Privacy Policy

1. Introduction

1.1. This Privacy Policy explains how Pilotlab collects, uses and shares personal data when you visit our website, create an account, or use our Services.

2. Who we are

2.1. Pilot Labs Ltd is the controller of the personal data described in this policy, except where we process data on behalf of a customer, in which case that customer is the controller and our Data Processing Addendum applies.

3. Data we collect

• Account data — name, work email address, job title and organisation.
• Usage data — pages visited, features used, approximate location derived from IP address.
• Device data — browser type, operating system and device identifiers.
• Communications — messages you send to our support and sales teams.

4. How we collect it

4.1. We collect data directly from you, automatically as you use the Services, and occasionally from third parties such as our resellers.

5. Lawful bases

5.1. We rely on performance of a contract to provide the Services, legitimate interests to secure and improve them, consent for optional marketing, and legal obligation where the law requires.

6. How we use your data

• To provide, maintain and secure the Services.
• To respond to support requests and communicate about your account.
• To understand product usage and improve our features.
• To send marketing communications where you have opted in.

7. Marketing

7.1. You can withdraw consent to marketing at any time using the unsubscribe link in any message or by contacting us.

8. Sharing your data

8.1. We share personal data with sub-processors that support our operations, with professional advisers, and where required by law or in connection with a corporate transaction. We do not sell personal data.

9. International transfers

9.1. Where personal data leaves the UK or EEA we rely on adequacy decisions or on standard contractual clauses together with a transfer risk assessment.

10. Security

10.1. We maintain technical and organisational measures appropriate to the risk, including encryption, access control and continuous monitoring.

11. Retention

11.1. We keep personal data for as long as your account is active and for a limited period afterwards to meet legal and accounting obligations.

12. Your rights

12.1. Subject to applicable law you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to complain to a supervisory authority.

13. Cookies

13.1. Our use of cookies and similar technologies is described in the Cookie Policy.

14. Children

14.1. The Services are not directed at children and we do not knowingly collect personal data from anyone under 16.

15. Changes to this policy

15.1. We will post any changes on this page and update the date shown at the top.