Privacy Policy

1. Who is responsible for your data

Plumbytes Software LP is the controller of personal data collected through plumbytes.net. We are a limited partnership registered in Scotland (company number SL015457) with our registered office at 39/5 Granton Crescent, Edinburgh, EH5 1BN, United Kingdom. For anything relating to personal data, contact [email protected].

This policy covers the website only. Where we process personal data on behalf of clients in the course of providing services, we do so under the data processing terms in our agreement with that client.

2. What we collect

Information you give us

When you contact us by email or through the contact page we receive the information you choose to send: typically your name, email address, company name, the subject of your enquiry and the content of your message, together with any follow-up correspondence.

Information collected automatically

Our hosting provider records standard server logs when you visit the site. These include your IP address, the pages requested, the date and time, the referring page and your browser and device type. These logs are used for security and to keep the site running and are not combined with any other information about you.

What we do not collect

This website does not use analytics, advertising or tracking cookies, does not load social-media widgets and does not profile visitors. We do not knowingly collect personal data from children.

3. Why we use it and our legal basis

Purpose	Data	Legal basis (UK GDPR Article 6)
Responding to enquiries and discussing potential work	Contact details and message content	Our legitimate interest in running our business and responding to people who contact us; where relevant, steps taken at your request before entering into a contract
Keeping the website secure and available	Server logs	Our legitimate interest in protecting the site and our systems
Keeping records and complying with legal obligations	Correspondence and, where applicable, contract records	Compliance with legal obligations, including accounting and tax law; our legitimate interest in establishing, exercising or defending legal claims

4. Who we share it with

We do not sell personal data and we do not share it with third parties for their marketing. We use a small number of service providers who process data on our behalf and under our instructions:

• our web hosting provider, which stores the site and generates server logs;
• our email provider, which stores and transmits correspondence;
• professional advisers such as accountants and lawyers, where necessary.

We may also disclose personal data where required by law, regulation or a court order, or to protect our rights or the safety of others.

5. International transfers

Some of our service providers store data outside the United Kingdom, including in the European Economic Area and the United States. Where personal data leaves the UK we rely on an adequacy decision or on appropriate safeguards such as the UK International Data Transfer Agreement or the Addendum to the EU Standard Contractual Clauses, as applicable.

6. How long we keep it

• Server logs: up to 30 days.
• Enquiries that do not lead to an engagement: up to 24 months from our last exchange, so that we can respond to follow-up questions.
• Correspondence and records relating to an engagement: for the duration of the engagement and for up to seven years afterwards, in line with UK accounting and tax record-keeping requirements.

7. Your rights

Under the UK GDPR and the Data Protection Act 2018 you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data in certain circumstances;
• object to, or ask us to restrict, processing based on legitimate interests;
• receive data you have provided to us in a portable format, where processing is based on consent or contract;
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email [email protected]. We will respond within one month. We may ask you to confirm your identity before acting on a request.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or by telephone on 0303 123 1113. If you are located in the EEA you may also contact your local supervisory authority. We would appreciate the chance to resolve your concern first.

8. Cookies

This website sets no cookies of its own. Because we use only strictly necessary technical processing, no cookie banner is shown. If this changes we will update this policy and ask for consent where the law requires it.

9. Security

The website is served over HTTPS. Access to correspondence and records is limited to the partners and staff who need it, and our service providers are chosen with regard to their security practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable steps to protect the data we hold.

10. Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last changed. Significant changes will be highlighted on this page.

11. Google API Services

Plumbytes Software LP uses the Google Ads API to retrieve advertising performance data for Google Ads accounts that we own or manage.

This data is used only for internal reporting and analysis, is stored in our own Google Cloud project, and is not sold or shared with third parties.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

12. Contact

Plumbytes Software LP
39/5 Granton Crescent, Edinburgh, EH5 1BN, United Kingdom
[email protected]