Privacy Policy

1. Overview

This Privacy Policy explains how DryScale (“DryScale,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you visit dryscale.com (the “Site”), submit a form, or engage us as a client.

DryScale is a B2B growth firm. We work exclusively with basement waterproofing, crawl space encapsulation, and foundation repair contractor businesses in the United States and Canada. We do not provide services to homeowners and we do not sell personal information.

2. Who we are

DryScale is the data controller for information collected through this Site. For privacy questions, requests, or complaints, contact us at legal@dryscale.com.

3. Information we collect

Information you provide. When you submit a form on the Site (Apply, Contact, Book, or similar), we collect the information you enter, which may include: your name, business name, website URL, email address, phone number, annual revenue range, monthly ad spend range, primary service line, referral source, and any free-text comments you choose to share.

Information collected automatically. When you visit the Site, we and our service providers may collect limited technical information such as your IP address (typically truncated for analytics purposes), device and browser type, referring URL, pages viewed, and approximate location derived from your IP. We use a privacy-focused analytics provider that does not set tracking cookies or build cross-site profiles.

Engagement data. If you become a DryScale client, we collect and process operational data required to deliver the engagement, including ad-account performance, CRM and lead-pipeline data, call metadata, and revenue figures you provide. This information is governed by your engagement agreement in addition to this Policy.

Cookies and similar technologies. The Site uses a small number of strictly necessary cookies to operate. We do not currently use advertising cookies on the Site. If that changes, this Policy will be updated and, where required by law, consent will be requested.

4. How we use information

We use the information we collect to:

• Respond to inquiries, schedule strategy calls, and qualify prospective clients;
• Deliver and operate services for active clients, including ad management, CRM operations, and reporting;
• Send transactional emails (confirmations, scheduling, account communications);
• Improve the Site, our services, and the content we publish;
• Detect and prevent fraud, spam, and abuse (including via honeypot fields and rate-limiting); and
• Comply with legal obligations and enforce our agreements.

For visitors located in the EEA or UK, our legal bases for processing are: (a) your consent, (b) the performance of a contract with you or steps taken at your request prior to entering a contract, (c) our legitimate interests in operating and improving our business, and (d) compliance with legal obligations.

5. How we share information

We do not sell your personal information. We share information only with the categories of recipients listed below, and only as needed to operate our Site and services.

• Service providers (sub-processors) who process data on our behalf under written agreements. The principal providers we currently use include:
  • Vercel — Site hosting and content delivery;
  • Supabase — secure storage of form submissions and operational records;
  • Resend — transactional email delivery;
  • GoHighLevel (HighLevel) — CRM, scheduling, and marketing automation;
  • Fathom Analytics — privacy-focused, cookieless site analytics;
  • Meta Platforms — server-side conversion reporting (Conversions API) for ads we run on behalf of our clients, and only where applicable;
  • Google — for Workspace email, calendaring, and (where applicable) advertising attribution.
• Professional advisors (lawyers, accountants, auditors) bound by confidentiality obligations.
• Authorities and others when we believe in good faith that disclosure is required by law, necessary to protect rights or safety, or required in connection with an investigation of fraud or misuse.
• Successors in interest in the event of a merger, acquisition, financing, or sale of assets, subject to standard confidentiality and continuity protections.

Our service providers are located in the United States and may process information outside your country of residence. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for cross-border transfers.

6. Data retention

We retain personal information for as long as needed to fulfill the purposes described in this Policy, including responding to inquiries, operating client engagements, and meeting legal, accounting, or reporting obligations. When information is no longer needed, we delete or de-identify it. You can request deletion at any time using the contact details below; some records may be retained where required by law or for legitimate business purposes such as fraud prevention.

7. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), restricted access to production systems, and contractual protections with our service providers. No system is perfectly secure; we cannot guarantee the absolute security of any information transmitted to or from the Site.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing. You may also withdraw consent where processing is based on consent.

California (CCPA/CPRA). California residents may request access to, deletion of, or correction of their personal information, and may opt out of any sale or sharing of personal information. DryScale does not sell or share personal information for cross-context behavioral advertising.

Canada (PIPEDA). Canadian residents may request access to and correction of their personal information held by DryScale and may withdraw consent subject to legal or contractual restrictions.

EEA / UK (GDPR). Visitors in the EEA or UK may exercise the rights described above and have the right to lodge a complaint with their local data protection authority.

To exercise any of these rights, email legal@dryscale.com. We will respond within the time required by applicable law and may need to verify your identity before fulfilling certain requests. We will not discriminate against you for exercising your rights.

9. Third-party links and services

The Site may link to third-party tools and services that we operate on subdomains (for example, our SEO audit tool) or to third-party sites we do not control. Those services are governed by their own privacy policies. We are not responsible for the privacy practices of third parties.

10. Children

The Site and our services are intended for business users aged 18 and older. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

11. Do Not Track

Our Site does not respond differently to Do Not Track signals because there is no industry consensus on how to interpret them. We use a privacy-focused analytics provider that does not track users across sites.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of the page reflects the most recent revision. Material changes will be communicated by reasonable means, such as a notice on the Site or by email where appropriate.

13. Contact

For privacy questions or to exercise your rights, contact us at legal@dryscale.com. For general inquiries, see our Contact page.