Privacy Policy

1. Who we are

Carlton Scott Business Lounge Ltd (company number SC895141, registered in Scotland) is the data controller for personal information collected through carltonscott.com and our services, trading as Carlton Scott and TradeCS. Registered office: Unit 9 Tweed Horizons, Newtown St Boswells, Melrose, TD6 0SG. Questions about this policy or your data: [email protected].

2. What we collect

Contact details you give us (name, email, phone, business name) when you enquire, book a call, join a membership, apply for accreditation or post a listing. Content you post to the directory, job board or business-for-sale listings. If you take the Profit Clarity Framework™, the business and financial information you share for the analysis, including business bank statements: we treat this as confidential and use it only for your engagement. Payment information is handled by our payment provider; we do not see or store card numbers. We also collect standard website usage information through cookies and analytics (see section 8).

3. How we use your information

To provide the services you ask for, including running the framework analysis on your business; to respond to enquiries; to run memberships, the directory and listings; to take payment; to send you relevant updates about our services where you have agreed to hear from us or are an existing customer (you can opt out at any time); to keep proper business and accounting records; and to run and improve this website.

4. Our legal grounds

We rely on: performing our contract with you (delivering services you have bought); our legitimate interests (running and promoting our business, keeping the directory trustworthy, improving the site); your consent (where you opt in to marketing or non-essential cookies); and legal obligation (accounting and tax records).

5. Who we share it with

We do not sell your information. We share it only with: our payment provider (Stripe) to process payments; the accredited consultant working with you, where your engagement is introduced or delivered through one; the providers who host and protect this site and our systems (currently DigitalOcean for hosting and file storage, and Cloudflare for security and performance); Google Analytics for website statistics; and our professional advisers where necessary. Anyone processing data for us does so under contract and on our instructions.

6. Where it is kept and for how long

Your information is stored in the UK or in countries with appropriate safeguards under UK data protection law. We keep it only as long as needed: financial and contractual records for six years after the engagement ends (a legal requirement); enquiry records for 12 months where no engagement follows; directory and listing content for as long as the listing is live. Financial documents shared for a framework analysis are deleted 12 months after the engagement ends.

7. How we protect it

Access to your information is limited to the people who need it to deliver your service. The site uses encrypted connections, and financial documents are shared through a secure upload rather than email. No system is perfectly secure, but we take the protection of your business information seriously: it is the core of what you trust us with.

8. Cookies and analytics

The site uses essential cookies needed for it to function (such as session security) and Google Analytics, which sets cookies to help us understand how the site is used (pages visited, how visitors arrive). Analytics information is aggregated and does not identify you personally to us. You can block or delete cookies in your browser settings at any time; essential cookies may be needed for parts of the site to work.

9. Your rights

Under UK data protection law you can ask us for a copy of your information, ask us to correct it, delete it, restrict how we use it, object to our use of it, or provide it to you in a portable format. Where we rely on consent you can withdraw it at any time. To use any of these rights, email [email protected]; we will respond within one month. If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk.

10. Changes to this policy

If we change this policy we will publish the new version on this page. Last updated: 19 August 2026.