Privacy policy

🏢 Who we are

The Leap Code (SMC-Pvt) Ltd, trading as LeapCode, is a private company registered in Pakistan. We are the controller of the personal data described here. Our site is leapcode.consulting.

📥 What we collect

• Free checks. Your answers and your result. Until you unlock your report, these stay in your own browser.
• Your own words. Where a question offers an optional box for your own words, what you type there is stored with your answers once you unlock your report, and is kept or deleted on the same terms as them. It never changes your score. Please leave out anything you would not want us to hold, such as other people's personal details.
• When you unlock your report. Your name, email, company, team size and, if you give it, your WhatsApp number. We also keep the boxes you ticked, the wording you agreed to, and the steps you took in the check (for example, which unit you opened and when you finished).
• When you write to us or use the contact form. Your name, email and message.
• When you book a call. Booking runs on Reclaim scheduling. It takes your name, email and the time you pick, and the details you add to the booking.
• Questions you ask in our chat. When you pick or type a question in the FAQ chat, we store the question text (with any email address or long number blanked out), whether we had an answer, which answer we showed, the time, and a random session number that exists only while the page is open. We set no cookies and store nothing in your browser. To limit abuse, a scrambled form of your network address is used for a short time to count questions; it is not stored with your question. We also count how often each question is picked, as a plain total per question that holds nothing about you. If you choose to give your name or email in the chat, we store them with the questions from that visit, in a separate store, only so we can reply to you, and we delete them after 12 months. If you give a WhatsApp number, we store it only if you tick the box that says we may contact you on WhatsApp about this inquiry. Reply STOP at any time and a person removes your number. To have these details deleted sooner, email scale@leapcode.consulting.
• When you become a client. Business and contact details for your agreement and invoices, and the information you share so we can do the work.
• Your portal. Your sign-in records and anything you add to your profile.
• Abuse protection. Cloudflare Turnstile checks each form for bots. We count saves from your connection using a scrambled (hashed) form of your IP address. We do not store your IP address itself.
• Newsletter. If you subscribe to Scaling Secrets, Substack (USA) collects your email address and sends the newsletter. We can see your email in our Substack subscriber list. Subscribing is optional and you can unsubscribe in any email.
• Marketing source. If you arrive from a link with tracking tags (for example utm_source), we keep those tags for the visit so we know which link helped you find us.

We do not run analytics or advertising trackers on this site. We do not ask for your religion, national ID or salaries. Payments: if you pay by card through a payment gateway, the gateway collects your card details. We never see or store your full card number. We receive only a confirmation, the amount and the last 4 digits.

⚖️ Why we use it, and our basis

• To send your result and reply to you. Basis: you asked for it.
• To run your portal and deliver services under an agreement. Basis: contract.
• To prepare for a call you book with us. Basis: you asked for it.
• To send up to 5 short emails, only if you ticked the optional box. Basis: your consent.
• To count, in total, how many people start and finish each check, so we can improve it. These counts are for our team only. Basis: our legitimate interest.
• To keep accounts, pay tax and meet the law. Basis: legal duty.

✅ Consent

The Scaling Secrets sign-up form on the Scaling Secrets page is Substack's and loads with that page. The small sign-up box in the footer of every page is our own: it sends nothing until you press Subscribe, and then your email address goes to Substack to confirm your subscription. We use your email only to send the newsletter. We do not add you to other lists, sell your email or share it for advertising.

The optional emails have their own separate tick box, which is never ticked for you. We store the wording you agreed to and when you agreed. You can withdraw consent at any time with the unsubscribe link in any email, or by telling us. Withdrawing does not affect anything we did before you withdrew.

🚫 What we do not do

• We do not sell your data.
• We do not use it for advertising or share it with advertisers.
• We do not show you scores as numbers, and we never rank people.

🗄️ Where it is kept, and who helps us

Your result emails come from reports@leapcode.consulting. Fonts are served from our own site. Because these providers run outside Pakistan, your data may be processed in other countries. We choose providers with published security practices and give them only what the job needs.

⏳ How long we keep it

• Unclaimed Quick Momentum Check runs. If you start a Quick Momentum Check but never unlock your report, we delete the run after 90 days.
• Enquiries and booking records. Until you ask us to delete them, or 24 months after our last contact, whichever comes first.
• Optional emails. Until you unsubscribe.
• Client agreements, invoices and accounts. For as long as tax and company law require us to keep them.
• Portal data. While your account is open, then deleted within 90 days of closing unless the law says we must keep it.

🗝️ Your choices and rights

• See, correct or delete your data, or ask for a copy: email scale@leapcode.consulting. We reply within 30 days.
• Withdraw consent or stop optional emails: use the unsubscribe link, or tell us.
• Object to how we use your data, or ask us to limit it: tell us and we will explain what we can and cannot do.
• Complain: write to us first so we can fix it. You may also complain to a data regulator where you live.

🔒 Security

Data moves over encrypted connections (HTTPS). Access is limited to people who need it, and sign-in is required for client data. No system is perfectly safe. If a breach puts your rights at risk, we will tell you and the right authority without undue delay.

🧒 Children

Our services are for business owners and their teams. They are not for anyone under 18, and we do not knowingly collect data from children.

🍪 Cookies and browser storage

See our Cookies page for the full list.

Saved answers in your browser. On the Quick Momentum Check, the Root-Cause Check™, the contact form and the call-booking questions, we keep what you pick and type in your own browser, so a refresh or a visit to another page does not lose it. This stays on your device: it is not sent to us. Picked answers are kept 14 days and typed words 3 days, then deleted. We never save your name, email address or phone number this way, and it is deleted when you finish a check or send a form. Each page has a Clear My Saved Answers button. Please do not use this on a shared computer, or clear it before you leave.

Voice typing. Some pages suggest speaking instead of typing, using your phone keyboard's microphone or a tool such as Wispr Flow. Those are separate services with their own privacy terms; we do not receive what you say, only the words that end up in the box. The Wispr Flow link is a referral link: LeapCode™ may receive a benefit if you sign up. Please do not speak client names, bank details or health details into any tool.

🔄 Changes to this policy

When we change this policy, we change the date at the top. If a change matters to you, such as a new use of your data, we will tell you by email before it starts, where we have your email.