Privacy Policy

We appreciate you visiting our website and your interest in the services we offer. Your privacy is important to us and we want you to feel comfortable visiting our website. In this Privacy Policy, we explain how we collect your Personal Data, why it is collected and what rights you have on that basis. If you have any questions about this Privacy Policy, please contact us.

“Personal data” means any information relating to an identified or identifiable natural person (“data subject”). An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.

We collect Personal Data:

• directly from you when you provide it to us;
• automatically as you navigate through the site; and
• from third parties, for example, our business partners.

You can contact us directly via the contact forms available on our website. In particular, you may provide us with the following information:

• Name, surname and title
• Country
• Contact data (e.g. e-mail address, phone number)
• Message

We collect, process and use the information provided by you via the contact forms exclusively for the processing of your specific request.

It is important to note that the types of Personal Data we collect about you depends on the context of your interactions with us.

We do not sell, trade, or otherwise transfer to third parties your Personal Data.

We collect your Personal Data for the following purposes:

• to keep track of our interactions and meetings, such as when you contact us for information and support; to carry out our business operations; carry out marketing and sales.
• to allow us to communicate with you; respond to your requests or inquiries.
• to personalize your experience when using our services; ensure that our services are presented in the way that best suits you; understand your professional and personal interests in our services.
• to comply with any legal obligations (e.g. tax, accounting and administrative obligations).

We will make sure that your Personal Data is kept safe and only used for the purposes mentioned above.

We take every reasonable step to ensure that your Personal Data is processed only for the minimum period necessary in connection with: (i) the purposes set out in this Privacy Policy; (ii) any additional purposes notified to you at or before the time of collection or processing; or (iii) as required or permitted by applicable law, and thereafter, for the duration of any applicable limitation period.

We do not create copies or duplicates of your Personal Data without your knowledge and consent, except for backup copies necessary to ensure proper processing and compliance with legal retention requirements. Upon the conclusion of the provision of services, and at your request, we will either securely delete your Personal Data or return it to you, unless further storage is required by law.
In all cases, we may retain data necessary to demonstrate compliance with data protection laws or to address legal or regulatory requirements beyond the termination of the agreement. Once your Personal Data is no longer required, we will securely delete or destroy it.

• Compliance: We comply with all applicable data protection laws and regulations, including ISO27001, GDPR and other relevant frameworks.
• Security Controls: We maintain a written information security policy that defines security controls based on our assessment of risks to Personal Data.
• Confidentiality: All employees, contractors, and agents handling Personal Data are subject to strict confidentiality obligations and are trained on data privacy and security.
• Data Subject Requests: We assist in responding to data subject requests to exercise their rights under applicable data protection laws.

We ensure that all cross-border transfers of Personal Data comply with applicable data protection laws, including the GDPR, UK, and relevant U.S. frameworks.

• Transfers to Third Countries: Transfers outside the EEA, UK, or jurisdictions without adequacy decisions are conducted under appropriate safeguards, such as Standard Contractual Clauses (SCCs) or other mechanisms.
• U.S. Data Transfers: For transfers to the United States, we rely on the EU-U.S. Data Privacy Framework (or alternatives, such as SCCs, if the framework becomes invalid).
• Compliance Assistance: We provide reasonable assistance to ensure compliance with international data transfer obligations, including DPIAs and regulatory inquiries.

We may engage third-party subprocessors to assist in delivering our services. These subprocessors are contractually obligated to provide the same level of data protection as outlined in this policy. Currently, our subprocessors include:

• DigitalOcean (Data hosting services);
• Google (Data hosting services);
• Hubspot (CRM system).

You will be notified of any additions or changes to our subprocessors. You may object to the use of a specific subprocessor under reasonable conditions.

We inform you that you may, where required by applicable law and subject to limitations which may apply in consideration of exceptions or legal requirements, be entitled:

• to have access upon simple request to your Personal Data – in which case you may receive a copy of such data (if requested).
• to obtain a rectification of your Personal Data should your Personal Data be inaccurate, incomplete or obsolete.
• to obtain the deletion of your Personal Data in the situations set forth by applicable data protection law (‘right to be forgotten’).
• to withdraw your consent to the data processing without affecting the lawfulness of processing, where your Personal Data has been collected and processed on the basis of your consent.
• to request a limitation of the data processing in the situations set forth by applicable law;
• to receive your Personal Data for transmission from Pimble to a third-party or to have your Personal Data directly transferred by Pimble to the third-party of your choice, where technically feasible (data portability right allowed only where the processing is based on your consent).

When you visit our website, information can be stored on your computer in the form of “cookies.” Please see our Cookie Policy for more information about this topic.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The updated version will be posted on our website with the “Last Updated” date. We encourage you to review this policy periodically to stay informed about how we protect your information.

Last Updated: 20/01/2025