PENSIGHT PRIVACY POLICY
Last updated 2nd October, 2025
This Privacy Policy describes how your personal information is collected, used, and shared when you visit Pensight or use the services on offered via Pensight (https://www.pensight.com, the “Site”, "Pensight", "we", "us", "our"). Pensight offers a platform that allows creators ("Experts") to offer digital products, content, and services ("Expert Services") and allows their Clients to purchase such services using Pensight platform (collectively, the "Service").
PERSONAL INFORMATION WE COLLECT
When you visit and interact with the Site, we collect the following categories of personal information from you:
- Account information: your name, email address, phone number, profile picture, account user name (for Experts), password, and any other information you choose to add on your Pensight profile page. When you contact us, you also provide us with the content of your communications.
- Communications information: when you contact us with any questions or queries we may collect information about this communication. Providing this information is voluntary for you.
- Financial information: we use Stripe (Stripe, Inc.) as our payments processor, which collects the financial and personal information necessary to process payments through Pensight. Your personal and financial data is processed pursuant to Stripe's terms of service and privacy policy in addition to this Privacy Policy.
- Commercial information: we may collect information on pages you visit, products and services you look at or purchase using the Service.
- Social media information: we may collect information that's available to us when you interact with our Social Media Pages on Instagram, Tiktok, Facebook, Youtube. This data may include your contact details, profile information, posts and content, friend and follower lists and aggregate information about the use of our Social Media Pages.
When you visit the Site, we automatically collect certain information related to your visit and use of the Site. For example this may include information about your device, including information about your web browser, IP address, time zone. Additionally, as you browse the Site, we collect information about the individual Site pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device and Activity Information.” The following information is logged in our system:
- Device and log information: we may collect information that your browser automatically sends when you visit the Site. Such information includes your IP address, browser model, device model, operating system and settings, the time of your use, and how you interacted with the Site.
- Usage information: we may collect data on how you use the Site, including the pages you visit, features you use, buttons and links you click, and other actions you take including the time of the activities.
- Location information: we may collect data about your location when you use the Site. Your IP address may be used to determine your location or your device may share such information. The specific details of information collected will depend on your internet connection method and the device used.
- Email open and click information: we may collect information about email opens, email links clicks, the time of opens and clicks, and your IP address using pixels in our emails.
HOW WE USE PERSONAL INFORMATION
We rely on the following lawful bases under GDPR: (a) contract – to provide your account, bookings and payments; (b) legitimate interests – to improve and secure the Service, fraud detection, analytics, certain marketing; (c) consent – for marketing emails and non-essential cookies; (d) legal obligations – tax, accounting, and regulatory compliance.
We may collect, hold, use, and disclose information for the following purposes:
- To operate and deliver the Service as per our contractual obligations or when it is in our legitimate business interests. Including to provide, maintain, operate and secure the Service, provide users with the platform features and enable their usage, provide support and troubleshooting, send important messages and updates about the product usage and administrative matters.
- To secure, improve, monitor, and personalise the Service. Our legitimate business interests are to continuously improve the Service and keep it safe and secure, which may include detecting threats, fraud, or other malicious activities, making the Service more personalised to you and your usage.
- To contacts and communicate with users about their accounts, transactions, and usage of the Service.
- To develop our products. It is in our legitimate business interests to use personal information to develop and improve the Service. This may include aggregating personal information in an anonymised de-personified way to analyse it or share with third parties where it may improve the Service or promote it.
- To comply with our legal obligations, defend Pensight against any claims, and resolve any disputes that we may have. This may include complying with applicable laws, lawful legal processes and requests, protect Pensight's or users' rights, privacy, safety, or property. Personal data may also be used for auditing or compliance with internal policies, legal or contractual requirements, enforcing our terms of service, or investigating malicious activities.
- To facilitate corporate financing, M&A, or other business transactions. When it is in our legitimate business interests we may use personal data when carrying out a business deal. These deals may include any financing, merger, acquisition, or any deal where part or all of our business assets being acquired or transferred.
- To facilitate marketing. Pensight or its marketing and advertising service providers may use personal information to tell you about features, products, or services that may be of interest to you. This may be done via direct marketing, for example sending you special offers via email or phone number you provided. You can unsubscribe from marketing related communications using the direct unsubscribe links in the emails we send or by contacting us. When you unsubscribe, you will no longer receive marketing messages but you will continue to receive administrative and other important communication. Marketing may also be done via third-party services like Meta or TikTok to show our ads via their platforms, and information about our users may be shared with these parties to facilitate it.
We undertake marketing on the basis of our legitimate business interests. Where your consent is required, you may withdraw it at any time.
Google Data:
If you sign in via Google:
Collection: We use data from your Google profile such as email address or full name to create your Pensight Profile and verify email ownership.
Sharing: Pensight can share this data with Auth0 Inc for authentication purposes.
If you link your Google Calendar:
Collection: We use data from your Google calendar to calculate and show your availability, and, if given separate permission, create events in your calendar for bookings via Pensight.
Sharing: Pensight shows your free/busy status derived from your calendar data on your profile. It does not share any other calendar-related data.
SHARING YOUR PERSONAL INFORMATION
In certain circumstances, we share your Personal Information with third parties without further notice, unless required by law. These third parties may include:
- Third party service providers for the purpose of enabling them to assist us with business operations including (without limitation) IT service providers, data storage, hosting and server providers, ad networks, email service providers, payment processors, analytics, error loggers, debt collectors, maintenance or problem-solving providers, marketing or advertising providers.
- Professional advisory service providers like accounting service providers, lawyers, auditors, where it is necessary to facilitate the services they provide us.
- Business transaction parties if we're involved in transactions like mergers, acquisitions, bankruptcy, sale of assets (full or partial). Your personal information may be shared with counterparties and parties assisting the transactions during the due diligence process.
- Legal parties like courts, tribunals, regulatory authorities and law enforcement officers, as required by law, good faith belief that such action is necessary, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights.
- Third parties to process aggregated data. We may share aggregated personal data like user statistics with third parties or business partners for describing or promoting our Service for R&D purposes.
We maintain an up-to-date list of our subprocessors (including Stripe, AWS, Google, and other providers we rely on for hosting, payments, authentication, analytics, and communication).
PERSONAL INFORMATION YOU MAKE AVAILABLE
When you use the service as a Client, certain information is provided to Experts. When you make purchases, sign up for free offers, or interact with Expert pages in other ways, Expert will receive information you provide including your email address, name, form field answers, messages you send. Experts may send their own marketing emails to you, which you can unsubscribe from using the links in these marketing emails. We are not responsible for the actions Experts or downstream recipients of your information take. Experts may have their own Terms and Privacy Policy which you should review before making a purchase from them.
YOUR RIGHTS
You have the right to access personal information we hold about you and depending on where you're based, and under the applicable law and subject to limitations in such law, you also have the right to:
- correct the personal information we hold about you
- update the personal information we hold about you
- request deletion of personal information we hold about you
- request to receive personal information we hold about you in a structured machine readable format
- opt out of personal information sharing. In the previous sections on how we use and share your personal information we describe how we share personal information with third party marketing and advertising partners. Our disclosure of this information can be interpreted as "sale" or "sharing" of personal information or "targeted advertising" under applicable law. You can opt out of it by sending a request using the email below
- object to "profiling", as described in GDPR, or to decisions based solely on automated processing that have legal or similarly significant effects on you. However, we do not carry out profiling or automated decision-making of this kind
- object to how we are using your personal information
- withdraw your consent to us handling your personal information
- Lodge a complaint with your local supervisory authority.
You can send your requests to help@pensight.com.
Please note that before we can respond to your request to exercise these rights, we may ask you to verify your identity. Depending on your place of residence, you may also have the right to designate an authorized agent to make requests on your behalf. In such cases, we will require the authorized agent to provide proof of both their identity and their authority, in line with applicable laws. You have the right to exercise these rights without facing discrimination. However, there may be circumstances where we are legally permitted to deny your request, and if so, we will explain the reasons for our decision.
Limits on your privacy rights and choices
In certain situations, your privacy choices may be limited. For example, we may not be able to fulfill a request if doing so would interfere with the rights of others, prevent us from delivering a service you have requested, or restrict our ability to comply with legal obligations or enforce our rights.
Opting out of direct marketing
You may opt out of receiving marketing communications from us at any time by following the unsubscribe or opt-out instructions included in those messages. Please note that you will still receive non-marketing communications from us, such as service-related notices or updates to this Privacy Policy.
Where required by law, we only place non-essential cookies (such as analytics or marketing cookies) if you have provided consent through our cookie banner. You can withdraw your consent at any time in your cookie settings.
Limiting online tracking
There are several ways you can reduce or block online tracking. Please note that the tools listed below are offered by third parties, not by us, and we cannot guarantee their effectiveness:
- Blocking cookies on your device. To learn more about cookies, including how to view, manage, or delete them, visit www.allaboutcookies.org. You can also find guidance for specific browsers here: Firefox, Chrome, Microsoft Edge, Safari (Mac), Safari (iOS).
- Using privacy-focused browsers or plug-ins. You can use browsers with built-in privacy features (such as Brave) or install extensions like Privacy Badger, Ghostery, or uBlock Origin to block third-party cookies and trackers.
- Opting out of Google Analytics. You can prevent your data from being used by Google Analytics by installing the opt-out browser add-on available at tools.google.com/dlpage/gaoptout.
- Opting out of behavioural advertising. You can opt out of targeted advertising by:
FACEBOOK -https://www.facebook.com/settings/?tab=ads
GOOGLE -https://www.google.com/settings/ads/anonymous
BING -https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
“Do Not Track” signals
Some web browsers offer a “Do Not Track” (“DNT”) setting that allows you to express a privacy preference. At this time, we do not respond to or recognize DNT signals or similar mechanisms sent by browsers. To learn more about “Do Not Track,” please visit www.allaboutdnt.com. For further information about your rights, please see the Contact Us section below.
DATA RETENTION
When you create a profile on the Site, we will maintain your Profile Information for our records unless and until you ask us to delete this information.
We retain personal data only for as long as necessary for the purposes described above:
Profile / account data: kept while your account is active, and deleted within 7 years if your account is inactive, unless you delete your account yourself using the button in Account Settings or request earlier deletion.
Financial / billing records: retained for 7 years to comply with tax and accounting laws.
Analytics and usage logs: retained for up to 24 months, then anonymised or deleted.
Cookies: retained per their category and duration.
DATA SECURITY & BREACH NOTIFICATION
We implement appropriate technical and organisational measures to protect your data (including encryption, access control, and monitoring). If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay.
INTERNATIONAL TRANSFERS
We may transfer your personal data outside the United Kingdom and the European Economic Area (EEA), including to countries such as the United States where some of our subprocessors are located. When we do so, we ensure that appropriate safeguards are in place to protect your data, including:
Relying on adequacy decisions issued by the European Commission or UK Government (where available); and/orUsing the European Commission’s Standard Contractual Clauses (SCCs) together with the UK Addendum, which contractually require our subprocessors to protect your data to EU/UK standards. You may inquire us about the relevant safeguards we use by contacting us.
MINORS
The Site is not intended for individuals under the age of 16. Pensight does not knowingly collect information from people under the age of 16. If you have a reason to believe a person under 16 has provided personal information to Pensight, please inform us and we will endeavour to delete that information.
LIMITS OF OUR POLICY
Our Site may link to external sites that are not operated by us. We have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.
CHANGES
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. By continuing to use our services or by providing us with your personal information after we publish an updated Privacy Policy (or notify you through other appropriate means, where required), you agree to the revised Policy and the practices it describes.
CONTACT US
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at info@pensight.com or by mail using the details provided below:
71-75 Shelton Street, Covent Garden, London, England, WC2 H9JQ
This Privacy Policy describes how your personal information is collected, used, and shared when you visit Pensight or use the services on offered via Pensight (https://www.pensight.com, the “Site”, "Pensight", "we", "us", "our"). Pensight offers a platform that allows creators ("Experts") to offer digital products, content, and services ("Expert Services") and allows their Clients to purchase such services using Pensight platform (collectively, the "Service").
PERSONAL INFORMATION WE COLLECT
When you visit and interact with the Site, we collect the following categories of personal information from you:
- Account information: your name, email address, phone number, profile picture, account user name (for Experts), password, and any other information you choose to add on your Pensight profile page. When you contact us, you also provide us with the content of your communications.
- Communications information: when you contact us with any questions or queries we may collect information about this communication. Providing this information is voluntary for you.
- Financial information: we use Stripe (Stripe, Inc.) as our payments processor, which collects the financial and personal information necessary to process payments through Pensight. Your personal and financial data is processed pursuant to Stripe's terms of service and privacy policy in addition to this Privacy Policy.
- Commercial information: we may collect information on pages you visit, products and services you look at or purchase using the Service.
- Social media information: we may collect information that's available to us when you interact with our Social Media Pages on Instagram, Tiktok, Facebook, Youtube. This data may include your contact details, profile information, posts and content, friend and follower lists and aggregate information about the use of our Social Media Pages.
When you visit the Site, we automatically collect certain information related to your visit and use of the Site. For example this may include information about your device, including information about your web browser, IP address, time zone. Additionally, as you browse the Site, we collect information about the individual Site pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device and Activity Information.” The following information is logged in our system:
- Device and log information: we may collect information that your browser automatically sends when you visit the Site. Such information includes your IP address, browser model, device model, operating system and settings, the time of your use, and how you interacted with the Site.
- Usage information: we may collect data on how you use the Site, including the pages you visit, features you use, buttons and links you click, and other actions you take including the time of the activities.
- Location information: we may collect data about your location when you use the Site. Your IP address may be used to determine your location or your device may share such information. The specific details of information collected will depend on your internet connection method and the device used.
- Email open and click information: we may collect information about email opens, email links clicks, the time of opens and clicks, and your IP address using pixels in our emails.
HOW WE USE PERSONAL INFORMATION
We rely on the following lawful bases under GDPR: (a) contract – to provide your account, bookings and payments; (b) legitimate interests – to improve and secure the Service, fraud detection, analytics, certain marketing; (c) consent – for marketing emails and non-essential cookies; (d) legal obligations – tax, accounting, and regulatory compliance.
We may collect, hold, use, and disclose information for the following purposes:
- To operate and deliver the Service as per our contractual obligations or when it is in our legitimate business interests. Including to provide, maintain, operate and secure the Service, provide users with the platform features and enable their usage, provide support and troubleshooting, send important messages and updates about the product usage and administrative matters.
- To secure, improve, monitor, and personalise the Service. Our legitimate business interests are to continuously improve the Service and keep it safe and secure, which may include detecting threats, fraud, or other malicious activities, making the Service more personalised to you and your usage.
- To contacts and communicate with users about their accounts, transactions, and usage of the Service.
- To develop our products. It is in our legitimate business interests to use personal information to develop and improve the Service. This may include aggregating personal information in an anonymised de-personified way to analyse it or share with third parties where it may improve the Service or promote it.
- To comply with our legal obligations, defend Pensight against any claims, and resolve any disputes that we may have. This may include complying with applicable laws, lawful legal processes and requests, protect Pensight's or users' rights, privacy, safety, or property. Personal data may also be used for auditing or compliance with internal policies, legal or contractual requirements, enforcing our terms of service, or investigating malicious activities.
- To facilitate corporate financing, M&A, or other business transactions. When it is in our legitimate business interests we may use personal data when carrying out a business deal. These deals may include any financing, merger, acquisition, or any deal where part or all of our business assets being acquired or transferred.
- To facilitate marketing. Pensight or its marketing and advertising service providers may use personal information to tell you about features, products, or services that may be of interest to you. This may be done via direct marketing, for example sending you special offers via email or phone number you provided. You can unsubscribe from marketing related communications using the direct unsubscribe links in the emails we send or by contacting us. When you unsubscribe, you will no longer receive marketing messages but you will continue to receive administrative and other important communication. Marketing may also be done via third-party services like Meta or TikTok to show our ads via their platforms, and information about our users may be shared with these parties to facilitate it.
We undertake marketing on the basis of our legitimate business interests. Where your consent is required, you may withdraw it at any time.
Google Data:
If you sign in via Google:
Collection: We use data from your Google profile such as email address or full name to create your Pensight Profile and verify email ownership.
Sharing: Pensight can share this data with Auth0 Inc for authentication purposes.
If you link your Google Calendar:
Collection: We use data from your Google calendar to calculate and show your availability, and, if given separate permission, create events in your calendar for bookings via Pensight.
Sharing: Pensight shows your free/busy status derived from your calendar data on your profile. It does not share any other calendar-related data.
SHARING YOUR PERSONAL INFORMATION
In certain circumstances, we share your Personal Information with third parties without further notice, unless required by law. These third parties may include:
- Third party service providers for the purpose of enabling them to assist us with business operations including (without limitation) IT service providers, data storage, hosting and server providers, ad networks, email service providers, payment processors, analytics, error loggers, debt collectors, maintenance or problem-solving providers, marketing or advertising providers.
- Professional advisory service providers like accounting service providers, lawyers, auditors, where it is necessary to facilitate the services they provide us.
- Business transaction parties if we're involved in transactions like mergers, acquisitions, bankruptcy, sale of assets (full or partial). Your personal information may be shared with counterparties and parties assisting the transactions during the due diligence process.
- Legal parties like courts, tribunals, regulatory authorities and law enforcement officers, as required by law, good faith belief that such action is necessary, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights.
- Third parties to process aggregated data. We may share aggregated personal data like user statistics with third parties or business partners for describing or promoting our Service for R&D purposes.
We maintain an up-to-date list of our subprocessors (including Stripe, AWS, Google, and other providers we rely on for hosting, payments, authentication, analytics, and communication).
PERSONAL INFORMATION YOU MAKE AVAILABLE
When you use the service as a Client, certain information is provided to Experts. When you make purchases, sign up for free offers, or interact with Expert pages in other ways, Expert will receive information you provide including your email address, name, form field answers, messages you send. Experts may send their own marketing emails to you, which you can unsubscribe from using the links in these marketing emails. We are not responsible for the actions Experts or downstream recipients of your information take. Experts may have their own Terms and Privacy Policy which you should review before making a purchase from them.
YOUR RIGHTS
You have the right to access personal information we hold about you and depending on where you're based, and under the applicable law and subject to limitations in such law, you also have the right to:
- correct the personal information we hold about you
- update the personal information we hold about you
- request deletion of personal information we hold about you
- request to receive personal information we hold about you in a structured machine readable format
- opt out of personal information sharing. In the previous sections on how we use and share your personal information we describe how we share personal information with third party marketing and advertising partners. Our disclosure of this information can be interpreted as "sale" or "sharing" of personal information or "targeted advertising" under applicable law. You can opt out of it by sending a request using the email below
- object to "profiling", as described in GDPR, or to decisions based solely on automated processing that have legal or similarly significant effects on you. However, we do not carry out profiling or automated decision-making of this kind
- object to how we are using your personal information
- withdraw your consent to us handling your personal information
- Lodge a complaint with your local supervisory authority.
You can send your requests to help@pensight.com.
Please note that before we can respond to your request to exercise these rights, we may ask you to verify your identity. Depending on your place of residence, you may also have the right to designate an authorized agent to make requests on your behalf. In such cases, we will require the authorized agent to provide proof of both their identity and their authority, in line with applicable laws. You have the right to exercise these rights without facing discrimination. However, there may be circumstances where we are legally permitted to deny your request, and if so, we will explain the reasons for our decision.
Limits on your privacy rights and choices
In certain situations, your privacy choices may be limited. For example, we may not be able to fulfill a request if doing so would interfere with the rights of others, prevent us from delivering a service you have requested, or restrict our ability to comply with legal obligations or enforce our rights.
Opting out of direct marketing
You may opt out of receiving marketing communications from us at any time by following the unsubscribe or opt-out instructions included in those messages. Please note that you will still receive non-marketing communications from us, such as service-related notices or updates to this Privacy Policy.
Where required by law, we only place non-essential cookies (such as analytics or marketing cookies) if you have provided consent through our cookie banner. You can withdraw your consent at any time in your cookie settings.
Limiting online tracking
There are several ways you can reduce or block online tracking. Please note that the tools listed below are offered by third parties, not by us, and we cannot guarantee their effectiveness:
- Blocking cookies on your device. To learn more about cookies, including how to view, manage, or delete them, visit www.allaboutcookies.org. You can also find guidance for specific browsers here: Firefox, Chrome, Microsoft Edge, Safari (Mac), Safari (iOS).
- Using privacy-focused browsers or plug-ins. You can use browsers with built-in privacy features (such as Brave) or install extensions like Privacy Badger, Ghostery, or uBlock Origin to block third-party cookies and trackers.
- Opting out of Google Analytics. You can prevent your data from being used by Google Analytics by installing the opt-out browser add-on available at tools.google.com/dlpage/gaoptout.
- Opting out of behavioural advertising. You can opt out of targeted advertising by:
FACEBOOK -https://www.facebook.com/settings/?tab=ads
GOOGLE -https://www.google.com/settings/ads/anonymous
BING -https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
“Do Not Track” signals
Some web browsers offer a “Do Not Track” (“DNT”) setting that allows you to express a privacy preference. At this time, we do not respond to or recognize DNT signals or similar mechanisms sent by browsers. To learn more about “Do Not Track,” please visit www.allaboutdnt.com. For further information about your rights, please see the Contact Us section below.
DATA RETENTION
When you create a profile on the Site, we will maintain your Profile Information for our records unless and until you ask us to delete this information.
We retain personal data only for as long as necessary for the purposes described above:
Profile / account data: kept while your account is active, and deleted within 7 years if your account is inactive, unless you delete your account yourself using the button in Account Settings or request earlier deletion.
Financial / billing records: retained for 7 years to comply with tax and accounting laws.
Analytics and usage logs: retained for up to 24 months, then anonymised or deleted.
Cookies: retained per their category and duration.
DATA SECURITY & BREACH NOTIFICATION
We implement appropriate technical and organisational measures to protect your data (including encryption, access control, and monitoring). If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay.
INTERNATIONAL TRANSFERS
We may transfer your personal data outside the United Kingdom and the European Economic Area (EEA), including to countries such as the United States where some of our subprocessors are located. When we do so, we ensure that appropriate safeguards are in place to protect your data, including:
Relying on adequacy decisions issued by the European Commission or UK Government (where available); and/orUsing the European Commission’s Standard Contractual Clauses (SCCs) together with the UK Addendum, which contractually require our subprocessors to protect your data to EU/UK standards. You may inquire us about the relevant safeguards we use by contacting us.
MINORS
The Site is not intended for individuals under the age of 16. Pensight does not knowingly collect information from people under the age of 16. If you have a reason to believe a person under 16 has provided personal information to Pensight, please inform us and we will endeavour to delete that information.
LIMITS OF OUR POLICY
Our Site may link to external sites that are not operated by us. We have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.
CHANGES
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. By continuing to use our services or by providing us with your personal information after we publish an updated Privacy Policy (or notify you through other appropriate means, where required), you agree to the revised Policy and the practices it describes.
CONTACT US
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at info@pensight.com or by mail using the details provided below:
71-75 Shelton Street, Covent Garden, London, England, WC2 H9JQ
