Pathform Labs Oy
Privacy Policy
Last updated: 14 September 2026
Pathform Labs Oy respects your privacy and processes personal data only where necessary for operating our website, responding to inquiries, and developing our products and business relationships.
This Privacy Policy explains how personal data is processed when you visit pathformlabs.com, use the Momentum for Organizations Design Partner Readiness Check, or contact Pathform Labs through the website.
1. Data controller
Pathform Labs OyBusiness ID: 3637202-5
Finland
Privacy contact: hello@pathformlabs.com
Pathform Labs Oy acts as the data controller for personal data submitted through the Pathform Labs website.
2. Personal data we collect
When you use the website without contacting us, we do not intentionally ask you to provide personal information through the readiness questionnaire itself.
If you choose to contact Pathform Labs after completing the Momentum for Organizations readiness check, we may collect:
- name
- company
- role or job title
- work email address
- country
- company size
- phone number, if voluntarily provided
- any question or context you voluntarily include in the free‑text field
- your readiness category, such as Strong Fit or Potential Fit
- a small number of high-level reasons associated with that readiness result
We do not submit or store the complete set of readiness questionnaire answers with your contact information, and we do not submit the questionnaire’s internal numeric scoring.
3. Readiness questionnaire
The Momentum for Organizations Design Partner Readiness Check is intended to help organizations understand whether a design partnership or pilot may be worth exploring.
Detailed questionnaire responses are processed in the browser for the purpose of generating the readiness result.
The readiness result is an informational indication of organizational fit and is not a formal eligibility or decision‑making process.
4. Why we process personal data
We process submitted contact information in order to:
- respond to your inquiry
- prepare for a potential discovery discussion
- assess whether a Momentum for Organizations design partnership or pilot may be relevant
- follow up on questions you have asked us
- manage potential business relationships
- improve our understanding of corporate interest in Momentum for Organizations
The primary legal basis for this processing is our legitimate interest in responding to business inquiries and developing business relationships.
Where another lawful basis is required under applicable data-protection law, we will rely on that basis.
5. Service providers
We use trusted service providers to operate our website and communications, including:
- Vercel for website hosting and related infrastructure
- Resend for delivering website contact inquiries
- Proton Mail for receiving and managing business email
These providers may process personal data where necessary to provide their services to Pathform Labs.
We do not sell personal data to advertisers or other third parties.
6. International transfers
Some of our service providers may process personal data outside Finland or the European Economic Area.
Where required, appropriate safeguards are used for international transfers in accordance with applicable data‑protection law.
7. Data retention
We keep personal data submitted through the website only for as long as necessary for the purposes described in this Privacy Policy.
If an inquiry does not lead to an ongoing business relationship, the related personal data will be deleted or anonymized within 12 months of the last meaningful interaction, unless a longer retention period is required by law or is necessary for the establishment, exercise, or defence of legal claims.
Where an ongoing business relationship is established, relevant information may be retained for the duration of that relationship and for any additional period required by applicable law.
8. Security
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or disclosure.
Website contact submissions are transmitted through server-side infrastructure. Credentials and API keys used for email delivery are not intentionally exposed to website visitors.
No method of transmission or storage can be guaranteed to be completely secure.
9. Your rights
Under applicable data-protection law, you may have the right to:
- request access to personal data concerning you
- request correction of inaccurate data
- request deletion of your data
- request restriction of processing
- object to certain processing
- request data portability where applicable
- withdraw consent where processing is based on consent
- lodge a complaint with a competent supervisory authority
To exercise your rights or ask a privacy-related question, contact:
10. Changes to this policy
We may update this Privacy Policy as our website, products, or service providers evolve.
The current version and its last-updated date will always be published on this page.