Last updated: 29 September 2026
This Privacy Policy explains how PRIVIEW LIMITED collects, uses, stores and protects personal data.
PRIVIEW LIMITED is a company incorporated in England and Wales with company number 16566134 and registered office at 1 Lyric Square, London W6 0NB.
In this Privacy Policy, “PriView”, “we”, “us” and “our” mean PRIVIEW LIMITED.
If you have any questions about this Privacy Policy or how we handle personal data, please contact us at:
Email: contact@priview.com
PriView provides a software platform and related services for investors in private funds. Our platform helps customers collect, organise and analyse private fund and portfolio information, including capital account statements, financial reports, investment schedules, exposure data, performance data and other portfolio information.
Customers may include individuals managing their own investments as well as organisations, family offices and other institutional or professional investors.
In this Privacy Policy:
“Customer Data” means documents, data and other information provided to or collected through PriView in connection with a customer’s use of the platform, including private fund and portfolio information.
“Collective Data” means data derived from the aggregation or analysis of data contributed by multiple customers or other data sources, from which information identifying any Customer, fund, general partner, individual or underlying source has been removed in accordance with our anonymisation and aggregation standards.
“Collective Outputs” means statistical results, benchmarks, scores, distributions, comparisons, market intelligence or other aggregated analytics generated from Collective Data.
“Collective Data Programme” means PriView’s programme for creating and using Collective Data and Collective Outputs.
Participation in the Collective Data Programme is a standard part of PriView’s Self Serve service. For managed, enterprise or other customers operating under a separate Data Sharing Agreement, Order Form or other written agreement, participation in the Collective Data Programme is governed by that agreement.
Where a customer participates in the Collective Data Programme, PriView may use contributed Customer Data to create Collective Data and Collective Outputs, including anonymised and aggregated benchmarks, comparative analytics, distributions, scores, market statistics, portfolio and investment analytics, market intelligence and other statistical or analytical outputs.
Customer Data is not disclosed to other customers in identifiable form through the Collective Data Programme. Collective Outputs are subject to anonymisation, aggregation thresholds and other disclosure controls designed to prevent the identification of contributing customers, individuals, funds, general partners or underlying source data.
This Privacy Policy may apply to you if you are:
Not every section of this Privacy Policy will apply to every person. For example, personal data relating to an individual PriView customer may be processed differently from personal data that appears incidentally in a fund report uploaded by an organisational customer.
Depending on the relevant processing activity, we may act as either a controller or processor of personal data.
Where we process personal data solely on the documented instructions of an organisational customer that acts as controller, PriView acts as a processor. This may include personal data contained incidentally in fund reports, investment schedules and other documents uploaded by that customer.
Where PriView determines the purposes and means of processing personal data, PriView acts as a controller. This includes processing relating to account administration, website operation, security, billing, business operations and the processing required to create Collective Data before that information has been effectively anonymised.
PriView may also act as a controller in relation to personal data provided by an individual customer using PriView on their own behalf.
Where we act as a processor, we process personal data in accordance with the relevant customer’s documented instructions, our Platform Terms or other applicable agreement, and applicable data-protection law.
Where PriView processes personal data on behalf of an organisational customer under a separate Data Sharing Agreement, Order Form or other written agreement, that agreement governs PriView’s contractual processing obligations to that customer. This Privacy Policy does not amend or override that agreement.
We may collect and process the following categories of personal data.
This may include:
Customers may provide documents and data relating to private fund investments and other investments. These may include:
These documents are primarily commercial, financial and investment-related. They may, however, incidentally contain personal data, including names, email addresses, signatures, job titles, contact details or other personal information included in documents provided to us.
When you visit our website or communicate with us, we may process:
We may process:
Payment information may also be processed by our payment-processing or subscription-management providers in connection with paid PriView subscriptions.
We may process security and audit information, including:
We collect personal data from:
We use personal data for the following purposes.
We use Customer Data to provide portfolio transparency, portfolio analytics, exposure analytics, performance attribution, benchmarking, monitoring, reporting, document processing, data enrichment and related services.
This may include receiving, storing, extracting, classifying, matching, normalising, calculating, enriching, organising and displaying information from documents and other data provided to or collected through PriView.
We use personal data to create and administer accounts, authenticate users, manage access and permissions, maintain customer workspaces, manage subscriptions and provide support.
We use automated systems, including artificial intelligence, to support document extraction, classification, matching, normalisation, summarisation, portfolio analysis, customer query responses, data enrichment and related platform functionality.
In Self Serve workflows, these processes may occur automatically without manual review by PriView personnel.
Automated or AI-assisted processing may produce errors, omissions, incorrect classifications, mismatched records or other inaccuracies. Users are provided with functionality to review and correct certain information within the platform and should verify material information against underlying source documents where appropriate.
Where we use AI services to process Customer Data, we apply access controls, data-minimisation measures and vendor controls. We do not use Customer Data to train public or general-purpose AI models, and we do not permit our personnel to enter Customer Data, credentials or secrets into public AI tools.
Participation in the Collective Data Programme is a standard part of PriView’s Self Serve service. For managed, enterprise or other customers operating under a separate Data Sharing Agreement, Order Form or other written agreement, participation in the Collective Data Programme is governed by that agreement.
Where a customer participates in the Collective Data Programme, PriView may use contributed Customer Data to create Collective Data and Collective Outputs, including anonymised and aggregated:
PriView may use Collective Data and Collective Outputs in its products, services, reports and analytics, including paid offerings, subject to the safeguards described in this Privacy Policy.
Before Collective Outputs are made available, we apply anonymisation, aggregation thresholds and other statistical or technical disclosure controls designed to prevent recipients from identifying contributing customers, individuals, funds, general partners or underlying source data.
We do not use the Collective Data Programme to disclose an identifiable customer’s confidential fund information, individual investment positions, valuations, marks or holdings to other customers.
Once information has been effectively anonymised so that an individual is no longer identifiable by means reasonably likely to be used, it is no longer personal data for the purposes of applicable data-protection law.
Where producing Collective Data requires us to process personal data before it is effectively anonymised, PriView acts as an independent controller for that processing. We ordinarily rely on our legitimate interests in developing and providing anonymised benchmarking, comparative analytics and market intelligence and improving the usefulness of the PriView platform.
In pursuing those interests, we apply safeguards including data minimisation, anonymisation, aggregation thresholds, access controls and restrictions designed to reduce identification and privacy risk.
We process personal data to protect our platform, systems and customers, including to:
We process personal data to:
We process personal data to comply with legal obligations, respond to lawful requests, maintain records, manage disputes and demonstrate compliance with security, privacy, contractual, tax and other legal obligations.
We may use personal data to respond to enquiries, manage business relationships, send relevant communications and improve our website and services.
Where required by law, we obtain consent before sending electronic direct marketing or using non-essential cookies.
We do not sell personal data.
Where PriView acts as controller, depending on the relevant processing activity, we rely on one or more of the following lawful bases:
Where PriView acts as processor on behalf of an organisational customer, the customer determines the applicable lawful basis for its processing and PriView processes the relevant personal data on the customer’s documented instructions and in accordance with the applicable agreement.
Our legitimate interests may include:
Where we rely on legitimate interests, we consider the nature of the processing, its impact on affected individuals and the safeguards available to protect their rights and interests.
We use AI-assisted and other automated tools as part of our services and internal operations. These tools may help with:
In Self Serve workflows, automated processing may occur without PriView personnel manually reviewing the source document or resulting output.
We do not allow Customer Data to be entered into public AI tools. Where we use AI providers to process Customer Data, we use enterprise, API or other controlled service arrangements designed so that Customer Data is not used to train the provider’s public or general-purpose models.
Some AI processing may take place outside the United Kingdom or European Economic Area, depending on the provider, service and configuration. Where this occurs, we use appropriate transfer mechanisms and contractual, technical and organisational safeguards.
We do not use AI or solely automated processing to make decisions that produce legal effects concerning individuals or similarly significantly affect them.
We may share personal data where reasonably necessary with:
Our technology and operational providers may include providers such as Supabase, AWS, Vercel, Google Workspace, GitHub, 1Password, Adobe, Xero, ZeptoMail and selected AI, search, payment or enrichment providers. The providers we use may change over time.
Adobe Sign stores our documents in Dublin, Ireland.
We require providers that process personal data on our behalf to be subject to appropriate contractual and data-protection obligations.
We maintain vendor and subprocessor records and can provide further information on relevant subprocessors where appropriate.
The sharing described in this section is different from the Collective Data Programme. We do not disclose identifiable Customer Data to other customers through the Collective Data Programme.
Some of our service providers may process personal data outside the United Kingdom or European Economic Area.
Where personal data is transferred internationally, we take steps designed to ensure that an appropriate lawful transfer mechanism is in place. Depending on the destination and circumstances, these measures may include:
Some AI, search, enrichment, email, infrastructure or cloud services may involve processing outside the UK or EEA. We assess relevant providers and apply appropriate contractual, technical and organisational controls.
We implement and maintain technical and organisational measures designed to protect personal data and Customer Data against unauthorised or unlawful access, disclosure, alteration, loss or destruction.
These measures include, where applicable to the relevant systems and processing:
No system can be guaranteed to be completely secure, but we take reasonable and proportionate steps to protect the information entrusted to us.
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required by law, contract, accounting, tax, insurance, dispute-resolution or governance requirements.
Customer Data is retained in accordance with the applicable Platform Terms, Data Sharing Agreement, Order Form or other customer agreement and our retention procedures.
When a customer closes an account or validly requests deletion of Customer Data, we will delete or otherwise handle the relevant Customer Data in accordance with the applicable terms and applicable law.
Where Customer Data has already been effectively anonymised and incorporated into Collective Data before account closure or deletion, that anonymised information may be retained and continue to be used because it is no longer reasonably attributable to the customer or an identifiable individual.
Residual copies in protected backups may persist for a limited period after deletion from active systems. Those copies are subject to our normal backup lifecycle and are not ordinarily used for active processing.
Security logs, audit records, contractual records, payment and accounting information, legal records and corporate records may be retained for longer where reasonably necessary for security, legal, tax, insurance, audit, dispute-resolution or legitimate governance purposes.
Our website may use cookies and similar technologies to operate the site, understand usage and improve our services.
Cookies may include:
Where required by law, we ask for consent before setting non-essential cookies.
You can also control cookies through your browser settings and any cookie controls made available on our website.
Depending on the circumstances and applicable law, you may have the right to:
These rights are subject to certain legal conditions and exceptions.
Where PriView processes personal data as a processor on behalf of an organisational customer, that customer is generally responsible for responding to requests concerning that personal data. If you contact us about personal data we process solely on behalf of a customer, we may refer your request to or coordinate with the relevant customer.
Where PriView acts as controller, including in relation to personal data processed for our own account administration, security, billing or Collective Data purposes, you may exercise applicable rights directly with us.
A request to delete personal data does not require us to delete information that has already been effectively anonymised so that it no longer constitutes personal data.
To exercise your rights, contact us at contact@priview.com.
We may need to verify your identity before responding to a request.
If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the issue.
You also have the right to complain to the UK Information Commissioner’s Office.
Website: www.ico.org.uk
Telephone: 0303 123 1113
If you are based outside the UK, you may also have the right to complain to your local data-protection authority.
Our services are intended for adults managing private investments, either personally or on behalf of an organisation.
They are not directed at children, and we do not knowingly collect personal data from children through the PriView service.
If we become aware that personal data relating to a child has been provided to us in circumstances where it should not have been, we will take appropriate steps in accordance with applicable law.
We may update this Privacy Policy from time to time to reflect changes to our services, technology, providers, legal requirements or data-processing practices.
When we make changes, we will update the “Last updated” date above. Where a change materially affects how we use personal data, we will take appropriate steps to notify affected users or customers where required.
For privacy questions, requests or concerns, contact:
PRIVIEW LIMITED
1 Lyric Square
London W6 0NB
United Kingdom
Email: contact@priview.com