LEGAL

Privacy Policy

Last updated: 1 July 2026

This Privacy Policy explains how Scalax Group Ltd, trading as ScalaxIP (‘ScalaxIP’, ‘we’, ‘us’ or ‘our’), collects, uses, discloses and protects Personal Information. ScalaxIP is a private limited company registered in England and Wales (Company No. 15256365) with its registered office at 7 Bell Yard, London, WC2A 2JR, United Kingdom.

ScalaxIP is a controller of Personal Information for the purposes of the UK General Data Protection Regulation (‘UK GDPR’) and the Data Protection Act 2018, each as amended by the Data (Use and Access) Act 2025 (together, the ‘Data Protection Legislation’). ScalaxIP is registered with the Information Commissioner’s Office (‘ICO’) under registration number ZB791568.

Personal Information

‘Personal Information’ means any information relating to an identified or identifiable natural person. This may include, without limitation, name, postal address, telephone number, email address, online identifiers, identification or passport details, billing and payment information, and location data. An identifiable natural person is one who can be identified, directly or indirectly, by reference to such information.

Information We Collect

We collect Personal Information that you provide to us when you engage us, correspond with us, or use our website, together with information generated in the course of acting on your instructions. This typically includes identity and contact details, details of the intellectual property matters on which you instruct us, billing and payment details, and technical information about your use of our website (see our Cookies Policy).

How and Why We Use Personal Information

We use Personal Information to: establish and verify your identity; communicate with you; manage our relationship with you; provide our services, including instructing foreign associates, agents and attorneys on your behalf and making filings with intellectual property offices and registries worldwide; administer billing and collect payment; comply with our legal and regulatory obligations; and send you communications that we believe may interest you.

Lawful Bases for Processing

We process Personal Information only where a lawful basis applies under the Data Protection Legislation, namely:

  • Performance of a contract: where processing is necessary to provide our services to you or to take steps at your request before entering into an engagement;

  • Legal obligation: where processing is necessary to comply with our legal obligations, including accounting, tax and record-keeping requirements;

  • Legitimate interests: where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. This includes direct marketing to existing and former clients, which is a recognised legitimate interest under the Data Protection Legislation. You may object to such processing at any time;

  • Consent: where you have given consent for a specific purpose. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Marketing Communications

We may send you information about services, events and resources that we consider may be of interest to you. You may opt out of marketing communications at any time by contacting us using the details below or by using the unsubscribe mechanism in any such communication. It is not possible to opt out of business communications that are necessary for the conduct of a matter on which we act, for example where you are an existing or former client or a third party with whom we must correspond on a client matter.

Disclosure of Personal Information to Third Parties

We may disclose Personal Information to third parties who carry out functions on our behalf or whom we instruct on your behalf, including: foreign associates, agents and attorneys engaged to protect your intellectual property in other jurisdictions; intellectual property offices, registries, government bodies and courts; and service providers such as technology, data storage, payment and professional service providers. Where we engage a third party to process Personal Information on our behalf, we take steps to ensure appropriate contractual and security safeguards are in place.

Note: We do not sell Personal Information and we do not disclose Personal Information to third parties for the purposes of third-party direct marketing.

International Transfers

The nature of our services means that Personal Information will often be transferred outside the United Kingdom, for example when we instruct foreign associates or make filings with overseas intellectual property offices. Where we transfer Personal Information outside the UK, we do so: to countries covered by UK adequacy regulations; under appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses; or where a derogation applies, including where the transfer is necessary for the performance of your contract with us or for the conclusion or performance of a contract concluded in your interest, such as our engagement of a local agent in the relevant jurisdiction.

Security of Personal Information

We take reasonable technical and organisational measures to protect Personal Information from misuse, loss, interference, unauthorised access, modification or disclosure, and we review these measures regularly. However, no transmission of information over the internet or by post can be guaranteed to be fully secure. If you suspect any misuse or loss of, or unauthorised access to, your Personal Information, please contact us immediately.

Retention of Personal Information

We retain Personal Information for no longer than is necessary for the purposes for which it was collected. As a general rule, we retain client and matter records for six years from the conclusion of the relevant matter or the date of last use, after which they are securely destroyed. We may retain Personal Information for longer where required by law or where it remains necessary for legitimate business purposes, for example records relating to intellectual property rights that remain in force and subject to renewal.

Your Rights

Subject to the conditions and exemptions in the Data Protection Legislation, you have the right to:

  • Access your Personal Information (a ‘subject access request’). We are required to carry out searches that are reasonable and proportionate, and we may pause the statutory response period where we reasonably require clarification of your request;

  • Rectification of inaccurate or incomplete Personal Information;

  • Erasure of your Personal Information in certain circumstances;

  • Restriction of processing in certain circumstances;

  • Data portability in respect of information you have provided to us that we process by automated means on the basis of consent or contract;

  • Object to processing based on legitimate interests, and to direct marketing at any time;

  • Withdraw consent at any time where processing is based on consent.

We do not make decisions producing legal or similarly significant effects concerning you based solely on automated processing.

Complaints

If you have any concern about how we collect, use, disclose, store or process your Personal Information, you have the right to complain to us. Please submit your complaint to datacompliance@scalaxip.com. In accordance with the Data Protection Legislation, we will acknowledge your complaint within 30 days of receipt, investigate it, and inform you of the outcome without undue delay. You also have the right to lodge a complaint with the Information Commissioner’s Office at any time (www.ico.org.uk; helpline 0303 123 1113), although we would appreciate the opportunity to address your concerns first.

Contact Details

If you would like to access, update, correct or delete Personal Information we hold about you, exercise any of your other rights, or ask any question about this Policy, please contact us at datacompliance@scalaxip.com or by post at Scalax Group Ltd, 7 Bell Yard, London, WC2A 2JR, United Kingdom.

Changes to this Policy

We may update this Policy from time to time. The current version will always be available on our website, and the ‘Last updated’ date above indicates when it was most recently revised. Where changes are material, we will take reasonable steps to bring them to your attention.