Legal
Privacy notice.
DRAFT — not yet in effect. A working draft pending legal review and completion of the bracketed details. Not legal advice. This notice covers the paritir.com website; personal data processed within the Paritir product on behalf of customers is governed by our data processing agreement.
Last updated: [[date on publication]].
1. Who is responsible
The controller for personal data processed via this website is [[legal entity name]], [[registered address]]. Contact: hello@paritir.com. See our imprint for full provider details. [[Data Protection Officer details, or a note that appointment is not required under Art. 37 GDPR.]]
2. What we collect, why, and the legal basis
Contact enquiries (/contact)
If you submit the contact form we process the name, work email, company, country, employee-count band, enquiry type and any message you provide, in order to respond to and manage your enquiry. Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract at your request) and/or Art. 6(1)(f) (our legitimate interest in answering business enquiries).
Partner applications (/partners)
If you apply to partner we process your name, work email, firm name, firm website, firm type, whether you advise on pay transparency, the client markets you select, and any message — to assess and progress the partnership. Legal basis: Art. 6(1)(b) and/or (f) as above.
Spam protection
Form submissions are protected by Cloudflare Turnstile, which processes your IP address and technical signals from your browser to distinguish humans from automated abuse. Legal basis: Art. 6(1)(f) (our legitimate interest in securing our forms).
Audience measurement
We use Cloudflare Web Analytics, which is privacy-friendly and cookieless: it produces aggregate usage statistics without setting cookies, without cross-site tracking, and without building profiles of individual visitors. Legal basis: Art. 6(1)(f) (our legitimate interest in understanding site usage). [[Confirm final analytics choice with counsel.]]
Server and security logs
Our hosting provider processes technical data (such as IP address, user-agent and timestamps) to deliver the site and protect it against attack. Legal basis: Art. 6(1)(f).
3. Cookies and similar technologies
This site is designed to run without tracking. We self-host our fonts, load no third-party
advertising or analytics CDNs, and our analytics are cookieless. We therefore do not set
non-essential cookies and do not display a consent banner.
Cloudflare Turnstile may set a strictly-necessary token solely to perform its security check.
A strictly-necessary preference cookie (paritir_locale) stores your chosen site
language — only a short language code — and requires no consent.
[[Counsel to confirm the final cookie position against the actual deployed configuration —
see the cookie audit, KAN-145.]]
4. Who we share data with (sub-processors)
We use a small number of service providers to operate the website:
- Cloudflare, Inc. — website hosting (Cloudflare Pages), storage of form submissions (Cloudflare D1), DNS, the Turnstile anti-spam check, and cookieless analytics.
- Resend (Plus Five Five, Inc.) — delivery of the notification email generated when you submit a form. Configured to the EU region.
We do not sell personal data or share it for third-party advertising.
5. International transfers
We host and store website data in the EU where we can. Some providers (e.g. Cloudflare) are US-headquartered and may process data outside the EEA. Where that happens, transfers are safeguarded by the European Commission's Standard Contractual Clauses and the providers' supplementary measures. [[Counsel to confirm the transfer mechanism and any TIA per provider.]]
6. How long we keep it
We keep enquiry and partner-application data for as long as needed to handle your request and for [[retention period — e.g. 24 months]] thereafter for follow-up and record-keeping, then delete it, unless a longer period is required by law. Aggregate analytics contain no personal data.
7. Your rights
Subject to the conditions in the GDPR, you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21) to processing based on legitimate interests. To exercise any of these, email hello@paritir.com. You also have the right to lodge a complaint with a supervisory authority — in particular in the EU/EEA country of your residence or workplace. [[Name the lead supervisory authority for the entity's establishment.]]
8. Changes
We may update this notice; the current version always lives at this URL with its date.
Questions about this notice? Email hello@paritir.com. Security matters: security@paritir.com.