Privacy policy

Who we are

Scalara Platform is operated by Quantum Digital Solutions, a company registered in Saint Lucia under company number 2026-00555. In this policy, "we" and "us" mean Quantum Digital Solutions.

For everything you do on this website, Quantum Digital Solutions is the controller. That means we decide why your personal data is held and what happens to it.

For personal data belonging to players on a casino brand running on our platform, the answer depends on the commercial route the operator has taken, and it is set out on our data protection page and in the data processing addendum. This policy is about the website, not about that.

Write to us at contact@scalaralabs.com, marking the subject line "Data protection", and the message reaches the people who can answer it.

What this policy covers

This policy covers the pages on this website, the forms on it, the newsletter sign up in the footer, and the email we send in reply to an enquiry.

It does not cover the operator back office, a player facing casino brand, or any website we link out to. A link to a partner, a public register or a support organisation is a link to somebody else's site, running under somebody else's policy.

What we collect

When you send an enquiry. Our demo and contact forms ask, in this order: which commercial route you want to talk about, where you are today, your licence status, your region, your monthly gross gaming revenue as a band rather than a figure, your target markets, your timeline, and only then your name, work email address, company, optional phone number and optional message. Region, revenue band, markets, timeline and phone number are all optional, and an enquiry without them reaches us exactly the same way. The form also records which page you sent it from, and the fact that you confirmed we may reply to you.

When you subscribe to the newsletter. Your email address and the fact that you asked for it.

Technical data, on any visit. Your network address, the browser and device you are using, the page you asked for and the time you asked for it. Every web server receives this. We do not combine it with your enquiry to build a profile of you.

Two anti-abuse fields. Every form carries a hidden field that a person never sees, and it records how long the form was open before it was sent. Both exist to tell an automated submission apart from a real one, and neither describes you.

We do not run analytics or advertising technology on this site today. If we ever do, it will load only after you have allowed it, and this policy and the cookie policy will be updated before it does.

Why we use it, and the lawful basis for each purpose

Replying to your enquiry, and the conversation that follows. Article 6(1)(b) of the UK and EU General Data Protection Regulation, because the exchange is a step taken at your request before any contract, and Article 6(1)(f) legitimate interests where you write to us on behalf of a company rather than as an individual.

Sending you the newsletter or other marketing. Article 6(1)(a) consent. You give it by asking for it, and you withdraw it from any email we send or by writing to the address above.

Keeping the site available and stopping abuse of the forms. Article 6(1)(f) legitimate interests, in running a service that works and is not flooded by automated submissions.

Measuring how the site is used. Article 6(1)(a) consent. Nothing of this kind runs until you have allowed it, and today nothing of this kind exists.

Meeting a legal or regulatory obligation. Article 6(1)(c), where a law that applies to us requires us to keep or produce a record.

We do not process special category data through this website, and we ask you not to send any in a free text field.

Our legitimate interests, stated in full

Where we rely on legitimate interests we have weighed our interest against yours, and this is that assessment in short.

Business to business enquiry handling. Our interest is in answering somebody who has asked us a commercial question. The data is work contact data, given deliberately, for a purpose you chose. The impact on you is low, you can object at any time, and if you object we stop.

Security and abuse prevention. Our interest is in keeping the lead endpoint usable. The data is technical, held briefly, and never used to make a decision about you as a person.

If you would like the longer written assessment, ask for it and we will send it.

How an enquiry is prioritised

Every enquiry receives a priority score between zero and one hundred, and is routed to a named owner. We tell you this here because you should not have to discover it.

The score is built from the answers you gave us: your licence status, your operating stage, which commercial route you asked about, your timeline, whether your email address belongs to a business domain, and whether you supplied a phone number, target markets or a written message. Your region and your revenue band are recorded so we can prepare the call, and neither is used in the score. The routing rule sends licensed or already trading operators to account management, new operators without a licence to sales, and anything about integration work to the technical team.

The score decides who reads your enquiry first and how quickly. It does not decide whether we reply, what we quote you, or whether you can become a customer. A person reads every enquiry, and no decision with a legal or similarly significant effect is made about you by automated means. You can ask us what score an enquiry received, and you can ask a person to look again.

Who we share it with

We do not sell personal data, and we do not share it for anybody else's marketing.

We share it with the service providers we use to run the site, each of which acts on our instructions under a written contract. The current list, what each one does and where it processes are published in the sub-processor register on our data protection page.

Today the providers touching website data are our hosting provider, our email delivery provider, and the service that stores this site's content. Where a lead is forwarded to an internal system, that system appears on the register before it receives anything.

We would also disclose personal data where a law, a regulator or a court requires it, or where we need to establish or defend a legal claim. If that happens and we are permitted to tell you, we will.

International transfers

Quantum Digital Solutions is registered in Saint Lucia. Saint Lucia is not the subject of a European Commission adequacy decision, and it is not covered by United Kingdom adequacy regulations. We say that plainly rather than leaving it to be found.

Where personal data originating in the European Economic Area or the United Kingdom reaches us, or reaches a provider outside those areas, the transfer relies on the European Commission's Standard Contractual Clauses, with the United Kingdom International Data Transfer Addendum applied where the data originates in the United Kingdom. We carry out a transfer risk assessment for each recipient and apply supplementary measures where that assessment calls for them.

If you want the transfer position for one specific provider before you send us anything, ask for it first. We would rather answer that early.

How long we keep it

Enquiry records. Twenty four months from our last contact with you, then deleted. If the enquiry becomes a customer relationship, the retention set out in the contract applies instead.

Newsletter and marketing consent. For as long as you are subscribed, and then for twenty four months as the record that you consented and when you withdrew it.

Server and delivery logs. For the short fixed window our hosting and email providers retain them under our plan. We do not copy them into any other system, and we do not keep our own duplicate.

Records we are legally required to keep. For the period the relevant law sets, and no longer.

Your rights

Under the UK and EU General Data Protection Regulation you have the right to ask for access to your personal data, to have it corrected, to have it erased, to have processing restricted, to receive it in a portable form, to object to processing carried out on the basis of legitimate interests, and to withdraw consent at any time where consent is the basis.

To exercise any of them, write to contact@scalaralabs.com with "Data protection" in the subject line. We reply within one month. For a genuinely complex request we may extend that by up to two further months, and we will tell you inside the first month if we do. There is no charge unless a request is manifestly unfounded or excessive, in which case we will say so and explain why. We may ask you to confirm who you are, but only where we genuinely cannot tell, and only for as much as the check needs.

You can also complain to a supervisory authority. In the United Kingdom that is the Information Commissioner's Office. In the European Economic Area it is the authority in the country where you live, where you work, or where the issue arose. You do not have to raise it with us first, although we would like the chance to fix it.

Data protection officer and representatives

Whether we are required to appoint a data protection officer, a representative in the European Union under Article 27 and a representative in the United Kingdom is under review with our advisers. If any are appointed, this policy will name them and publish their contact details, and the last updated date at the top of this document will change.

We will not name a person or a firm here before that is settled. Until it is, every data protection question goes to the address above and reaches the people responsible.

Cookies and similar technologies

This site sets no analytics or marketing cookies today. The full list of what is stored, why, and for how long is in the cookie policy, together with the control that reopens your cookie choices.

Children

This is a business to business website. It is intended for gaming businesses and industry professionals, it offers no play, and it is not directed at anybody under eighteen. We do not knowingly collect personal data from children.

Changes to this policy

When this policy changes we update the last updated date shown with this document. Where a change materially affects how we use your personal data, we will tell you directly rather than rely on you noticing.

How to contact us

Quantum Digital Solutions, trading as Scalara Platform. Registered in Saint Lucia, company number 2026-00555.

Email contact@scalaralabs.com with "Data protection" in the subject line. If you would prefer a postal address for a formal request, ask and we will give you the current one for the registered office.