Pivotential ("we", "us", or "our") is committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal data. This Privacy Policy explains our practices in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.
1. Data Controller
The service providers of Pivotential act as the data controllers responsible for your personal data. If you have questions about this policy or wish to exercise your rights, please contact us at info@pivotential.com.
2. What Data We Collect
We collect personal data only when you voluntarily provide it to us. This includes:
Contact Form Submissions: When you submit an enquiry through our contact form, we collect your first name, last name, email address, company name, area of interest, and the content of your message.
Technical Data: Our website may automatically collect limited technical data such as IP address, browser type, and pages visited through standard server logs. We do not use tracking cookies or third-party analytics tools that profile individual users.
Third-Party Form Processing: Contact form submissions are processed through Formspree, a third-party form handling service. Formspree processes your data on our behalf as a data processor. You can review their privacy practices at formspree.io/legal/privacy-policy.
3. Legal Basis for Processing
Under GDPR Article 6, we process your personal data on the following lawful bases:
Consent (Art. 6(1)(a)): When you voluntarily submit your details through our contact form, you consent to our processing that data for the purpose of responding to your enquiry.
Legitimate Interest (Art. 6(1)(f)): We may process limited technical data to maintain the security and functionality of our website.
Pre-contractual Measures (Art. 6(1)(b)): Where your enquiry relates to our advisory services, processing may be necessary to take steps at your request prior to entering into a contract.
4. How We Use Your Data
We use the personal data you provide solely to respond to your enquiry, to communicate with you about our services if requested, and to maintain and improve the functionality of our website. We do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Data Retention
We retain your contact form data only for as long as necessary to respond to your enquiry and for any subsequent business discussions. If no engagement follows, we delete your personal data within 12 months of your original enquiry. You may request earlier deletion at any time.
6. Your Rights Under GDPR
As a data subject under GDPR, you have the following rights:
Right of Access — You may request a copy of the personal data we hold about you.
Right to Rectification — You may request correction of inaccurate or incomplete data.
Right to Erasure — You may request deletion of your personal data where there is no compelling reason for its continued processing.
Right to Restrict Processing — You may request that we limit how we use your data.
Right to Data Portability — You may request your data in a structured, machine-readable format.
Right to Withdraw Consent — Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at info@pivotential.com. We will respond within 30 days.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website is served over HTTPS, and form submissions are transmitted via encrypted connections.
8. International Transfers
Form data processed through Formspree may be transferred to and stored on servers located outside the European Economic Area (EEA). Where such transfers occur, they are subject to appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure your data receives an adequate level of protection.
9. Cookies
Our website does not use cookies for tracking, advertising, or analytics purposes. We may use essential cookies strictly necessary for the technical operation of the website. No consent banner is required for essential-only cookies under GDPR.
10. Supervisory Authority
If you believe that our processing of your personal data infringes GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement..
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically.