Legal

Global Legal
& Compliance.

Scaled Holdings maintains active compliance programmes for the data-protection and IT laws applicable to every region in which we operate.

Last reviewed: 10 May 2026

India

IT Act 2000

Information Technology Act, 2000

Adherence to Section 43A on the protection of sensitive personal data and information.
Strict prohibition on cyber offences including unauthorised access, hacking, and phishing.
A designated Grievance Officer handles complaints and statutory notices.
Disputes fall under the jurisdiction of Srinagar, Jammu & Kashmir.

grievance@scaled.co.in

European Union

GDPR

General Data Protection Regulation (GDPR)

Transparent disclosure of data collection and processing activities.
Subject rights of access, rectification, erasure, and portability.
Lawful processing on the basis of consent, contract, or legitimate interest.
Cross-border transfers protected by standard contractual clauses where required.

gdpr@scaled.co.in

United Kingdom

UK-GDPR · DPA 2018

UK-GDPR & Data Protection Act 2018

Lawful, fair, and transparent processing of personal data.
Subject rights aligned with UK-GDPR standards.
Notification of qualifying data breaches within 72 hours.
International transfer safeguards in line with ICO guidance.

privacy@scaled.co.in

Australia

Privacy Act 1988

Privacy Act 1988 (Cth)

Collection of personal information only when reasonably necessary, with clear consent.
Use of data strictly limited to the purpose for which it was collected.
Subject access and correction rights administered through our privacy office.
Technical and organisational security measures consistent with the APPs.

privacy@scaled.co.in

Canada

PIPEDA

Personal Information Protection and Electronic Documents Act (PIPEDA)

A designated Privacy Officer with oversight of compliance.
Explicit consent required before collection of personal information.
Maintenance of accurate, complete, and current records.
Defined process for subject access and complaint handling.

privacy@scaled.co.in

United States

CCPA · CPRA · FTC Act

CCPA / CPRA · FTC Act · COPPA

California residents retain rights to know, delete, and opt out of data sharing without discrimination.
Fair and transparent data handling under the FTC Act, with appropriate security safeguards.
No knowing collection of personal data from children under 13 without verifiable parental consent.

privacy@scaled.co.in

United Arab Emirates

Decree-Law No. 45 of 2021

Federal Decree-Law No. 45 of 2021

Lawful processing of personal data for clearly specified purposes.
Subject rights including access, correction, and deletion.
Secure cross-border transfers with documented safeguards.

privacy@scaled.co.in

European Economic Area (Non-EU)

EEA Frameworks

EEA Frameworks

Data minimisation and purpose limitation across all processing.
Encryption in transit and at rest, with role-based access controls.
Standard contractual clauses governing onward transfers.
Internal governance policies reviewed annually.

privacy@scaled.co.in