Privacy Policy
Effective date: 1 May 2026
Who we are
This website is operated by 360 HCM Limited, trading as Provato.
360 HCM Limited is registered in England and Wales (Company Number 17016045). Our registered office is at 71-75 Shelton Street, London WC2H 9JQ.
When we say “Provato”, “we”, “us”, or “our” in this policy, we mean 360 HCM Limited.
You can contact us about privacy matters at: info@360hcm.com.
What data we collect and why
Demo request form
When you submit a demo request on this website, we collect:
- Your first and last name
- Your work email address
- Your company name
- Your role
- What brings you to Provato (your area of interest)
We use this information solely to respond to your demo request, schedule a demonstration of the Provato platform, and follow up on that conversation.
Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR) — we have a legitimate interest in responding to prospective customers who contact us. Where you are an existing or prospective business customer, we may also rely on contractual necessity.
Automatically collected technical data
When you visit our website, our hosting provider (Vercel, Inc.) may automatically collect standard server log data including your IP address, browser type, and pages visited. This data is used for security monitoring and infrastructure operation. We do not use this data for marketing or profiling.
Legal basis: Legitimate interests (security and infrastructure operation).
We do not use analytics tracking tools (such as Google Analytics), advertising cookies, or any third-party tracking on this website.
Who we share your data with
We share your personal data with the following third parties, only to the extent necessary to operate our service:
Resend (email delivery)
When you submit a demo request, your details are transmitted to Resend, Inc. to deliver a notification email to our team. Resend processes this data as a data processor on our behalf.
- Resend privacy policy: https://resend.com/legal/privacy-policy
- Resend is based in the United States. Transfers are covered by appropriate safeguards (Standard Contractual Clauses).
Vercel, Inc. (website hosting)
Our website is hosted on Vercel's infrastructure. Vercel may process technical data (such as IP addresses) as part of delivering the website to you.
- Vercel privacy policy: https://vercel.com/legal/privacy-policy
- Vercel is based in the United States. Transfers are covered by appropriate safeguards (Standard Contractual Clauses).
We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data for any automated decision-making or profiling.
How long we keep your data
Demo request data is retained for up to 24 months from the date of submission, or until you ask us to delete it, whichever comes first. We retain it to allow us to follow up on your interest in Provato and to maintain a record of business enquiries.
Server log data is retained by Vercel in accordance with their standard data retention policies.
Your rights under UK GDPR
You have the following rights regarding your personal data:
- Right of access — you can ask us what personal data we hold about you.
- Right to rectification — you can ask us to correct inaccurate data.
- Right to erasure — you can ask us to delete your data. We will do so unless we have a legal obligation to retain it.
- Right to restrict processing — you can ask us to pause processing of your data in certain circumstances.
- Right to object — you can object to processing based on legitimate interests.
- Right to data portability — you can ask for a copy of your data in a portable format.
To exercise any of these rights, contact us at: info@360hcm.com.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
- Website: https://ico.org.uk
- Phone: 0303 123 1113
International transfers
Our hosting provider (Vercel) and email delivery provider (Resend) are both based in the United States. When your data is transferred to these providers, it is protected by Standard Contractual Clauses approved by the UK ICO, which provide appropriate safeguards for international data transfers under UK GDPR.
Changes to this policy
We may update this privacy policy from time to time. When we do, we will update the effective date at the top of this page. We encourage you to review this policy periodically.
Contact us
360 HCM Limited (trading as Provato)
71-75 Shelton Street
London WC2H 9JQ
Email: info@360hcm.com
Company Number: 17016045