Draft for review. This notice has not been approved yet.
Privacy notice
10 November 2026
This notice explains what Pentalore Limited does with personal data when you visit this site or send us a message through it.
Who we are
Pentalore Limited is a company based in Ireland and is the controller of the personal data described here.
You can reach us about anything in this notice at info@pentalore.com.
What we collect when you send the form
When you send the contact form we receive what you type into it:
- Your name
- Your work email address
- Your company name, if you give it
- Your message, if you write one
With it we record how you reached the page: the campaign details on the link you followed (UTM parameters and advertising click identifiers), the name of the site that linked to us, the page you landed on and the time you sent the form.
We ask you not to include sensitive personal information in your message.
What happens when you only visit
The site sets no cookies and loads no analytics or advertising tags. Nothing is stored in your browser.
Our hosting provider, Cloudflare, processes your IP address and basic technical details of your browser in order to deliver the pages and keep the site secure.
The page with the contact form loads a security check, Cloudflare Turnstile, which looks at technical signals from your browser to tell people from automated traffic.
Why we use it
We use the details you send us for three things:
- To reply to your message and, if you ask us to, to discuss working together. You give your consent to this when you send the form.
- To understand which campaigns and pages bring enquiries, so we know what works. We rely on our legitimate interest in running our marketing sensibly.
- To decide how quickly to follow up. We look up business information about your company and your role, such as industry, company size and job title, from business data providers, and score the enquiry against the kind of customer we serve. No decision with legal effect is made automatically; a person reads every enquiry we act on. We rely on our legitimate interest in answering the right enquiries first.
We do not sell your details and we do not add you to a newsletter or a marketing list because you sent the form.
Who handles it for us
We use these providers to run the site and handle enquiries. Each receives only what it needs for its job:
- Cloudflare: hosting, the queue that holds your submission and the security check
- Cargo: the workflow that files your enquiry
- Attio: our customer relationship system, where your enquiry is kept
- People Data Labs, Company Enrich and Waterfall: business data providers that look up your company and role from your email address and its domain
- Google Cloud: our reporting database, held in the European Union
- Slack: the internal message that tells us an enquiry has arrived
Some of these providers are based outside the European Economic Area.
How long we keep it
We keep your enquiry in our customer relationship system while we are in contact with you. You can ask us to delete it at any time.
A copy of the enquiry is also kept in our reporting database so we can measure results over time.
Your rights
Under data protection law you can ask us for a copy of your personal data, ask us to correct or delete it, ask us to restrict how we use it, object to our use of it and ask for it in a portable format. Where we rely on your consent you can withdraw it at any time.
To use any of these rights, email info@pentalore.com. We will answer within one month.
You also have the right to complain to the Data Protection Commission in Ireland, at dataprotection.ie.
Changes to this notice
If we change how we handle personal data we will update this page and the date at the top.
Review notes, removed before launch
- Company details: add the registered number and registered office of Pentalore Limited (open decision D4).
- Legal bases: confirm consent for replying and legitimate interests for campaign measurement and for the company and role lookup, and whether a legitimate interests assessment is on file for the lookup.
- Transfers: confirm the safeguard for each provider outside the EEA (for example the EU standard contractual clauses or the EU and US Data Privacy Framework) and state it in the section on providers. The notice does not claim one yet.
- Provider contracts: confirm a data processing agreement is in place with each provider listed.
- Retention: set the period an enquiry is kept in Attio after contact ends. Today nothing deletes it. Raw copies in the reporting database expire after 365 days, but the event history built from them is kept without limit, which the notice should either state or the build should change.
- Turnstile: confirm the description of the security check against Cloudflare's current terms.
- Outreach: the notice says a form enquiry is not added to a marketing list. The Engager Pipeline planned for Phase 2 slice 6 picks qualified leads for outreach sequences, so either form enquiries are excluded there or this sentence changes before that slice ships.