Who is responsible for your data
Plumborixa is responsible for the personal data described here (the data controller). Contact us about privacy at hello@plumborixa.site.
What we collect
When you use the contact form
Your name, email address, and any of the optional details you choose to give: business name, phone number, the towns or postcodes you cover, the topic of your enquiry and your message. We also record the date and time the form was sent.
When you email us
Your email address, name and whatever you include in the message and attachments.
When you use the brief builder
Nothing. The brief builder runs entirely in your browser. Your answers are not sent to us or stored anywhere unless you choose to email us the file it creates.
When you browse the site
Like almost every website, our hosting provider's servers record basic technical information about requests, such as the IP address, the page requested, the date and time and the browser type, in server logs. These logs are used to keep the site secure and working and are kept for a short period. The contact page also uses a session cookie and a temporary rate-limit record, described below. We do not use analytics or advertising trackers.
Why we use it and our lawful basis
| Purpose | Data | Lawful basis |
|---|---|---|
| Replying to your enquiry | Form and email details | Legitimate interests in responding to people who contact us, or steps you ask us to take before entering a contract |
| Running a project you agree | Contact details and project information | Performance of a contract |
| Keeping business and tax records | Invoices and related correspondence | Legal obligation |
| Protecting the site and form from abuse | Server logs, session cookie, rate-limit record | Legitimate interests in keeping the service secure |
We do not use your details for marketing. If that ever changes, we will ask for your consent separately and you will be able to withdraw it at any time.
Who receives your data
Your enquiry is sent by email from our web server to our business mailbox. The companies that provide our web hosting and email process the data on our behalf to make that possible. They act under contract and may not use it for their own purposes. We do not sell your data and we do not share it with lead marketplaces, directories or advertisers.
If you become a client and your project needs it, we may share relevant details with suppliers such as a domain registrar or hosting company, and only with your knowledge.
Where your data is stored
Your enquiry is held by our web hosting and email providers. If you would like to know where your data is stored, ask us at hello@plumborixa.site and we will tell you. Where any transfer outside the UK takes place, we rely on the safeguards UK data protection law requires.
How long we keep it
- Enquiries that do not become projects: deleted within 12 months of our last contact.
- Client project records: kept for the length of the project and for six years afterwards, to meet accounting and tax requirements and to deal with any questions about the work.
- Server logs: kept by our hosting provider for a short period, usually no more than a few weeks.
- Session cookie: expires when you close your browser.
- Rate-limit record: when you send the form successfully, a scrambled (hashed) version of your IP address is kept in a private folder on the server, not reachable from the web, and deleted about an hour later.
How we protect it
The whole site uses HTTPS. The contact form does not store your message in a database on the website. It is sent straight to our mailbox over an encrypted connection. Our accounts use strong, unique passwords and two-step login where available. Access to enquiries is limited to the people who need it to reply.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data;
- object to our use of your data where we rely on legitimate interests;
- ask us to restrict how we use your data;
- ask for data you gave us to be transferred to you or another organisation, where that applies.
To use any of these rights, email hello@plumborixa.site. We will respond within one month. There is normally no charge.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint.
Changes to this notice
We update this notice when the way the site works changes. The date at the top shows when it was last updated.