Privacy Policy
Date of last revision: 13 October 2026
1.1
Pano Technologies Ltd ("Pano", "we", "us" or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share and protect personal data when you visit our website at www.getpano.com (the "Website"), contact us or enquire about our services, receive communications from us, or interact with us in connection with your firm's use of the Pano platform.
1.2
Pano Technologies Ltd is the controller of the personal data described in this Policy. Our details are in Section 11.
1.3
Who this Policy covers
This Policy applies to: visitors to the Website; people who contact us, request a demonstration, or whose business contact details we hold (for example prospective customers, partners and suppliers); and individuals at our customer firms, in relation to how we manage our relationship with that firm and administer their user accounts.
1.4
What this Policy does not cover
The Pano platform is used by firms to manage information about their own clients. For that client information, the firm is the controller and Pano acts as its processor, under a written agreement and data processing agreement with that firm. This Policy does not apply to that processing.
1.5
If you are a client of a firm that uses Pano, the firm's own privacy notice explains how your personal data is used, and you should contact the firm to exercise your data protection rights. If you contact us instead, we will refer your request to the relevant firm where appropriate.
2.1
Information you provide to us
Contact and enquiry information: when you submit an enquiry, contact form or demonstration request, we collect your name, business email address, telephone number, job title, firm name and any other information you choose to include.
Account information: if you are an authorised user of the Pano platform, we collect your name, business email address, firm, role, login credentials (passwords are stored only in hashed form) and account settings, so that we can administer access, provide support and keep the platform secure.
Correspondence: the content of emails, support requests and other communications you send us, and notes of calls or meetings with you.
Marketing preferences: whether you wish to receive marketing communications from us, and the types of communication you are interested in.
2.2
Please do not send us personal data about your clients, or other confidential client information, through the Website or our general contact channels. We do not need it to respond to an enquiry.
2.3
Information collected automatically
When you use the Website we automatically collect information about your visit, including pages viewed and time spent on them, links clicked, the referring website or source of traffic, device and browser type, operating system, approximate location (country or city level, not precise location) and IP address. Some of this information is collected using cookies and similar technologies, as explained in Section 5.
2.4
Information from third parties
We may receive limited business contact information about you from business partners or publicly available professional sources (for example a professional networking profile, a firm website or a business directory), where they are permitted to share it and we have a lawful basis to use it. Where we obtain your personal data from a third party, we will tell you, where required, in line with Article 14 of the UK GDPR. We do not buy personal data from consumer data brokers.
2.5
Is providing personal data required?
You are not obliged to give us personal data in order to browse the Website. If you want us to respond to an enquiry or provide you with access to the platform, we will need the contact and account details described above, and we cannot do so without them.
3.1
We use personal data for the purposes below. For each purpose, we rely on the lawful basis shown under the UK GDPR.
3.2
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. You can ask us for more information about that assessment using the details in Section 11.
3.3
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing that took place before you withdrew it.
3.4
You can opt out of marketing emails at any time using the unsubscribe link in any email or by contacting us. We will continue to send you service and account messages where they are needed.
3.5
We do not sell personal data. We do not make decisions about Website visitors or business contacts based solely on automated processing that produce legal or similarly significant effects.
4.1
We share personal data only when necessary, with:
our cloud hosting and infrastructure provider (Google Cloud Platform) and our website hosting provider;
providers of the business tools we use to manage enquiries, customer relationships, email, scheduling and support;
analytics providers and, where you have consented, marketing service providers;
our professional advisers, such as lawyers, accountants and auditors;
regulators, law enforcement agencies, courts and other authorities, where required by law or to protect our rights; and
a prospective buyer of, or investor in, our business, or their advisers, under appropriate confidentiality obligations, in connection with a sale, merger, investment or reorganisation.
4.2
Service providers that process personal data on our behalf are bound by written data processing terms and may use it only on our instructions.
4.3
The Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites, and we encourage you to read their privacy notices.
5.1
Cookies are small data files stored on your device. We use the following categories:
essential cookies, which are needed for the Website to work securely and are set without consent;
analytics cookies, which help us understand how the Website is used (including Google Analytics);
marketing cookies, which help us measure and deliver relevant content; and
preference cookies, which remember your settings.
5.2
We only set analytics, marketing and preference cookies with your consent, which we ask for through the cookie banner shown when you first visit the Website. You can change or withdraw your choices at any time through our cookie settings tool, and you can also control cookies through your browser settings. Blocking essential cookies may stop parts of the Website from working.
5.3
Some cookies are set by third parties, such as Google. Their use of data is governed by their own privacy notices. We use cookies in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR.
6.1
We store the personal data described in this Policy primarily in the United Kingdom and the European Economic Area (EEA).
6.2
Some of our service providers, including analytics, email and business tools, may process personal data outside the UK and EEA, including in the United States. Where this happens, we make sure the transfer is protected by an appropriate safeguard, such as UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework, where the recipient is certified), the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with supplementary measures where needed. You can ask us for more information about these safeguards.
7.1
We keep personal data only for as long as we need it for the purposes it was collected for, unless the law requires us to keep it for longer. Our standard retention periods are:
7.2
When personal data is no longer needed, we securely delete or anonymise it.
8.1
Under UK data protection law you have the right to:
access the personal data we hold about you;
have inaccurate personal data corrected;
have your personal data erased, in certain circumstances;
restrict how we use your personal data, in certain circumstances;
receive your personal data in a portable format, in certain circumstances;
object to our use of your personal data where we rely on legitimate interests, and to object at any time to direct marketing;
withdraw consent where we rely on it; and
not be subject to a decision based solely on automated processing that produces legal or similarly significant effects.
8.2
To exercise any of these rights, contact us using the details in Section 11. We will respond without undue delay and within one month. We may extend this by up to two further months for complex or numerous requests, and will tell you if we do. We may need to verify your identity before responding, and the response period starts once we have done so. When responding to access requests, we carry out reasonable and proportionate searches.
9.1
If you have a concern about how we use your personal data, please contact us first using the details in Section 11. We will acknowledge your complaint within 30 days of receiving it, look into it without undue delay, and tell you the outcome.
9.2
You also have the right to complain to the UK data protection regulator, the Information Commission (ICO):
Information Commission, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: www.ico.org.uk
Telephone: 0303 123 1113
We apply appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls on a least-privilege basis, logging and monitoring, and regular security assessments and penetration testing. No system can be guaranteed to be completely secure. If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of it and, where required, notify you without undue delay.
11.1
For any privacy questions, to exercise your rights, or to make a complaint, contact:
Data Protection, Pano Technologies Ltd
Email: support@getpano.com
Post: Pano Technologies Ltd, North West House, 119 Marylebone Road, London NW1 5PU, United Kingdom
The Website and our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children. If we become aware that we have done so, we will delete it.
We may update this Policy from time to time. The current version is identified by the “Last Updated” date at the top. Where changes are material, we will give additional notice, for example by a notice on the Website or, where appropriate, by email.
Pano Technologies Ltd, a company registered in England and Wales (Company No. 12413790). ICO registration number ZA842412.
This Policy is maintained in accordance with the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 and the Data (Use and Access) Act 2025.
© 2026 Pano · All rights reserved.