Privacy Notice
This notice describes the information Pitchtivo processes, why it is used, and the choices and rights available to you. It applies to the Pitchtivo website, app and related services.
Who operates Pitchtivo
Pitchtivo is operated by Tony Silburn-Guy as a sole trader. For privacy requests or questions, email [email protected]. No Data Protection Officer has been appointed.
Information Pitchtivo handles
- Account and security: name, email address, password hash, account status, sign-in/session security data, multi-factor authentication setup and recovery-code hashes.
- Business workspace: business/contact and public-page details, menu, events, sales, expenses, stock, staff and shift information, reviews, recipes, settings and food-safety checklists and records.
- Uploaded material: business and menu photos, receipt branding, and documents the trader uploads for food-safety or inspection records.
- Customer orders: where a trader enables ordering, customer name, contact details, order contents, collection time and any message the customer submits.
- Service operations: aggregate page and app-section view counts, administrator actions, technical error/security events and information needed to deliver an integration a user chooses to connect.
- Contact enquiries: name, email, topic and message submitted through the contact form. The form emails the Pitchtivo contact mailbox and does not save the message as an app workspace record.
Roles for trader customer information
For a trader’s own customer orders and business records, the trader normally decides why and how those details are used and is the controller. Pitchtivo processes those records to provide the trader’s workspace and is intended to act as processor for that activity. Pitchtivo separately acts as controller for its own account administration, service security, support and aggregate service analytics. The parties should put suitable processor terms in place before using the service for personal data. A draft data-processing addendum is provided for review; it requires verification and agreement and does not itself establish compliance.
Purposes and legal bases
Account and workspace data are used to provide the service requested and operate the account (contract where applicable). Security, abuse prevention, service reliability and support use limited information where necessary for legitimate interests. Legal or accounting records may be retained where required by law. We will explain and obtain consent where a feature requires it. Traders are responsible for choosing and documenting their own lawful basis and giving their customers appropriate privacy information.
Service analytics and technical logs
The app records aggregate public website page views, public trader-page views associated with a business workspace, and signed-in app section views. These counters count page loads, not unique people. The analytics code does not assign a visitor ID, store visitor IP addresses, fingerprint devices or run advertising trackers. Counts start when the relevant analytics code is deployed; they are not historical. The web host may separately process standard access/security logs; Pitchtivo must confirm the host’s actual log fields and retention with the provider.
Owner-only administration shows account names and sign-in email addresses, workspace names, account status, join date, last recorded sign-in and aggregate usage counts. It can also perform account actions, which are recorded in an administration audit trail. Access is restricted to the designated platform-owner account and protected by multi-factor authentication.
Messages and orders
Contact form messages are sent by email to [email protected]. Avoid including payment-card data, passwords or sensitive personal information. For trader orders, Pitchtivo stores the details submitted by the customer so the trader can fulfil the order. Traders should limit access to staff who need it and keep order information only as long as needed for the order, legal requirements and legitimate dispute handling.
AI and connected services
When a user requests an AI draft, the prompt and selected, bounded workspace context are sent to OpenAI through its API. Do not include passwords, card security data, special-category data or unnecessary customer details. Review generated material before use. The user-triggered AI feature does not make decisions about individuals.
When a user requests relevant features, Pitchtivo may send a postcode to Postcodes.io, a business name or postcode to the Food Standards Agency search, and event location details to MET Norway for forecasts. Users may choose to connect payment/POS providers such as Square or PayPal for available data imports. Push notifications use browser/device push services; the stored subscription endpoint and encryption keys are needed to deliver alerts, and alert payloads can include an order reference and total. Users can disable push alerts in the app or browser. Current feature availability and provider setup can vary.
Pitchtivo’s pages load typefaces from Google Fonts. A browser loading those fonts connects to Google and may disclose technical request information such as its IP address to that provider. The app also loads its first-party service worker, which caches static app resources and an offline page, but not API responses or uploaded records.
Cookies and browser storage
The signed-in service uses a necessary security session cookie. The app does not persist the workspace data in browser local storage; it retrieves workspace data from the authenticated service. The app removes a legacy browser key left by an earlier version. Push subscriptions are stored only when a user enables push alerts. There are no advertising cookies in the reviewed code.
Service providers and international transfers
Pitchtivo is hosted with the web-hosting provider configured for the service (currently FastHosts). Google Fonts, OpenAI, Postcodes.io, the Food Standards Agency, MET Norway, payment/POS providers and browser push services receive data only as needed for the selected feature. Provider locations, retention, security terms and transfer safeguards must be confirmed against current contracts and configuration; this notice does not assume a particular country or safeguard. Provider terms also apply to their own processing.
Retention, access and deletion
Pitchtivo currently has no complete self-service account-deletion workflow or fully documented retention schedule. Until those are implemented, send requests for access, correction, restriction, objection or deletion to [email protected]. We will verify the requester, assess the request and applicable legal obligations, and respond. Backups, email copies and provider logs may persist until their documented retention periods expire; those periods are being confirmed. Traders should delete or correct customer records they no longer need and may contact us for assistance.
Your rights and complaints
Depending on the circumstances, UK data protection law may provide rights to access, correct, erase, restrict or move personal data, and to object to some processing. Contact [email protected]. You may complain to the Information Commissioner’s Office.
Security and incidents
Pitchtivo uses technical and organisational safeguards, but no internet service can promise absolute security. If you suspect an account or data incident, email [email protected] promptly. We will investigate, contain and assess it, and make notifications required by law. Traders remain responsible for assessing and responding to incidents involving their own customers’ data, with Pitchtivo assistance under agreed processor terms.
Changes
This notice will be revised when processing, providers or features materially change. Check this page for the current version.