Privacy Policy
About this policy
This policy explains how Point74 Ltd (“Point74”, “we”, “us”, “our”) collects and uses personal data, why we do so, and the rights you have. It applies to personal data we process through our website, https://www.point74.co.uk, and in the course of our business.
We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations, as amended by the Data (Use and Access) Act 2025.
Who we are
Point74 Ltd is a company registered in England and Wales (company number 06434424). We are part of a group that includes Quor Systems Ltd and our holding company, Lincolnshire BidCo. Our contact details are at the end of this policy.
We are the controller of the personal data described in this policy, except where we explain otherwise below.
Data in our software
Our customers use our software, including Recipe Professor and QUOR, to store and manage their own information. For that data, our customer is the controller and we act as their processor, handling it only on their instructions and under our contract with them. If your data is held in one of our customers’ systems, please contact that customer about it.
Whose personal data we process
We may process personal data about you if you:
- are a customer or supplier of ours, or work for one
- use our products or services, or work for someone who does
- visit our website, contact us, or sign up to webinars, events or newsletters
- are someone we would like to tell about our products and services, or work for such an organisation
- visit our offices
If you apply for a job with us, our Candidate Privacy Notice applies.
What personal data we process
- Contact and work details: your name, employer, job title, work email, phone number and address.
- Communications: what you tell us when you contact us by phone, email, our website, social media or in person, including enquiries, support requests and feedback.
- Dealings with us: details of products and services we supply to, or buy from, you or your organisation, and information we need to enter into and manage a contract.
- Events: information needed to organise events you attend, such as dietary requirements or accessibility needs. Where this reveals health or religious information, we only collect it with your consent, use it only for that event and delete it afterwards.
- Office visits: visitor sign-in details and, where in place, CCTV images.
- Marketing preferences: what you have agreed to receive from us and how you engage with our emails and content.
We collect most of this from you directly. We may also get it from your employer, from our group companies, from trade shows and events, or from business databases and public sources such as LinkedIn and Companies House.
Our website
When you visit our website we may collect technical information such as your IP address, browser and device type, operating system, and how you use the site (pages viewed, time on page, links clicked and how you arrived). If you fill in a form, book a demo or register for a webinar, we collect the details you give us.
Cookies
Cookies are small files placed on your device when you visit a website. We use:
- Strictly necessary cookies to make the website work. These do not need your consent.
- Analytics cookies to understand how the site is used so we can improve it. Where the law allows, we may set some low-risk analytics cookies unless you opt out; otherwise we ask for your consent.
- Marketing cookies to measure and improve our advertising. We only set these with your consent.
You can accept, reject or change your choices at any time through the cookie settings on our website, and you can block cookies in your browser. Blocking some cookies may affect how the site works.
Why we use your data, and our legal basis
| What we use it for | Legal basis |
|---|---|
| Providing our products and services, and managing contracts with customers and suppliers | Performance of a contract, or our legitimate interest in working with your organisation |
| Answering enquiries and providing support | Legitimate interests |
| Sending marketing emails and newsletters | Consent, or legitimate interests for business contacts where the law allows. You can opt out at any time |
| Running, improving and securing our website and systems | Legitimate interests |
| Analytics and marketing cookies | Consent, except low-risk analytics cookies where the law allows |
| Organising events, webinars and demos | Legitimate interests; consent for dietary or accessibility information |
| Meeting legal, tax and regulatory obligations | Legal obligation |
| Protecting our rights and preventing fraud | Legitimate interests |
Where we rely on legitimate interests, we have weighed our interests against yours and only proceed where yours do not override them. We do not make decisions about you based solely on automated processing that have a legal or similarly significant effect on you.
Who we share your data with
We only share personal data where we need to, and we require those we share it with to protect it. We may share it with:
- Our group companies, including Quor Systems Ltd, so we can manage our customer relationships and offer our joint products.
- Service providers who help us run our business, for example our CRM and marketing platform (HubSpot), Microsoft 365, website hosting, webinar and booking tools, analytics providers, IT support and payment providers.
- AI and productivity tools we use in our day-to-day work, under contracts that protect your data and prevent it being used to train other services.
- Professional advisers, such as auditors, lawyers, accountants and insurers.
- Advertising platforms such as LinkedIn and Google, where you have agreed to marketing cookies. We do not sell your personal data.
- Buyers or investors, if we sell, buy or merge a business or assets, in which case your data may be transferred as part of that deal.
- Authorities and regulators, where the law requires it or to protect the rights, property or safety of Point74, our customers or others.
International transfers
Some of our service providers store or access data outside the UK. Where they do, we make sure it is protected, for example by relying on UK adequacy regulations or by using the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can contact us for more information about these safeguards.
Keeping your data secure
We use appropriate technical and organisational measures to protect personal data, including access controls, encryption and staff training. No transmission over the internet is completely secure, but once we have your data we take care to prevent unauthorised access, loss or misuse.
How long we keep your data
We keep personal data only as long as we need it for the purpose we collected it for, then delete or anonymise it. Our maximum retention periods are:
- Customer and supplier records: the length of the contract plus 6 years, to meet legal and tax requirements.
- Marketing contacts: until you unsubscribe, or 3 years after your last engagement with us.
- Website enquiries with no further relationship: 3 years.
- Event dietary and accessibility information: 3 months after the event.
- Office visitor records: 12 months.
- CCTV footage: 90 days, unless needed for an investigation.
Your rights
You have the right to:
- Access the personal data we hold about you and receive a copy
- Correct data that is inaccurate or incomplete
- Erase your data in certain circumstances
- Restrict how we use your data in certain circumstances
- Object to our use of your data where we rely on legitimate interests, and to object at any time to direct marketing
- Data portability, to receive data you gave us in a commonly used format or have it sent to another organisation, where we rely on consent or a contract
- Withdraw consent at any time, where we rely on it. This does not affect anything we did before you withdrew it
- Not be subject to decisions based solely on automated processing that significantly affect you
To use any of these rights, email dataprotection@point74.co.uk or write to us at the address below. We may need to confirm your identity first. We will respond within one month, which may be extended where the law allows. You can unsubscribe from marketing emails at any time using the link in each email.
Complaints
If you are unhappy with how we have handled your personal data, please contact us first at dataprotection@point74.co.uk. We will acknowledge your complaint within 30 days and let you know the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Contact us
Point74 Ltd, 2 West Street, Bourne, Lincolnshire, PE10 9NE
Email: dataprotection@point74.co.uk
Phone: 08452 074 074
Changes to this policy
We review this policy regularly and will post any changes on this page. Where changes are significant, we will let you know.
This policy was last updated on 26 October 2026.
Candidate Privacy Notice
This notice explains how Point74 Ltd uses your personal data when you apply for a job or role with us. It sits alongside our Privacy Policy.
What we collect
- Your CV, cover letter and application details: name, contact details, work history, qualifications and skills
- Notes from interviews and any tests or assessments
- Salary expectations, notice period and references
- Right-to-work documents, if we make you an offer
- Any adjustments you ask for during the process. We only use health information to make those adjustments
We collect this from you, from recruitment agencies or job boards you apply through, and from referees you name. We only contact referees with your agreement.
How we use it
We use your data to assess your application, communicate with you, arrange interviews and make hiring decisions. Our legal basis is taking steps to enter into an employment contract with you and our legitimate interest in recruiting the right people. We carry out right-to-work checks because the law requires them. Our hiring decisions are made by people, not solely by automated systems.
Who sees it
Your data is shared with the people involved in hiring for the role, our HR team, and the service providers that support our recruitment, such as email, document storage and HR systems. If you applied through an agency, we will share updates with them.
How long we keep it
If you are unsuccessful, we keep your application for 12 months after the role is filled and then delete it, unless you agree that we can keep it longer to consider you for future roles. If you join us, your data moves to your employee record and our employee privacy notice applies.
Your rights
You have the same rights described in our Privacy Policy, including access, correction and erasure. To use them, or if you have any questions, email dataprotection@point74.co.uk.