This policy is intended to provide transparent information about PAIVUS data practices. Contract-specific processing terms may also apply where an organisation uses PAIVUS services.
01
Who we are
PAIVUS Ltd develops the PAIVUS Hospitality Intelligence Platform and ARK, its intelligence core. References to “PAIVUS”, “we”, “us” or “our” in this policy mean PAIVUS Ltd.
This policy applies to personal information collected through paivus.com, strategic briefing requests, founding-partner enquiries, company communications and use of PAIVUS services where PAIVUS determines how and why personal information is processed.
02
Information we may collect
Depending on how you interact with PAIVUS, we may collect:
- identity and contact information, including your name, business email address and telephone number;
- organisation information, including company name, hospitality model, market, portfolio size and role;
- enquiry information, including your operating priorities, current technology environment and preferred meeting details;
- account and service information where you are authorised to use a PAIVUS product or controlled pilot;
- technical and usage information, such as device, browser, security and service-interaction data; and
- correspondence and other information you choose to provide.
03
How we use personal information
We may use personal information to:
- respond to enquiries and arrange strategic briefings;
- assess and manage founding or strategic partnerships;
- provide, secure, support and improve PAIVUS services;
- administer accounts and authorised user access;
- communicate about service, security, operational or contractual matters;
- meet legal, regulatory, accounting and compliance obligations;
- prevent fraud, misuse and security incidents; and
- develop PAIVUS and ARK using information we are lawfully permitted to use.
04
Our lawful bases
We process personal information only where we have a lawful basis. Depending on the circumstances, this may include:
- taking steps at your request before entering into a contract or performing a contract;
- complying with a legal obligation;
- pursuing legitimate interests such as operating, securing and improving PAIVUS, provided those interests are not overridden by your rights; or
- your consent, where consent is required.
05
Hospitality customer and guest data
Where a hospitality organisation uses PAIVUS to process personal information about its guests, employees, contractors or other individuals, that organisation will generally determine the purposes and means of the processing and act as the data controller. PAIVUS will generally process that information on its documented instructions as a data processor.
The precise roles and responsibilities depend on the relevant service, processing activity and contractual arrangements. In some circumstances, PAIVUS may act as an independent controller for activities such as account administration, security, legal compliance and direct company communications.
Guests seeking to exercise rights relating to a reservation or stay should normally contact the hospitality organisation with which they interacted.
06
How we share information
We may share personal information only where reasonably necessary with:
- service providers supporting hosting, infrastructure, communications, security, analytics and business operations;
- professional advisers, auditors, insurers and financial service providers;
- authorities, regulators or other parties where required by law or necessary to protect legal rights; and
- a prospective buyer, investor or successor in connection with a lawful corporate transaction.
PAIVUS does not sell personal information.
07
International transfers
Some service providers may process information outside the United Kingdom. Where personal information is transferred internationally, we use an applicable lawful transfer mechanism and appropriate safeguards as required by data-protection law.
08
Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, respond to enquiries, maintain security, resolve disputes and meet legal, tax, accounting and regulatory obligations.
Retention periods vary according to the category of information, the relevant contractual relationship, legal requirements and whether information is needed to establish, exercise or defend legal claims. Information is deleted, anonymised or securely archived when it is no longer required.
09
Security
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration, disclosure or misuse. No service or method of transmission can be guaranteed to be completely secure.
10
Your rights
Subject to applicable law and certain exemptions, you may have rights to:
- request access to your personal information;
- request correction of inaccurate information;
- request erasure of information;
- request restriction of processing;
- object to certain processing;
- request data portability; and
- withdraw consent where processing relies on consent.
You may also complain to the UK Information Commissioner’s Office or another competent supervisory authority.
11
Cookies and similar technologies
PAIVUS may use cookies and similar technologies for essential website operation, security, preferences and permitted analytics. Further information is available in our Cookie Policy.
12
Contact and policy updates
Questions, requests or concerns about this policy may be sent to privacy@paivus.com.
We may update this policy as PAIVUS, its services or applicable legal requirements develop. The latest version will be published on this page with an updated effective date.
Privacy enquiries
Contact PAIVUS about your personal information or this policy.