Who is responsible for your data
Data controller: Serena Barberis / The Pivot Move · VAT no. 02797300064. For privacy questions or to exercise your rights, write to info@thepivotmove.com.
Data we collect
Depending on how you interact with The Pivot Move, we may collect contact details and messages you provide, booking or enquiry information, and responses submitted through digital resources, assessments, reflections and online tools. We collect only the information needed for the stated purpose. Some tools are designed so that answers remain in the participant's browser and only the email address is submitted; the notice displayed with each resource explains what is retained.
Why and how we use it
We use personal data to respond to enquiries, administer and deliver a requested resource or service, store a submission, provide the participant's response record, maintain security and prevent misuse, and send a limited follow-up directly related to the resource where this has been clearly stated. We do not add participants to The Pivot Letter or other marketing communications without separate consent.
Legal basis
Processing is based, as applicable, on taking steps at your request, performing a contract, your consent, compliance with legal obligations, or The Pivot Move's legitimate interests in delivering and protecting its services, provided those interests do not override your rights.
Service providers and transfers
Authorised service providers may process data only as needed to host the website, receive and store forms, manage bookings or operate a resource. These may include Netlify, Google, Microsoft and Calendly, depending on the resource or service used. Providers may process data outside the European Economic Area under appropriate safeguards. The Pivot Move does not sell personal data.
Retention and security
Resource submissions and related contact records are normally retained for up to 12 months unless a longer period is necessary for an ongoing engagement, to establish or defend legal claims, or to meet a legal obligation. Data is protected through access controls, data minimisation, service-provider safeguards and secure configuration. No internet service can be guaranteed completely secure.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where processing relies on consent. You may also complain to the competent data protection authority.
Last updated: 28 September 2026.