Privacy
Privacy notice
Who we are
Pipepoint is a business-to-business outbound marketing service operated by Max Traynor, a sole trader based in Glasgow, United Kingdom. We are the data controller for the personal data described in this notice.
- Contact
- [email protected]
- Opt out of all contact
- [email protected]
What this notice covers
This notice explains how we handle personal data when we contact people at UK businesses about products and services relevant to their professional role, and when you contact us or visit this website.
It does not cover data held by our clients about their own customers.
What personal data we process
We process a small amount of business contact information:
- Name
- Job title
- Work email address
- Employer name
We also process information about companies — regulatory status, authorisation dates, permissions, company numbers, registered addresses. Most of this is not personal data, but it is linked to the contact records above.
We do not process special category data. We do not process information about health, race, religion, political opinions, sexual orientation, trade union membership, biometrics, or genetics. We do not process data about criminal convictions or offences.
We do not process personal data about anyone under 18.
Where we get it
| Source | What we take |
|---|---|
| FCA Financial Services Register | Firm name, reference number, authorisation status and date, permissions, business type |
| Companies House | Company number, incorporation date, registered address, SIC codes, officer appointments |
| Publicly available business sources | Name, job title, work email address |
We do not buy data from list brokers. We do not collect data by scraping websites or platforms in breach of their terms of use.
Why we process it, and our lawful basis
Purpose: to identify UK financial services firms with a current need for regulatory compliance software, and to contact the relevant person at those firms with a relevant offer.
Lawful basis: legitimate interests (Article 6(1)(f) UK GDPR).
Our legitimate interest is in marketing our services and those of our clients to businesses likely to need them. We have assessed this against your interests and rights, and concluded that the processing is proportionate because:
- Contact is directed at your professional role, not your private life
- No sensitive personal data is involved
- The subject matter is directly relevant to your stated responsibilities
- The data comes from sources you would reasonably expect to be public
- Contact volume is low, and you can stop it at any time
You can ask us for a copy of our Legitimate Interests Assessment.
We also send email marketing in line with the Privacy and Electronic Communications Regulations 2003 (PECR). We contact corporate subscribers — limited companies, LLPs and public bodies. We do not send unsolicited marketing email to sole traders or ordinary partnerships without consent.
How long we keep it
- Company-level information: retained while it remains useful for our service
- Personal contact data: deleted when no longer needed, and in any event within 24 months of collection, unless we have an ongoing business relationship with you
- Opt-out records: retained indefinitely, because we need them to make sure we do not contact you again
Who we share it with
We do not sell personal data.
We share it with:
- Our clients, where you have responded with interest and we are introducing you to them
- Our service providers, who process data on our behalf under contract — currently Google (email and file storage) and Instantly (email sending)
Some providers may process data outside the UK. Where they do, transfers are covered by adequacy regulations or by standard contractual clauses.
Your rights
Under UK GDPR you have the right to:
- Object to processing based on legitimate interests, including objecting to direct marketing. If you object to direct marketing we will stop immediately, no questions asked
- Access the personal data we hold about you
- Correct data that is wrong or incomplete
- Erase your data
- Restrict how we use it
- Portability — receive your data in a machine-readable format
To exercise any of these, email [email protected]. To simply stop hearing from us, email [email protected] or reply to any message with “unsubscribe”.
We respond within one month.
Complaints
If you are unhappy with how we have handled your data, please contact us first at [email protected] so we can try to put it right.
You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s OfficeWycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.uk
This website
This website does not use cookies, analytics, tracking pixels, or third-party scripts. Fonts are served from our own domain, so no data is sent to third parties when you browse.
Our hosting provider, Cloudflare, processes standard server log data including IP addresses for security and reliability purposes.
Changes
We may update this notice. The date at the top shows when it was last changed. Material changes will be reflected here before they take effect.