Legal
Privacy notice.
Last updated: 5 October 2026.
This notice covers the paritir.com website. Personal data processed within the Paritir product on behalf of customers is governed by our data processing agreement.
1. Who is responsible
The controller for personal data processed via this website is Paritir Ltd, a company registered in England and Wales (company number 17480044), 66 Paul Street, London EC2A 4NA, United Kingdom. Contact: hello@paritir.com. See our company information for full details.
We process personal data under the UK GDPR and the Data Protection Act 2018 and, where it applies to you, the EU General Data Protection Regulation. Article references below apply to both. We have not appointed a Data Protection Officer, as we are not required to under Article 37; please send any data protection question to the address above.
2. What we collect, why, and the legal basis
Contact enquiries (/contact)
If you submit the contact form we process the name, work email, company, country, employee-count band, enquiry type and any message you provide, in order to respond to and manage your enquiry. Legal basis: Art. 6(1)(b) (steps prior to a contract at your request) and/or Art. 6(1)(f) (our legitimate interest in answering business enquiries).
Design partner and advisor applications (/design-partners, /advisors)
If you apply to join our design partner programme or as an advisor, we process your name, work email and company, and — if you give them — your country, role, organisation size and any message, in order to assess and progress your application. Legal basis: Art. 6(1)(b) and/or (f) as above.
Partner applications (/partners)
If you apply to partner we process your name, work email, firm name, firm website, firm type, whether you advise on pay transparency, the client markets you select, and any message — to assess and progress the partnership. Legal basis: Art. 6(1)(b) and/or (f) as above.
Business contacts we approach
If you work at an advisory, law, accountancy or payroll firm, we may contact you individually about a business partnership. We collect your name, role, firm and work contact details from public sources, such as your firm's website, articles you have published and your public professional profile (for example, LinkedIn), and keep a record of our contact with you. We only contact people whose role relates to employment, pay, payroll or HR advisory. Legal basis: Art. 6(1)(f) (our legitimate interest in developing partnerships with professional firms). You can object at any time by replying to our email or writing to hello@paritir.com; we will stop contacting you.
Technical data stored with a submission
With every form submission and update-email sign-up we also store your IP address and your browser's user-agent string, so that we can detect, investigate and block abuse of our forms. Legal basis: Art. 6(1)(f) (our legitimate interest in securing our forms).
Update emails
If you sign up for updates on the EU Pay Transparency Directive, we process your email address, your site language, the countries you choose to follow and where on the site you signed up. We send you a confirmation email first and only add you to our mailing list once you click the link in it. Legal basis: Art. 6(1)(a) (your consent). You can withdraw consent at any time using the unsubscribe link in any update email or by emailing us; this does not affect processing before the withdrawal.
Spam protection
Our enquiry and application forms are protected by Cloudflare Turnstile, which processes your IP address and technical signals from your browser to distinguish humans from automated abuse. Legal basis: Art. 6(1)(f) (our legitimate interest in securing our forms).
Server and security logs
Our hosting provider processes technical data (such as IP address, user-agent and timestamps) to deliver the site and protect it against attack. Legal basis: Art. 6(1)(f).
Audience measurement
We use Cloudflare Web Analytics, which is privacy-friendly and
cookieless: it produces aggregate usage statistics (such as page views and
page load times) without setting cookies, without cross-site tracking, and without building
profiles of individual visitors. Legal basis: Art. 6(1)(f) (our legitimate
interest in understanding how the site is used and keeping it fast). To opt out, block static.cloudflareinsights.com in your browser or with a content blocker; the site works the same without it. You can also object by email (§7).
What we do not do
We do not use advertising or cross-site tracking tools on this website, and we do not build profiles of visitors.
3. Cookies and similar technologies
This site is designed to run without tracking. We self-host our fonts, load no third-party advertising scripts, use only cookieless analytics, and set no non-essential cookies, so we do not display a consent banner. The only cookies are strictly necessary:
paritir_locale— stores your chosen site language (a short language code) for one year.- Security cookies set by Cloudflare to protect the site, and a token Cloudflare Turnstile may set solely to perform its check on pages with a form.
4. Who we share data with
We use a small number of service providers to operate the website:
- Cloudflare, Inc. — website hosting (Cloudflare Pages), storage of form submissions and sign-ups (Cloudflare D1), DNS, the Turnstile anti-spam check and cookieless analytics (Cloudflare Web Analytics).
- Resend (Plus Five Five, Inc.) — delivery of the notification email generated when you submit a form, the sign-up confirmation email and update emails. Configured to the EU region.
- Google (Google Workspace) — our business email. Form notifications are delivered to, and replies sent from, a paritir.com mailbox hosted by Google.
- Atlassian (Jira) — where we keep our records of business contacts we approach and of partnership discussions.
- Anthropic (Claude) — an AI assistant we use to research and draft our correspondence with business contacts. We review every message before it is sent.
We do not sell personal data or share it for third-party advertising.
5. International transfers
We are based in the United Kingdom, which the European Commission recognises as providing an adequate level of data protection. Resend is configured to its EU region. Cloudflare, Google, Atlassian and Anthropic are headquartered in the United States and may process data outside the UK and EEA. Where that happens, the transfer is protected by the EU–US Data Privacy Framework and its UK Extension where the provider is certified, or otherwise by the European Commission's Standard Contractual Clauses with the UK International Data Transfer Addendum.
6. How long we keep it
- Enquiries and applications, including the technical data stored with them: for as long as needed to handle your request and for 24 months after our last contact with you, then deleted, unless a longer period is required by law.
- Business contacts we approach: if you do not respond, we delete your details within 12 months of our last contact. If you object, we keep only your name, firm and the date, so that we do not contact you again.
- Update-email subscriptions: while you are subscribed. If you unsubscribe we keep your email address and the date you unsubscribed, so that we do not email you again. Sign-ups that are never confirmed are deleted within 24 months.
7. Your rights
Subject to the conditions in the law, you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), to object (Art. 21) to processing based on legitimate interests, and to withdraw consent at any time (Art. 7(3)). To exercise any of these, email hello@paritir.com.
You also have the right to complain to a supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk). If you live or work in the EU/EEA, you may also complain to the supervisory authority in your country. We would appreciate the chance to address your concern first.
8. Changes
We may update this notice; the current version always lives at this URL with its date.
Questions about this notice? Email hello@paritir.com. Security matters: security@paritir.com.