Privacy Policy

Last Updated

Mar 24, 2026

Privacy Policy

Pivot Technologies Ltd ("Pivot", "we", "us", "our") respects your right to privacy. This Privacy Policy describes how we collect, use, and share information that relates to an identifiable individual ("Personal Data") and how you can exercise your rights under applicable privacy and data protection laws.

If you have any questions about our use of your Personal Data, or if you wish to exercise any of your privacy rights, please contact us at privacy@yourpivot.co.

Pivot provides a secure AI-powered evidence intelligence platform (the "Platform") purpose-built for UK family law. Pivot is headquartered in the United Kingdom.

We recommend that you read this Privacy Policy in full to ensure you are completely informed about our collection and use of your Personal Data.

1. Applicability

This Privacy Policy describes how Pivot processes Personal Data collected from you or about you through our website at yourpivot.co (our "Website"), the Platform, and other interactions you have with Pivot.

The Platform is offered to businesses, law firms, and other entities (our "Customers") for professional use. We enter into customer agreements with our Customers (for example, our Terms of Use, Trial Agreements, Commercial Schedules, and Data Processing Agreements). These agreements govern the delivery and use of the Platform (the "Customer Agreement").

Important: This Privacy Policy does not apply to any input, output, or documents uploaded to our Platform by Customers ("Customer Data"). We process Customer Data on behalf of Customers as a data processor. Pivot's use of Customer Data is governed by the relevant Customer Agreement. Any queries related to Customer Data should be directed to our Customers, who are the data controllers.

This Privacy Policy governs where Pivot is the data controller responsible for the processing of Personal Data.

2. Personal Data We Collect and Process

Information You Provide Directly

We collect Personal Data directly from you when you create an account, use the Platform, request a demo, or otherwise interact with us. This includes:

Account Information: Your name, email address, job title, employer name, professional experience, language preferences, account credentials, and transaction history with us.

Communication Information: If you communicate with us (for example, when you contact us about the Platform, request support, complete a survey, or respond to marketing), we collect your name, email address, the contents of your messages, and information about your profession.

Social Media Information: When you interact with our pages on services like LinkedIn, we collect Personal Data that you choose to provide to us, such as your contact details and the contents of your messages or posts.

Information We Collect Automatically

We collect Personal Data indirectly through automated means when you use the Platform or visit our Website. This includes:

Log Data: Your IP address, browser type and version, the date and time of your request, and how you interact with our Website and Platform.

Usage Data: Information about how often you visit the Website, how you interact with the Platform, the volume of queries you submit, the features you use, and how those features performed during your interactions.

Cookies and Similar Technologies: We use cookies and similar technologies to manage the Platform and to collect information about you and your use of our Website. For more details, please see our Cookie Policy.

Device Information: The name of your device, operating system, device identifiers, and browser you are using.

Information We Collect from Third Parties

We may also receive information about you from trusted partners, including: security partners who provide information to protect against fraud and security threats; marketing partners who provide information about potential customers; and event organisers who provide contact information from events we attend.

3. How We Use Personal Data

We use Personal Data for the following purposes:

To provide, maintain, and improve the Platform and our services.
To create and manage your account and provide customer support.
To communicate with you, including to send you information about our services, updates, and marketing (where permitted by law).
To develop, improve, and update the Platform and our business practices.
To conduct research and analytics to understand how the Platform is used.
To personalise your experience with the Platform.
To prevent fraud, criminal activity, or misuse of our services, and to protect the security of our systems.
To comply with legal obligations and protect the rights, privacy, safety, or property of our users, ourselves, or third parties.

We may aggregate or de-identify Personal Data so that you can no longer be identified. We use aggregated or de-identified data for research, analytics, and to improve our services.

We do not use Personal Data to train AI models. We do not use Customer Data to train, fine-tune, or improve AI models.

4. Legal Basis for Processing (UK and EEA)

We rely on the following legal bases under the UK GDPR and GDPR to process Personal Data:

Contractual Necessity: Where processing is necessary to perform a contract with you or your employer. For example, to provide and support the Platform, create and maintain your account, process payments, and provide customer support.

Legal Obligation: Where we must process Personal Data to comply with the law. For example, to retain and disclose information in response to a valid legal request from regulators or law enforcement.

Consent: Where we ask for your consent before collecting, using, or disclosing your Personal Data. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your privacy rights. Our legitimate interests include: operating, improving, and securing the Platform; developing marketing activities; detecting and preventing illegal activity; and managing the security of our IT infrastructure.

5. Who We Share Your Personal Data With

We share Personal Data with the following categories of recipients:

Service Providers: Third-party companies that help us operate and support our business, including hosting providers, email providers, customer support tools, analytics providers, and payment processors. These providers have limited access to your information, may use it only to perform agreed tasks, and are prohibited from using it for other purposes.

Professional Advisors: Our accountants, lawyers, consultants, and other professional advisors as necessary for the operation of our business.

Legal Authorities: Law enforcement, government agencies, or regulators where required by law, to comply with legal process, or to protect rights, property, and safety.

Business Reorganisation: In the event of a merger, acquisition, reorganisation, or sale of assets, your Personal Data may be disclosed during the diligence process and transferred as part of such transaction. We will notify you if this occurs.

We do not sell your Personal Data.

6. International Data Transfers

Your Personal Data is primarily stored and processed in the United Kingdom and the European Economic Area.

Where Personal Data is transferred outside of the UK or EEA, we ensure it benefits from an adequate level of data protection by relying on: adequacy decisions by the UK Secretary of State or European Commission; Standard Contractual Clauses (as approved under UK or EU law); or, where applicable, the EU-US Data Privacy Framework.

We ensure appropriate transfer mechanisms are in place with our service providers. For more information, contact privacy@yourpivot.co.

7. Data Retention

We retain Personal Data for as long as necessary for the purposes described in this Privacy Policy.

How long we retain Personal Data depends on: whether we need it to provide the Platform; whether we have a legal obligation to retain it; and whether retention is necessary to resolve disputes or enforce our agreements.

When we have no ongoing legitimate business need to process your Personal Data, we will securely delete or anonymise it. If deletion is not immediately possible (for example, because data is stored in backup archives), we will securely isolate it from further processing until deletion is possible.

8. Data Security

The security of your Personal Data is important to us. We protect your Personal Data through technical and organisational measures designed to prevent unlawful or unauthorised access, destruction, loss, alteration, disclosure, or use. These include: encryption in transit and at rest; access controls; regular security assessments; and incident response procedures.

9. Minors

Our Website and Platform are not directed to anyone under the age of 18. We do not knowingly collect Personal Data from anyone under the age of 18. If you have reason to believe that a minor has provided Personal Data to us, please contact us at privacy@yourpivot.co and we will take steps to delete that information.

10. Your Data Protection Rights

Subject to applicable law, you may have the following rights:

Access: Request a copy of the Personal Data we hold about you.
Correction: Request that we correct inaccurate or incomplete Personal Data.
Deletion: Request that we delete your Personal Data.
Restriction: Request that we restrict the processing of your Personal Data.
Portability: Request that your Personal Data be transferred to you or a third party in a structured, commonly used, machine-readable format.
Objection: Object to the processing of your Personal Data where we rely on legitimate interests.
Withdraw Consent: Where processing is based on consent, withdraw your consent at any time.
Marketing Opt-out: Opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us directly.

To exercise any of these rights, please contact us at privacy@yourpivot.co. We respond to all requests in accordance with applicable data protection laws.

You also have the right to complain to a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you by posting a notice on our Website or by other appropriate means.

You can check the "last updated" date at the top of this Privacy Policy to see when it was last revised.

12. How to Contact Us

If you have any questions or concerns about our use of your Personal Data, please contact us:

Email: hello@yourpivot.co

Post: Pivot Technologies Ltd, 71-75 Shelton Street, London, WC2H 9JQ