How we look after your data

What we keep when you make a report, why, for how long, and what you can ask us to do.

Who we are

Plinth is run by [OWNER: legal name, and trading name if different], [postal address]. We decide how your data is used. You can reach us at [CONTACT, on DOMAIN].

What we keep

• Your email address.
• Whether you ticked "Don't email me about Plinth".
• The site: the address you typed and the building you clicked.
• What you told us about the works, and your answers to the questions.
• The report we made, and what it found.
• Anything you write in the feedback box. If you put a name in it, that is kept too.
• Your answer to the optional question after the report, if you give one.

Why, and what allows us to

• To make your report and keep your reports together. We need this to give you what you asked for.
• To count your free report, and to limit how many reports one email can make in a day, so the service is not misused. This is in our legitimate interest.
• To reply to what you tell us. This is part of giving you the report.
• To make Plinth better: we look at sites, findings, feedback and how reports are used. This is in our legitimate interest.
• To tell you now and then about Plinth, unless you ticked the box. This is in our legitimate interest, and you can object at any time.
• The optional question is only used if you answer it.

How long we keep it

Your email is deleted 30 days after the report it came with.

After that we keep, without your email:

• a one-way code made from your email, so we can tell when the same email is given again and your free report has been used. We cannot turn the code back into your email;
• the part of your email after the @, such as your firm's name, so we can see how many people at one firm use Plinth;
• the site, the report's findings, your feedback, your answer to the optional question and how the report was used.

We keep these for as long as we need them for the reasons above, and only as long as each data source's terms allow.

Who else sees it

• Fly.io runs our servers, in London. It holds everything above for us.
• To make the report, we send the site's address and position to public data services, such as planning.data.gov.uk, the Environment Agency, Ordnance Survey, the NBN Atlas and UK PlanIt. We never send them your email.
• An AI model, run by Anthropic, reads your line about the works along with the site's address and position. It does not see your email. [Where Anthropic processes it, and under what terms: to be checked before this is published.]
• The fonts on our pages come from Google Fonts, so Google sees your browser's internet address when a page loads.
• Anyone you send a report's link to can open that report. The link does not show your email.

We do not sell your data, and we do not share it with anyone else.

What you can ask us

You can ask us for a copy of what we hold about you, to correct it, to delete it, or to stop using it. You can object to emails about Plinth at any time, and we will stop. Write to [CONTACT]. We answer within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO), the UK regulator for data protection: ico.org.uk.

Last updated [date].