Legal

Privacy notice.

Last updated: 29 September 2026.

This notice covers the paritir.com website. Personal data processed within the Paritir product on behalf of customers is governed by our data processing agreement.

1. Who is responsible

The controller for personal data processed via this website is Paritir Ltd, a company registered in England and Wales (company number 17480044), 66 Paul Street, London EC2A 4NA, United Kingdom. Contact: [email protected]. See our company information for full details.

We process personal data under the UK GDPR and the Data Protection Act 2018 and, where it applies to you, the EU General Data Protection Regulation. Article references below apply to both. We have not appointed a Data Protection Officer, as we are not required to under Article 37; please send any data protection question to the address above.

2. What we collect, why, and the legal basis

Contact enquiries (/contact)

If you submit the contact form we process the name, work email, company, country, employee-count band, enquiry type and any message you provide, in order to respond to and manage your enquiry. Legal basis: Art. 6(1)(b) (steps prior to a contract at your request) and/or Art. 6(1)(f) (our legitimate interest in answering business enquiries).

Design partner and advisor applications (/design-partners, /advisors)

If you apply to join our design partner programme or as an advisor, we process your name, work email and company, and — for advisor applications — your country, role and any message, in order to assess and progress your application. Legal basis: Art. 6(1)(b) and/or (f) as above.

Partner applications (/partners)

If you apply to partner we process your name, work email, firm name, firm website, firm type, whether you advise on pay transparency, the client markets you select, and any message — to assess and progress the partnership. Legal basis: Art. 6(1)(b) and/or (f) as above.

Technical data stored with a submission

With every form submission and update-email sign-up we also store your IP address and your browser's user-agent string, so that we can detect, investigate and block abuse of our forms. Legal basis: Art. 6(1)(f) (our legitimate interest in securing our forms).

Update emails

If you sign up for updates on the EU Pay Transparency Directive, we process your email address, your site language, the countries you choose to follow and where on the site you signed up. We send you a confirmation email first and only add you to our mailing list once you click the link in it. Legal basis: Art. 6(1)(a) (your consent). You can withdraw consent at any time using the unsubscribe link in any update email or by emailing us; this does not affect processing before the withdrawal.

Spam protection

Our enquiry and application forms are protected by Cloudflare Turnstile, which processes your IP address and technical signals from your browser to distinguish humans from automated abuse. Legal basis: Art. 6(1)(f) (our legitimate interest in securing our forms).

Server and security logs

Our hosting provider processes technical data (such as IP address, user-agent and timestamps) to deliver the site and protect it against attack. Legal basis: Art. 6(1)(f).

Audience measurement

We use Cloudflare Web Analytics, which is privacy-friendly and cookieless: it produces aggregate usage statistics (such as page views and page load times) without setting cookies, without cross-site tracking, and without building profiles of individual visitors. Legal basis: Art. 6(1)(f) (our legitimate interest in understanding how the site is used and keeping it fast).

What we do not do

We do not use advertising or cross-site tracking tools on this website, and we do not build profiles of visitors.

3. Cookies and similar technologies

This site is designed to run without tracking. We self-host our fonts, load no third-party advertising scripts, use only cookieless analytics, and set no non-essential cookies, so we do not display a consent banner. The only cookies are strictly necessary:

  • paritir_locale — stores your chosen site language (a short language code) for one year.
  • Security cookies set by Cloudflare to protect the site, and a token Cloudflare Turnstile may set solely to perform its check on pages with a form.

4. Who we share data with

We use a small number of service providers to operate the website:

  • Cloudflare, Inc. — website hosting (Cloudflare Pages), storage of form submissions and sign-ups (Cloudflare D1), DNS, the Turnstile anti-spam check and cookieless analytics (Cloudflare Web Analytics).
  • Resend (Plus Five Five, Inc.) — delivery of the notification email generated when you submit a form, the sign-up confirmation email and update emails, and storage of confirmed update-email subscribers. Configured to the EU region.

We do not sell personal data or share it for third-party advertising.

5. International transfers

We are based in the United Kingdom, which the European Commission recognises as providing an adequate level of data protection. Our email provider is configured to its EU region. Cloudflare is headquartered in the United States and may process data outside the UK and EEA. Where that happens, the transfer is protected by the EU–US Data Privacy Framework and its UK Extension where the provider is certified, or otherwise by the European Commission's Standard Contractual Clauses with the UK International Data Transfer Addendum.

6. How long we keep it

  • Enquiries and applications, including the technical data stored with them: for as long as needed to handle your request and for 24 months after our last contact with you, then deleted, unless a longer period is required by law.
  • Update-email subscriptions: while you are subscribed. If you unsubscribe we keep your email address and the date you unsubscribed, so that we do not email you again. Sign-ups that are never confirmed are deleted within 24 months.

7. Your rights

Subject to the conditions in the law, you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), to object (Art. 21) to processing based on legitimate interests, and to withdraw consent at any time (Art. 7(3)). To exercise any of these, email [email protected].

You also have the right to complain to a supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk). If you live or work in the EU/EEA, you may also complain to the supervisory authority in your country. We would appreciate the chance to address your concern first.

8. Changes

We may update this notice; the current version always lives at this URL with its date.

Questions about this notice? Email [email protected]. Security matters: [email protected].