Peak Pivot Partners Ltd complies with the UK General Data Protection Regulation as enacted by the Data Protection Act 2018. We are registered with the ICO, maintain a lawful basis for all personal data processing, and honour all data subject rights. We review our privacy practices annually.
Where we work with EU clients or process the personal data of EU data subjects, we comply with EU GDPR (Regulation 2016/679). Data transfers between the UK and EEA are governed by Standard Contractual Clauses where required. We do not transfer personal data outside the UK/EEA without appropriate safeguards.
We are registered with the UK Information Commissioner's Office as required under UK GDPR. Registration is renewed annually. Registered with the Information Commissioner's Office. Verify at ico.org.uk.
Where PPP transfers personal data of EU data subjects between the UK and EEA, we rely on Standard Contractual Clauses as the lawful transfer mechanism post-Brexit.
Where PPP processes personal data as a Data Processor on behalf of a client, we enter into a Data Processing Agreement that governs the nature, purpose, duration, and security of that processing. Our DPA template is available on request.
All client engagements are conducted under confidentiality obligations included as standard in our Terms of Engagement. Mutual NDAs are available on request prior to any scoping conversation.