Last updated: 12 October 2026
Who we are
Pivoton Ltd (“Pivoton”, “we”) is a recruitment business that finds technical and commercial talent for companies in robotics, space, defence, manufacturing and future mobility across the UK, EU and US. We are the data controller for the personal data described in this policy.
- Registered address: 24 Station Road, Eccles, Manchester, M30 0GA
- ICO registration number: ZB974120
- Contact for privacy questions: dwayne.allen@pivoton.tech
This policy covers candidates, client contacts, and visitors to pivoton.tech.
What personal data we collect
We collect only what we need to match people with roles and to run our business.
| Who | What we hold |
|---|---|
| Candidates | Name, contact details, CV, work history, skills, qualifications, current and expected salary, notice period, right-to-work status, notes and recordings of calls and interviews, and feedback from clients on applications |
| Client and prospect contacts | Name, job title, company, business email and phone, and records of our emails, calls and meetings |
| Website visitors | Pages visited, how you arrived (including campaign tags in links), device and browser type, approximate location, and, if you accept marketing cookies, the company your network belongs to |
We do not ask for special category data such as health, ethnicity or religion. If you choose to share it, for example to request interview adjustments, we use it only for that purpose.
Where we get it
- From you, when you send a CV, speak to us, book a call or fill in a form.
- From professional networks and public sources, such as LinkedIn profiles, company websites and conference speaker lists.
- From business data providers, such as Apollo.io, which supply business contact details.
- From referrals, when someone recommends you to us.
- From our website, through cookies, as explained under Cookies below.
If we collect your details from someone other than you, we tell you within one month of first contacting you, and we link to this policy.
How we use it and why we are allowed to
| What we do | Lawful basis |
|---|---|
| Find and contact candidates about relevant roles | Legitimate interests: running a recruitment business |
| Put you forward to a client for a role | Your agreement to each submission, and taking steps towards an employment contract |
| Contact companies about our search services | Legitimate interests: business-to-business marketing |
| Deliver a search we’ve been hired for, and invoice for it | Contract |
| Check right to work, and keep the records recruitment law requires | Legal obligation |
| Record calls and meetings to keep accurate notes | Legitimate interests; we tell you at the start and you can say no |
| Measure website use and identify visiting companies | UK and European visitors: your consent, given through our cookie banner. Visitors elsewhere: legitimate interests for website statistics, which you can switch off; identifying visiting companies always needs your consent |
We never send your CV to a client without first asking you. You can object to anything based on legitimate interests at any time, and we will stop unless the law requires otherwise.
Who we share it with
We share candidate details with a client only after you agree to that submission. We never sell personal data.
These service providers process data on our behalf, under contracts that limit them to our instructions:
| Provider | What it does for us |
|---|---|
| Giig | Recruitment CRM: candidate, client and job records |
| Microsoft 365 | Email, calendar, Teams calls and file storage |
| Apollo.io | Business contact data and identifying companies that visit our website |
| Calendly | Booking calls |
| Fathom | Recording and summarising calls |
| Google Analytics | Website traffic statistics |
| Complianz | Cookie consent on our website |
We may also share data with our accountants, lawyers or insurers, or where the law requires it.
International transfers. Some of these providers store data in the United States. Where they do, we rely on the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum to protect it.
How long we keep it
| Data | How long |
|---|---|
| Candidate records | While you are actively looking for roles with us, then deleted 2 years after our last contact with you |
| Records of placements and right-to-work checks | 6 years after the placement, as recruitment and tax law require |
| Client and prospect contacts | While we work together or stay in touch, then deleted 2 years after our last contact; invoicing records are kept 6 years for tax |
| Call recordings | Until our notes from the call are written up, and no longer than 12 months |
| Website analytics | 14 months |
You can ask us to delete your data sooner at any time.
Your rights
You can ask us, free of charge, to:
- give you a copy of the data we hold about you
- correct anything that is wrong
- delete your data
- restrict or stop how we use it, including all direct marketing
- send your data to you or another organisation in a portable format
- withdraw consent you have given, such as for cookies
Email dwayne.allen@pivoton.tech and we will reply within one month.
If you’re unhappy with how we handle your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Cookies and changes to this policy
If you visit from the UK or Europe, our website asks before using analytics or marketing cookies, and none load until you accept. If you visit from elsewhere, Google Analytics runs when the page loads, and you can switch it off at any time through the Cookie settings link in the footer. Marketing cookies, including Apollo, always wait for your consent wherever you are. You can change your choice at any time through Cookie settings. Our Cookie Policy lists each cookie and what it does.
We may update this policy when our services or the law change. The date at the top shows when it was last updated.