Privacy notice

This notice explains how PinnacleMerit Holdings (“PinnacleMerit”, “we”, “us”) handles personal data when you visit www.pinnaclemerit.com or contact us.

The controller of your personal data is [registered company name], a company registered in [country] under number [company number], with its registered office at [registered office address].

For any question about this notice or your personal data, contact us at info@pinnaclemerit.com.

We collect only the information you choose to give us and the technical data needed to run the website:

• Contact form: your first name, last name, email address, organisation (optional), subject (optional) and message.
• Emails you send us: your email address, the content of your message and anything you attach, for example a CV sent to careers@pinnaclemerit.com.
• Technical data: when you visit the website, our hosting provider automatically processes your IP address, browser type, the pages requested and the date and time of the request.

We do not use cookies, analytics or advertising tools, and we do not build profiles of visitors. Please do not send us sensitive personal data (for example about health or political opinions) unless we ask for it.

We use personal data only to:

• respond to your enquiry and route it to the right team or group company;
• consider your application if you send us your CV or apply for a role;
• keep the website secure, prevent misuse (for example spam sent through the contact form) and fix technical problems;
• comply with our legal obligations.

We do not sell your personal data or use it for automated decision-making.

Where the EU or UK General Data Protection Regulation applies, we rely on:

• Legitimate interests (Article 6(1)(f)): to answer enquiries, communicate with business contacts, and keep the website secure.
• Steps before entering into a contract (Article 6(1)(b)): when you contact us about working with us or apply for a job.
• Legal obligation (Article 6(1)(c)): where we must keep or disclose information by law.
• Consent (Article 6(1)(a)): only where we ask for it, for example to keep your CV for future roles. You can withdraw consent at any time.

We share personal data only with:

• Group companies, where your enquiry concerns one of our businesses and needs to be passed to its team;
• Service providers who process data on our behalf under contract: Vercel Inc. (website hosting; the contact form is processed in the European Union), Twilio SendGrid (delivery of contact-form messages) and Microsoft (email);
• Authorities or advisers, where required by law or to establish, exercise or defend legal claims.

Some of these providers are based in the United States. Where personal data is transferred outside the European Economic Area or the United Kingdom, it is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.

• Enquiries: kept for as long as needed to deal with your enquiry and any follow-up, and deleted within [24 months] of our last contact, unless an ongoing business relationship or a legal obligation requires longer.
• Applications and CVs: kept for [6 months] after the recruitment process ends, or longer only with your consent.
• Technical data: kept by our hosting provider for a short period for security and operation, after which it is deleted automatically.

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to our use of your data, including where we rely on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email info@pinnaclemerit.com. We will respond within one month. You also have the right to complain to the data protection authority in the country where you live or work.

This website does not use cookies or similar technologies, and loads no third-party content. See our Cookie policy.

Questions about this notice or about how we use personal data: info@pinnaclemerit.com, or by post to [registered company name], [registered office address].

We may update this notice when our practices change. The date at the top shows when it was last updated.