoices.

Why: to take payment, to create your account, and to send you the link to set your password.

3.2 The Elite “Request a call” form

• Your name, company, email and phone.
• Whatever you write in the free-text answer.

Why: to call you. We call in UK working hours unless you tell us otherwise.

3.3 Your account and sign-in

• Your email and your password. Passwords must be at least 10 characters.

Links to set your password work once, and expire after one hour.

3.4 Stage 1: Your profile

• Your photo, first name, surname, email and phone.
• Your WhatsApp number, and your LinkedIn, Instagram and Facebook.
• Your bio, age band (for example “40s”) and gender.
• Your E-DNA profile.
• Tags you choose to describe yourself, for example Founder, Investor or Millionaire.

3.5 Stage 1: Your company

• Website, company name and company number.
• Registered address. This is filled in automatically from your company number. [CONFIRM — the source, for example Companies House]
• Company phone, email and social links.
• Turnover band, years trading, team size and your role.
• Anything you write in the free-text boxes.
• Uploads, such as decks, brochures, case studies and price lists.

M reads your uploads to understand your business. They are never shown to other members.

M also reads your website (“Read me”) and writes a summary for you to confirm.

Your turnover band is never shown to anyone.

3.6 Stage 1: Your three wishes

Your three wishes are your goals. Nobody sees them but M. They are never on a published page.

3.7 Stage 2: The Interview

The Interview has nine steps. This is what each part collects.

• Your team. Other people’s names, roles, emails, responsibilities, skills and qualifications, CVs, access level, login invites, and where they are based. This is information about other people. See section 4.
• Connect your tools. This is optional.
  • GoHighLevel: we create a sub-account, and ask for read access to your contacts, pipelines and products.
  • Email: invitations and follow-ups are sent as you, and only after you approve them. Each one goes Draft, then Approved, then Send. [CONFIRM — the “tool would not connect” screen says “We never write to a tool you connect, never send anything from it.” Both can’t be true.]
  • Calendar: free/busy only. “I never read your events.”
  • WhatsApp and LinkedIn: a later phase. They can’t be connected yet.
• Your Asset Map. Your assets, in ten groups, with the files you upload: CSV lists, decks, rate cards and photos. A CSV list may hold personal information about your own customers and contacts. See section 4. [CONFIRM — do we store the raw CSV, or only the counts and segments we read from it?]
• Size permission. Each asset’s number stays hidden unless you say yes. Everything starts at “no”.
• What you sell. Products, prices, delivery cost, sales figures and buyer counts.
• Value to the room. Terms, prices, and which rung of the trust ladder each asset needs.
• Where you start. Your starting rung, and what you would put in first.
• Who you know. Past collaborators by name and company, and how it went. Your side of this is never published.
• Your limits. Capacity, visibility, what didn’t work, and what you won’t do. You can also upload insurance documents (professional indemnity or public liability). These earn a “Verified” badge. They are optional.

3.8 Using the app

• The cards you write (drafts, approved, sent and done), plays, drivers, actions and gates (Proof, Ink and Bell), and what each collaboration produced.
• After a Bell, whether it “grew”, “held” or “cost me”. This answer is private. Only M reads it.
• Your reasons for passing on a match. These are optional, and never shown to anyone.
• Companies you block. This stays private. The blocked company is never told.
• Your searches. Browsing sends no signal. Nobody is told you looked.
• Your settings: theme, language, notification switches and room visibility switches.
• Error and incident references, for example “BAI-7F29-0412, 07:31”. These help us find what happened. [CONFIRM — what technical logs, IP addresses and device data are collected]

Information about other people you give us

Some of what you add is about other people:

• your team members
• your customers and contacts, for example in a CSV list
• past collaborators you name in “Who you know”

You must have the right to share it with us. Only add someone’s details if you are allowed to. [CONFIRM — what members must do before sharing other people’s data, for example telling them. To be set by the adviser.]

How we treat it:

• Team details are used to give each person the access you choose for them, including their login invite.
• Uploads, including customer and contact lists, are never shown to other members. [CONFIRM — whether we keep the raw CSV, or only the counts and segments we read from it]
• Your side of “Who you know” is never published.
• We do not sell it.
• It is deleted with everything else you added if you delete your account. See section 9.

[CONFIRM — how we handle requests from the people themselves, for example a team member asking to see or delete their data]

How we use it

5.1 M, our AI matchmaker

M is an AI assistant. It reads both halves of your Asset Map, the published half and the private half. It also reads your goals and your limits. It uses all of this to propose matches.

When M explains a match, it names only fields you have published. Your goals and your turnover band are weighed, never quoted.

[CONFIRM — which AI provider(s) process this data, and where]

5.2 Matching is automated. Introductions are not.

M proposes matches automatically. It does not introduce anyone on its own. Every introduction needs both people to say yes. Nothing is decided without you acting.

5.3 The switches you control

• “Use my Asset Map to propose matches.” This is the same switch as Matching. You can turn it off.
• “Use my activity to improve matching.” You can turn this off too.

5.4 People at Brandscaling

A person at Brandscaling opens your information only if you ask us to look at something. Every time one does is recorded. [CONFIRM — access logging is actually built]

5.5 What we don’t do

We do not sell your data. Other members see only what you publish (section 6). The companies that help us run the service are listed in section 7.

5.6 What you add is yours

We do not own anything you add. Your company description, assets, files, cards and Asset Map are yours.

5.7 Emails and notifications

We send email and in-app notifications. You control them with switches in Settings. One exception: if a payment fails, we always email you, whatever your settings say.

What other members can and cannot see

The room shows published pages only. Your page goes live only when you press Publish, after you have reviewed “Exactly what the room will see”.

Your profile photo sits at the centre of your own matchmaking room. It is not published on your company page. [CONFIRM — whether other members see the photo anywhere]

When both of you say “Interested”, each of you gets the other’s name, email and phone for the introduction. This is the only point where contact details are shared.

If you own more than one company, each one appears separately. The room is never told they share an owner.

You can hide your page, turn matching off, or unpublish at any time.

Who we share it with

We share your information only with the people below, and only for the reason shown.

International transfers

Brandscaling Ai Ltd is in the DIFC, Dubai. Most members are in the UK. Our service providers may be based elsewhere. So your information may move between the DIFC, the UK, and the countries where those providers are based.

[CONFIRM — where each provider stores data, and the safeguards used for each transfer]

Our legal reasons for using it

The law asks us to have a reason, called a legal basis, for each way we use your information. Our adviser will set these.

[CONFIRM — legal bases, to be set by the adviser]

How long we keep it, and what happens when you leave

9.1 If you cancel

You keep the room until the end of the period you have paid for. Collaborations already in flight are not cut off. Your Asset Map and your invoices stay yours.

9.2 If a payment fails

Your membership goes on hold. You are hidden from the room, and no new matches are proposed. Nothing is deleted, and plays in flight keep running.

9.3 If you delete your account

Your page comes out of the room at once, and your membership ends. Everything is recoverable for 30 days.

After 30 days, everything you added is deleted: what you typed and uploaded, your assets, your Asset Map and your cards.

Backups roll off on their own cycle. [CONFIRM — name the backup window]

Invoices and payment records: [CONFIRM — tax law usually requires these to be kept after an account is deleted. The adviser to state the exception and how long.]

9.4 What we keep

• An anonymised record of what the app worked out: the shape of matches, and which plays went the distance. It holds nothing that names you or your company. It can’t be turned back into your Asset Map. [CONFIRM — the data is anonymised at the 30-day mark, not just moved]
• Collaborations stay in the other company’s history, with your name removed.

9.5 If you remove one company

Its page comes out of the room, and its Asset Map ends. Its finished collaborations stay in the other side’s history.

9.6 Download everything

You can download everything at any time: your profile, companies, goals, full Asset Map (published and private), cards, and every collaboration. We email it to you within minutes. The other side’s notes are not included.

9.7 Enquiries and unfinished checkouts

Elite enquiries that don’t go ahead, and checkouts that aren’t finished: [CONFIRM — how long these are kept]

Your rights

You can ask us to:

• show you what we hold about you (access)
• give you a copy of it (download)
• correct it
• delete it
• stop using it in a particular way (objection)
• stop using it where you gave consent (withdrawing consent)

Some of this you can do yourself in the app: unpublish, turn matching off, download everything, or delete your account. For anything else, email [CONFIRM — privacy email address].

Complaints

You can complain to a data protection regulator:

• the DIFC Commissioner of Data Protection
• the UK Information Commissioner’s Office (ICO)

[CONFIRM — which regulators apply]

Security

• One-use password links. Links to set your password work once, and expire after one hour.
• Passwords of at least 10 characters.
• Private by default. Nothing reaches the room until you press Publish. Every asset size starts hidden.
• Staff access is recorded. A person at Brandscaling opens your information only when you ask, and every time is recorded. [CONFIRM — access logging is actually built]
• Card details stay with Stripe. [CONFIRM — Stripe holds the full card details, not us]

[CONFIRM — any other security measures. Only list what is built.]

Cookies and analytics

[CONFIRM — what cookies and analytics the website and the app use]

Our cookie policy explains what is stored on your device, and why. [CONFIRM — the cookie policy is still a placeholder]

Who the service is for

The Club is for businesses and their founders. It is for adults only. [CONFIRM — minimum age]

Brandscaling mentees

If you are a Brandscaling mentee, the Club is free while you are in the mastermind.

[CONFIRM — whether any data is shared differently for mentees]

Changes to this policy

When we change this policy, we update the version number and the “Last updated” date at the top of this page.

[CONFIRM — how members are told about changes, and when changes take effect]

Contact

Email [CONFIRM — privacy email address].

Write to [CONFIRM — registered address].

Or use our contact page.