Privacy policy

01 Who we are

Plumb AI Ltd is the data controller for the personal data described in this policy.

• Company: Plumb AI Ltd, registered in England & Wales, company number 17256788.
• Registered office: [registered office address].
• Data protection contact: privacy@askplumb.com.

We have not appointed a statutory Data Protection Officer; our data protection contact above handles all privacy enquiries.

02 Scope of this policy

This policy covers personal data about visitors and prospective customers (our website and enquiry forms) and users of the platform (people who sign in and operate Plumb on behalf of a business).

03 The data we collect

Information you give us

• Enquiries. When you use a "Get in touch" form we collect your name, work email and, if you provide it, your phone number, along with the request itself.
• Account & sign-in. If you use the platform, we process the identifiers needed to authenticate you and manage your account.
• Correspondence. Records of your communications with us, including support requests.

Information we collect automatically

• Essential technical data. Basic information needed to serve the site securely, such as your IP address and request metadata in server logs.
• Cookies & similar storage. Only essential storage by default. Optional analytics run only with your consent - see our Cookie policy.

We do not knowingly collect special category data through our website, and we ask that you do not send it to us in enquiry forms.

04 How and why we use it

We do not sell your personal data, and we do not use it for automated decisions that produce legal or similarly significant effects about you.

05 Lawful bases

Under the UK GDPR we rely on:

• Legitimate interests - to respond to enquiries, run and secure the service, and understand demand for the product. You can object at any time (see your rights below).
• Performance of a contract - to provide the platform to account holders and their organisations.
• Consent - for optional analytics cookies. You can withdraw consent at any time via Cookie settings.
• Legal obligation - where we must retain or disclose data to comply with the law.

06 Who we share it with

We share personal data only with parties that help us run Plumb, under contract and on our instructions:

• Infrastructure & hosting providers that operate our platform and the data-trove.com services it runs on.
• Email, communications and support tools used to reply to you.
• Analytics providers, where you have consented.
• Professional advisers, authorities or acquirers where required by law, to enforce our terms, or in connection with a corporate transaction.

A current list of our key processors is available on request from privacy@askplumb.com.

07 International transfers

We aim to keep personal data within the UK or the European Economic Area. Where a provider processes data outside those areas, we put in place a lawful transfer mechanism - typically the UK International Data Transfer Agreement or the Addendum to the EU Standard Contractual Clauses - and assess that your data remains adequately protected.

08 How long we keep it

We keep personal data only as long as we need it for the purposes above:

• Enquiries - for up to 24 months after our last contact, then deleted or anonymised, unless you become a customer.
• Account data - for the life of the account and a reasonable period afterwards to meet legal and accounting obligations.
• Server & security logs - for a short, rolling retention window.

09 Your rights

Subject to conditions in the law, you have the right to: access your data; have it corrected; have it erased; restrict or object to its processing; data portability; and to withdraw consent where we rely on it. You will not pay a fee to exercise these rights in normal circumstances, and we will respond within one month.

To make a request, email privacy@askplumb.com. We may need to verify your identity first.

10 Security

We use appropriate technical and organisational measures - encryption in transit, access controls, and the principle of least privilege - to protect personal data, and we keep those measures under review. No system is perfectly secure; if a breach affects your rights we will notify you and the regulator as required.

11 Changes to this policy

We may update this policy as the product and the law evolve. The version and date at the top show the current edition; material changes will be highlighted on this page or notified to account holders.

12 Contact & complaints

For any privacy question, contact privacy@askplumb.com.

If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling its helpline. We would, however, appreciate the chance to resolve it first.