Clear about data.Serious about trust.

Introduction

PartnerBridge Ltd (”PartnerBridge”, “we”, “our” or “us”) is committed to protecting the privacy, confidentiality and security of the personal data entrusted to us.

We believe that trust is fundamental to every commercial relationship. Whether you are visiting our website, evaluating our products, using our Services or communicating with our team, we are committed to processing personal data lawfully, fairly and transparently.

This Privacy Policy explains how PartnerBridge collects, uses, stores, shares and protects personal data when you interact with our website, software products and related services. It also explains the rights available to individuals under applicable data protection laws and how those rights may be exercised.

This Privacy Policy has been prepared in accordance with:

• the UK General Data Protection Regulation (“UK GDPR”);
• the Data Protection Act 2018;
• the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”), where applicable; and
• other applicable United Kingdom data protection and privacy legislation.

Where additional legal obligations apply in other jurisdictions, PartnerBridge will comply with those requirements to the extent they are applicable to the Services provided.

PartnerBridge processes personal data in accordance with the principles of:

• lawfulness, fairness and transparency;
• purpose limitation;
• data minimisation;
• accuracy;
• storage limitation;
• integrity and confidentiality; and
• accountability.

About PartnerBridge

PartnerBridge Ltd is a company incorporated in Scotland.

Our software helps organisations evaluate, prioritise and develop technology partnerships through structured evidence collection, commercial analysis and AI-assisted insights.

Our products currently include, but are not limited to:

• RelateIQ
• Precision Insights
• Activate
• Technology Partnership Strategy Engine
• associated customer portals, APIs and online services
• demonstrations, trials and evaluation environments
• PartnerBridge-operated websites and applications

Throughout this Privacy Policy these offerings are collectively referred to as the “Services.”

Who We Are

PartnerBridge Ltd is the organisation responsible for determining how and why personal data is processed when you interact directly with our website and many aspects of our Services.

PartnerBridge Ltd

Registered Office

Clyde Offices, 2nd Floor

48 West George Street

Glasgow

G2 1BP

United Kingdom

Company Registration Number:

SC856320

Information Commissioner’s Office Registration Number:

ZB944221

Privacy enquiries:

privacy@partnerbridge.io

General enquiries:

jon@partnerbridge.io

Data Controller and Data Processor

The role performed by PartnerBridge under data protection law depends upon the particular circumstances in which personal data is processed.

When PartnerBridge acts as a Data Controller

PartnerBridge acts as a Data Controller when determining the purposes and means of processing personal data, including when we process information relating to:

• visitors to our website;
• prospective customers;
• marketing communications;
• sales enquiries;
• customer account administration;
• support requests;
• supplier relationships;
• recruitment activities;
• business operations;
• legal and regulatory compliance.

In these situations, PartnerBridge is responsible for ensuring that personal data is processed in accordance with applicable data protection legislation.

When PartnerBridge acts as a Data Processor

Many customers use PartnerBridge to upload documents, analyse technology partnerships, evaluate commercial opportunities and process business information.

Where customers upload personal data into the Services for their own business purposes, PartnerBridge generally acts as a Data Processor on behalf of that customer.

In these circumstances:

• the customer remains the Data Controller;
• the customer determines the purposes for which personal data is processed;
• the customer is responsible for ensuring an appropriate lawful basis exists for processing;
• PartnerBridge processes personal data only in accordance with the customer’s documented instructions, our contractual obligations and applicable law.

Where required, PartnerBridge enters into appropriate Data Processing Agreements with customers governing such processing.

Scope of this Privacy Policy

This Privacy Policy applies to personal data processed through:

• www.partnerbridge.io
• PartnerBridge-operated websites
• RelateIQ
• Precision Insights
• Activate
• customer portals
• APIs made available by PartnerBridge
• software demonstrations
• trial environments
• customer support
• customer success activities
• sales and marketing communications
• events and webinars
• any other online service operated by PartnerBridge that links to this Privacy Policy.

This Privacy Policy applies regardless of whether you interact with us as:

• a website visitor;
• prospective customer;
• customer;
• supplier;
• business contact;
• authorised user of a customer account; or
• another individual whose personal data is processed in connection with our Services.

This Privacy Policy does not apply to third-party websites, products or services that may be linked from our website. Those organisations are responsible for their own privacy practices, and we encourage you to review their privacy policies before providing them with personal data.

Definitions

For the purposes of this Privacy Policy:

Personal Data means any information relating to an identified or identifiable natural person.

Processing means any operation performed on personal data, including collecting, recording, storing, organising, analysing, using, disclosing, transmitting, combining, restricting or deleting personal data.

Data Controller means the organisation that determines the purposes and means of processing personal data.

Data Processor means an organisation that processes personal data on behalf of a Data Controller.

Customer Content means information, documents, datasets, files and other materials uploaded or submitted to the Services by customers or authorised users.

Business Information means information relating to organisations, products, technologies, commercial partnerships, integrations, marketplaces or other non-personal business information that may be analysed through the Services.

Services means all software applications, websites, APIs, customer portals and related products operated by PartnerBridge.

User means any individual who accesses or uses the Services.

Personal Data We Collect

The personal data we collect depends on how you interact with PartnerBridge, the Services you use and the information you choose to provide.

We do not intentionally collect more personal data than is necessary for the purposes described in this Privacy Policy.

The categories of information we may collect include the following.

7.1Information You Provide Directly

You may choose to provide personal data when you:

• create an account;
• request a demonstration;
• contact us through our website;
• communicate with our sales or support teams;
• subscribe to newsletters or marketing communications;
• attend webinars or events;
• participate in surveys or research;
• submit support requests;
• upload information into the Services; or
• otherwise communicate with PartnerBridge.

Depending on your interaction with us, this information may include:

• name;
• business email address;
• telephone number;
• employer or organisation;
• job title;
• department;
• business address;
• communication preferences;
• account credentials;
• correspondence;
• support requests;
• meeting notes;
• survey responses; and
• any other information you voluntarily provide.

You are under no obligation to provide personal data. However, where certain information is required to provide the Services, failure to provide that information may prevent us from delivering the requested functionality.

7.2Account Information

Where you create or administer a PartnerBridge account, we may collect information necessary to establish, secure and maintain that account.

This may include:

• account identifiers;
• usernames;
• encrypted authentication credentials;
• password reset information;
• user roles and permissions;
• account preferences;
• subscription information;
• account activity;
• licence information;
• account status; and
• records relating to authentication and security events.

We process this information to provide secure access to the Services, administer customer accounts and protect against unauthorised access.

7.3Customer Content and Uploaded Documents

Many PartnerBridge Services allow customers to upload documents and business information for analysis.

Depending upon how the Services are used, Customer Content may include:

• presentations;
• spreadsheets;
• documents;
• strategy papers;
• partnership programmes;
• technology evaluations;
• integration documentation;
• commercial planning documents;
• procurement materials;
• research;
• internal notes;
• customer-provided datasets;
• exported reports;
• structured or unstructured business information; and
• other information submitted by authorised users.

Customer Content may occasionally contain personal data where customers choose to upload documents containing information relating to identifiable individuals.

Where PartnerBridge processes Customer Content on behalf of customers, we generally act as a Data Processor and process such information solely for the purpose of providing the Services, performing customer-requested analyses and fulfilling our contractual obligations.

Ownership of Customer Content remains with the customer unless otherwise agreed in writing.

Customers are responsible for ensuring they have appropriate rights, permissions and lawful bases to upload information into the Services.

7.4Business Information

PartnerBridge is designed to analyse businesses, technologies and commercial relationships.

Accordingly, we may collect, organise and analyse information relating to organisations and technology vendors, including:

• company names;
• websites and domains;
• products and services;
• technology categories;
• integrations;
• partner programmes;
• marketplace listings;
• publicly available documentation;
• public commercial announcements;
• technology ecosystems;
• strategic partnership information;
• product positioning;
• publicly available corporate information; and
• evidence generated through PartnerBridge analysis.

In most circumstances this information relates to organisations rather than identifiable individuals and therefore does not constitute personal data.

Where personal data is incidentally included within such information, it is processed only for the purposes described in this Privacy Policy and in accordance with applicable data protection law.

7.5Publicly Available Information

PartnerBridge may collect publicly available business information from legitimate public sources to support technology partnership analysis.

Such information may include material published through:

• company websites;
• public product documentation;
• publicly accessible partner directories;
• technology marketplaces;
• integration catalogues;
• press releases;
• publicly available technical documentation;
• publicly available corporate announcements;
• publicly available regulatory filings; and
• other lawful public sources.

We do not intentionally circumvent access controls or collect information from sources that prohibit such collection.

Where publicly available information contains personal data, PartnerBridge processes that information on the basis of its legitimate interests in providing technology partnership analysis, while taking appropriate steps to ensure that the rights and freedoms of individuals are respected.

7.6Communications

When you communicate with PartnerBridge, we may retain records of those communications.

This may include:

• email correspondence;
• support tickets;
• customer success communications;
• meeting notes;
• webinar participation;
• product feedback;
• contact forms;
• chat conversations; and
• other business communications.

We use this information to respond to enquiries, improve our Services, maintain customer relationships and comply with legal obligations.

7.7Usage Information

When you access the Services, we automatically collect information regarding how the Services are used.

This may include:

• pages viewed;
• features accessed;
• navigation paths;
• interaction events;
• searches performed;
• reports generated;
• session duration;
• timestamps;
• API usage;
• clickstream information;
• error events;
• diagnostic information; and
• feature adoption metrics.

This information helps us improve usability, monitor performance, identify defects and maintain the security of the Services.

7.8Device and Technical Information

We may automatically collect technical information about the devices used to access our Services.

This may include:

• IP address;
• browser type and version;
• operating system;
• device identifiers;
• language preferences;
• screen resolution;
• approximate geographic location derived from IP address;
• network information;
• referral URLs;
• time zone settings; and
• diagnostic information.

We use this information to improve compatibility, maintain platform security, detect fraudulent activity and optimise service performance.

7.9Cookies and Similar Technologies

PartnerBridge uses cookies, local storage and similar technologies to operate the Services, improve user experience and understand how our website is used.

Depending on your cookie preferences, these technologies may support:

• authentication;
• maintaining user sessions;
• remembering preferences;
• website functionality;
• security;
• performance monitoring;
• analytics; and
• service improvement.

Further information regarding our use of cookies is available in our separate Cookie Policy.

7.10Marketing Information

Where permitted by law or where you have provided your consent, we may collect information relating to your marketing preferences.

This may include:

• newsletter subscriptions;
• communication preferences;
• event registrations;
• webinar participation;
• marketing campaign engagement;
• email interactions;
• website conversion information; and
• customer relationship management records.

You may withdraw your consent to receive marketing communications at any time by following the unsubscribe instructions included within our communications or by contacting us directly.

7.11Special Category Personal Data

PartnerBridge does not intentionally request or require the submission of Special Category Personal Data (also known as sensitive personal data), including information relating to:

• racial or ethnic origin;
• political opinions;
• religious or philosophical beliefs;
• trade union membership;
• genetic data;
• biometric data used for identification;
• health information;
• information concerning a person’s sex life; or
• sexual orientation.

Customers should avoid uploading Special Category Personal Data into the Services unless they have an appropriate lawful basis to do so and such processing is necessary for their intended use of the Services.

Where such information is inadvertently submitted, PartnerBridge will process it only to the extent necessary to provide the Services and in accordance with applicable law.

7.12Information We Do Not Intentionally Collect

PartnerBridge is designed primarily for business users and business information.

We do not intentionally collect:

• personal data relating to children;
• unnecessary personal information;
• personal information unrelated to the Services;
• financial account credentials;
• payment card information (where payment processing is provided by third-party payment providers); or
• information collected through unlawful means.

If we become aware that information has been collected inadvertently or in error, we will take reasonable steps to delete or correct that information where appropriate.

How We Use Personal Data

PartnerBridge processes personal data only where we have a lawful basis to do so and only for legitimate business purposes consistent with this Privacy Policy.

The way in which we use personal data depends on the nature of your relationship with PartnerBridge, the Services you use and the information you choose to provide.

8.1Providing the Services

We use personal data to provide, operate and maintain the Services requested by our customers and authorised users.

This includes:

• creating and managing customer accounts;
• authenticating users;
• providing access to the Services;
• processing Customer Content;
• analysing uploaded business information;
• generating reports and evidence;
• delivering technology partnership analysis;
• supporting customer workflows;
• maintaining customer environments;
• enabling APIs and integrations;
• managing subscriptions and licences; and
• providing customer-requested functionality.

Lawful Basis

• Performance of a Contract
• Legitimate Interests (where applicable)

8.2Operating the Platform

We process personal data to ensure the ongoing operation, reliability and security of our Services.

This includes:

• maintaining platform availability;
• monitoring system performance;
• troubleshooting technical issues;
• maintaining infrastructure;
• managing backups;
• identifying software defects;
• improving reliability;
• preventing abuse of the Services; and
• ensuring business continuity.

Lawful Basis

• Legitimate Interests
• Performance of a Contract

8.3Customer Support

We use personal data to respond to enquiries and provide customer support.

This includes:

• responding to support requests;
• investigating reported issues;
• resolving technical problems;
• communicating service updates;
• administering customer accounts;
• providing onboarding assistance;
• delivering customer success services; and
• responding to feedback.

Lawful Basis

• Performance of a Contract
• Legitimate Interests

8.4Product Improvement

We continually improve the functionality, usability and performance of our Services.

Personal data may be processed to:

• understand how the Services are used;
• improve user experience;
• identify frequently used features;
• detect usability issues;
• improve accessibility;
• optimise workflows;
• improve platform performance;
• evaluate new functionality;
• develop new products and services; and
• enhance the quality of AI-assisted analysis.

Where practical, we seek to use aggregated, anonymised or pseudonymised information for product improvement activities.

Lawful Basis

• Legitimate Interests

8.5Business Intelligence and Technology Partnership Analysis

PartnerBridge provides software that assists organisations in evaluating technology partnerships using structured evidence and commercial analysis.

To deliver this functionality we may process:

• Customer Content;
• customer-provided business information;
• publicly available commercial information;
• technology ecosystem information;
• organisational information;
• partnership information; and
• evidence generated through our analysis processes.

Our analysis is designed to assist customers in evaluating commercial relationships between organisations rather than evaluating identifiable individuals.

Where personal data is incidentally included within Customer Content, it is processed solely as necessary to provide the Services requested by the customer.

Lawful Basis

• Performance of a Contract
• Legitimate Interests

8.6Artificial Intelligence-Assisted Processing

Certain PartnerBridge Services incorporate artificial intelligence technologies to assist customers in analysing business information.

AI-assisted processing may include:

• summarising information;
• identifying themes;
• classifying evidence;
• structuring business information;
• generating draft analyses;
• identifying potential technology relationships;
• highlighting relevant evidence;
• assisting with customer workflows; and
• improving search and discovery within the Services.

Artificial intelligence is used to assist users rather than replace human decision-making.

Unless explicitly stated otherwise, AI-generated outputs are intended to support business decision-making and should be reviewed by appropriately authorised users before being relied upon.

PartnerBridge does not use Customer Content or customer-uploaded documents to train publicly available or shared foundation AI models. Customer Content is processed solely for the purpose of providing the Services requested by the customer.

Lawful Basis

• Performance of a Contract
• Legitimate Interests

8.7Marketing Communications

Where permitted by law, we may use personal data to communicate information about:

• PartnerBridge products;
• product updates;
• new functionality;
• webinars;
• events;
• newsletters;
• educational resources;
• research publications;
• customer stories; and
• other business communications.

Marketing communications are sent only where:

• you have provided your consent;
• you have requested information from us; or
• we are otherwise permitted to contact you under applicable law.

You may unsubscribe from marketing communications at any time.

Operational communications relating to customer accounts or the provision of the Services may continue where necessary.

Lawful Basis

• Consent
• Legitimate Interests

8.8Sales and Customer Relationship Management

We process personal data to manage our relationships with prospective and existing customers.

This may include:

• responding to enquiries;
• arranging demonstrations;
• preparing quotations;
• managing opportunities;
• maintaining customer records;
• recording business interactions;
• managing contracts;
• providing customer success activities; and
• administering ongoing commercial relationships.

Lawful Basis

• Legitimate Interests
• Performance of a Contract

8.9Security and Fraud Prevention

Protecting our customers and Services requires us to process certain personal data.

This includes:

• authenticating users;
• monitoring access;
• detecting suspicious activity;
• preventing unauthorised access;
• investigating security incidents;
• maintaining audit logs;
• protecting customer data;
• preventing fraud; and
• enforcing acceptable use requirements.

Lawful Basis

• Legitimate Interests
• Legal Obligation (where applicable)

In the event of a personal data breach, PartnerBridge maintains documented incident response procedures and will notify affected individuals and competent supervisory authorities where required by applicable law.

8.10Legal and Regulatory Compliance

We may process personal data where necessary to comply with applicable legal obligations.

This may include:

• complying with court orders;
• responding to lawful requests from regulators;
• complying with taxation requirements;
• meeting accounting obligations;
• responding to law enforcement requests where legally required;
• protecting legal rights;
• enforcing contracts; and
• establishing, exercising or defending legal claims.

Lawful Basis

• Legal Obligation
• Legitimate Interests

Our Lawful Bases for Processing

Under UK GDPR, every processing activity must have an appropriate lawful basis.

Depending upon the circumstances, PartnerBridge relies on one or more of the following lawful bases.

Performance of a Contract

Where processing is necessary to provide the Services requested by a customer, fulfil contractual obligations or take steps prior to entering into a contract.

Examples include:

• creating accounts;
• providing access to the Services;
• processing Customer Content;
• generating reports;
• providing customer support; and
• administering subscriptions.

Legitimate Interests

We process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by the rights and freedoms of individuals.

Examples include:

• improving the Services;
• protecting platform security;
• preventing fraud;
• maintaining system reliability;
• responding to enquiries;
• developing new functionality;
• analysing product usage; and
• administering our business.

Where we rely on legitimate interests, we consider the potential impact on individuals and implement appropriate safeguards to protect personal data.

Consent

In certain circumstances we rely upon your consent.

This may include:

• marketing communications;
• optional cookies and analytics technologies; and
• other processing activities where consent is required by law.

Where processing is based upon consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Legal Obligation

We process personal data where necessary to comply with legal or regulatory obligations.

Examples include:

• taxation;
• financial reporting;
• responding to lawful requests from public authorities;
• complying with applicable legislation; and
• maintaining records required by law.

Automated Decision-Making

PartnerBridge uses automation and artificial intelligence to assist with analysing business information, organising evidence and supporting customer workflows.

However, PartnerBridge does not make decisions that produce legal effects or similarly significant effects concerning individuals solely by means of automated processing within the meaning of Article 22 of the UK GDPR.

Our Services are designed to support informed business decision-making by customers rather than replace human judgement.

Where AI-assisted functionality is used, it forms one component of a broader analytical process and should be reviewed by appropriately authorised users before significant commercial decisions are made.

Sharing Personal Data

PartnerBridge does not sell personal data.

PartnerBridge does not sell or share personal information for cross-context behavioural advertising.

We do not disclose personal data to third parties except where necessary to provide the Services, operate our business, comply with legal obligations or where you have otherwise authorised us to do so.

Where personal data is shared with third parties, we seek to ensure that appropriate contractual, technical and organisational safeguards are in place.

11.1Service Providers

We engage carefully selected third-party service providers to support the operation of our business and the delivery of the Services.

Depending upon the Services used, these providers may process personal data on our behalf.

Our current categories of service providers include:

These providers process personal data only for authorised purposes and under contractual arrangements designed to protect personal data in accordance with applicable law.

PartnerBridge does not permit these providers to use Customer Content for their own independent commercial purposes where such use would be inconsistent with our contractual commitments or applicable data protection law.

We may update our service providers from time to time. The current list of subprocessors is reflected in this Privacy Policy or otherwise made available to customers upon request.

11.1ACategories of Recipients

Depending on the Services used, personal data may be disclosed to the following categories of recipients where necessary:

• cloud hosting and infrastructure providers;
• analytics providers;
• customer relationship management providers;
• artificial intelligence service providers;
• professional advisers;
• payment providers;
• regulatory authorities where legally required; and
• law enforcement agencies where disclosure is required by applicable law.

11.2Customer Instructions

Where PartnerBridge acts as a Data Processor, we process Customer Content solely in accordance with:

• our agreements with the customer;
• documented customer instructions;
• applicable law; and
• our obligations as a service provider.

We do not access Customer Content except where reasonably necessary to:

• provide the Services;
• respond to customer requests;
• investigate technical issues;
• maintain platform security;
• comply with legal obligations; or
• protect the integrity and availability of the Services.

11.3Professional Advisers

We may disclose personal data where reasonably necessary to our professional advisers, including:

• legal advisers;
• accountants;
• auditors;
• insurers; and
• other professional consultants,

where such disclosure is necessary for legitimate business purposes or to comply with legal obligations.

Professional advisers are required to maintain appropriate confidentiality obligations.

11.4Legal Requirements

We may disclose personal data where we reasonably believe disclosure is necessary to:

• comply with applicable law;
• respond to lawful requests from regulators or public authorities;
• comply with court orders;
• protect the rights, property or safety of PartnerBridge, our customers or others;
• investigate suspected unlawful activity;
• prevent fraud;
• enforce our agreements; or
• establish, exercise or defend legal claims.

Where legally permitted, we will seek to limit such disclosures to the minimum information reasonably necessary.

11.5Business Transactions

If PartnerBridge undergoes a merger, acquisition, investment, restructuring, insolvency, sale of assets or similar corporate transaction, personal data may be transferred as part of that transaction.

Any successor organisation will remain subject to obligations that are substantially consistent with this Privacy Policy unless individuals are notified otherwise in accordance with applicable law.

International Transfers

PartnerBridge is established in the United Kingdom.

Some of our service providers may process personal data outside the United Kingdom.

Where personal data is transferred internationally, we implement appropriate safeguards designed to ensure that personal data continues to receive an appropriate level of protection.

Depending upon the destination country, these safeguards may include:

• UK Adequacy Regulations;
• the UK International Data Transfer Agreement (IDTA);
• the UK Addendum to the European Commission’s Standard Contractual Clauses;
• contractual safeguards approved under applicable law;
• recognised certification mechanisms; or
• other legally recognised transfer mechanisms.

Where required, PartnerBridge undertakes appropriate transfer risk assessments before transferring personal data internationally.

Data Retention

PartnerBridge retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, contractual, accounting and security requirements.

Retention periods vary depending upon the nature of the information and the purposes for which it is processed.

Our standard retention periods include:

Where personal data is no longer required, we will securely delete, anonymise or otherwise dispose of it in accordance with our internal retention procedures.

Upon verified customer request or account termination, Customer Content will be deleted or returned in accordance with applicable contractual commitments unless retention is required by law.

Information Security

Protecting customer information is fundamental to the operation of PartnerBridge.

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access.

Our security measures include, where appropriate:

Technical Controls

• encryption of data in transit using industry-standard protocols;
• authentication and access management;
• role-based access controls;
• least-privilege access principles;
• secure credential management;
• audit logging;
• network security controls;
• vulnerability management;
• secure software development practices; and
• regular software updates.

Organisational Controls

• confidentiality obligations for personnel;
• controlled access to customer information;
• security awareness and training;
• documented security procedures;
• incident management processes; and
• periodic review of security practices.

Operational Controls

We also implement operational processes designed to:

• maintain platform availability;
• protect the integrity of Customer Content;
• detect unauthorised activity;
• investigate security incidents;
• support disaster recovery;
• maintain business continuity; and
• reduce operational risk.

While we employ appropriate safeguards, no method of transmitting information over the Internet or storing electronic information can be guaranteed to be completely secure.

Accordingly, while we strive to protect personal data, we cannot guarantee absolute security.

Customer Content is logically segregated so that authorised users may access only the information associated with their own customer account, except where explicit sharing functionality is provided by the customer.

Confidentiality of Customer Content

PartnerBridge recognises that many customers upload commercially sensitive information into the Services.

Unless required by law or authorised by the customer, PartnerBridge does not use Customer Content for purposes unrelated to providing the Services.

Customer Content remains confidential and is processed solely to:

• provide the Services;
• perform customer-requested analysis;
• generate customer reports;
• maintain platform functionality;
• provide customer support;
• improve platform reliability using aggregated or de-identified operational information where appropriate; and
• comply with legal obligations.

PartnerBridge does not use Customer Content or customer-uploaded documents to train publicly available or shared foundation AI models. Customer Content is processed solely for the purpose of providing the Services requested by the customer.

Where AI-assisted functionality is used, Customer Content is processed only to provide the requested functionality and in accordance with applicable contractual and legal obligations.

Your Rights

Subject to applicable data protection law, individuals whose personal data we process may have the following rights.

These rights are not absolute and may be subject to legal exemptions or limitations.

Depending on the circumstances, you may have the right to:

• request confirmation that we process your personal data;
• obtain access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain types of processing;
• request portability of personal data provided by you where processing is based on consent or contract and carried out by automated means;
• withdraw consent where processing is based upon consent; and
• request human review of certain automated decisions where required by applicable law.

PartnerBridge does not currently make decisions that produce legal or similarly significant effects based solely on automated processing.

To exercise any of these rights, please contact us using the details provided at the end of this Privacy Policy.

We may request reasonable information to verify your identity before responding to any request. Where permitted by law, we may refuse requests that are manifestly unfounded, excessive or repetitive.

We aim to respond to valid requests within one month, although this period may be extended where permitted by law for particularly complex requests.

If California privacy laws apply to the processing of your personal information, you may have additional rights, including the right to know, delete, correct and obtain a copy of your personal information, subject to applicable legal exceptions.

PartnerBridge does not sell personal information and does not share personal information for cross-context behavioural advertising as those terms are defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

Complaints

If you believe we have not handled your personal data appropriately, we encourage you to contact us first so that we have an opportunity to resolve your concerns.

If you remain dissatisfied, you have the right to lodge a complaint with the UK Information Commissioner’s Office (“ICO”).

Information about making a complaint is available from the ICO.

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

United Kingdom

Website:

https://ico.org.uk

Telephone:

0303 123 1113

Making a complaint to the ICO does not affect any other legal rights or remedies that may be available to you.

Cookies and Similar Technologies

PartnerBridge uses cookies and similar technologies to operate, secure and improve our website and Services.

Cookies help us:

• remember user preferences;
• maintain authenticated sessions;
• understand website usage;
• improve platform performance;
• measure the effectiveness of our marketing activities; and
• enhance the user experience.

Where required by law, we request consent before placing non-essential cookies on your device.

Further information about the cookies we use, their purposes and how you can manage your preferences is available in our Cookie Policy.

You can also manage cookies through your browser settings, although disabling certain cookies may affect the functionality of the Services.

Third-Party Websites

Our website and Services may contain links to websites, products or services operated by third parties.

PartnerBridge is not responsible for the privacy practices, content or security of third-party websites.

We encourage users to review the privacy notices of any third-party services they choose to access.

Children’s Privacy

PartnerBridge’s Services are designed for businesses and professional users.

Our Services are not directed towards children.

We do not knowingly collect personal data from individuals under the age of 13.

If we become aware that we have inadvertently collected personal data relating to a child without appropriate legal authority, we will take reasonable steps to delete that information as soon as practicable.

Parents or guardians who believe that a child has provided personal data to PartnerBridge should contact us immediately.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes in applicable law;
• changes to our Services;
• changes to our business operations;
• new technologies;
• new service providers;
• security improvements; or
• other operational requirements.

When material changes are made, we will update the “Last Updated” date at the beginning of this Privacy Policy.

Where required by law, we will provide additional notice of significant changes.

Continued use of the Services following publication of an updated Privacy Policy constitutes acknowledgement of the revised policy to the extent permitted by applicable law.

Contact Us

If you have any questions about this Privacy Policy, our privacy practices or the processing of personal data, please contact us.

PartnerBridge Ltd

Clyde Offices, 2nd Floor

48 West George Street

Glasgow

G2 1BP

United Kingdom

Company Number: SC856320

ICO Registration Number: ZB944221

Privacy Email:

privacy@partnerbridge.io

General Enquiries:

jon@partnerbridge.io

Version Information

Privacy Policy Version: 1.0

Effective Date: 5 August 2026

Last Updated: 5 August 2026

This Privacy Policy applies to all PartnerBridge websites, products and services unless a separate privacy notice expressly states otherwise.