We are a UK company. We hold two different kinds of personal data and we treat them differently, so this policy is split in two:

1. Data about you, our customer — your account, your billing, your visits to our website. For this we are the controller: we decide what is collected and why.
2. Data you put into Planbrand about other people — your contacts, your form submissions, your portal customers. For this we are the processor: you decide, we act on your instructions. Section 8 covers it, and the Data Processing Agreement is the binding version.

We do not sell personal data, and we do not share it for advertising. We are registered with the Information Commissioner's Office under ZB442643.

Planbrand is the trading name of PLANBRAND.COM LTD, a private limited company registered in England & Wales.

We have not appointed a Data Protection Officer. We are not required to: we are not a public authority, and our core activity is not large-scale monitoring or large-scale processing of special-category data. Data protection questions go to the address above and are answered by a named person, not a queue.

2.1 When you create an account

2.2 When you pay us

Stripe processes the payment. We never see or store your card number. We keep the subscription record — plan, amount, renewal date, and Stripe's own customer reference — because we need it to run your account and to satisfy HMRC.

Lawful basis: contract, and legal obligation for the tax records.

2.3 When you use the product

We record which features you use and when, so we can tell what is working. This is tied to your account. Lawful basis: legitimate interests — we cannot improve a product we cannot measure, and the interest does not override your rights because the data is about your use of a business tool, not about your private life.

We also write an audit log of significant actions — who changed what, when, from which IP address and browser. This exists for your protection as much as ours: it is how a disputed change gets resolved and how unauthorised access is detected. Lawful basis: legitimate interests (security and accountability).

2.4 When you visit planbrand.com

See the Cookie Policy for the full and accurate list, including the Google Analytics tags we currently run and what we are doing about consent for them.

• We do not sell personal data. There is no circumstance in which we would.
• We do not share personal data with advertising networks or data brokers.
• We do not build profiles of individuals for targeting.
• We do not use your customers' data to train AI models, ours or anyone else's.
• We make no automated decisions that produce legal or similarly significant effects about you. Nothing in Planbrand decides anything about a person on its own.

Only the suppliers we need to run the service, each under contract and each permitted to use the data solely to provide their service to us. The current, complete list — including what each one sees and where they are — is published and maintained at Subprocessors.

We will also disclose data where the law requires it: a court order, a valid request from a regulator or law enforcement. Where we are legally permitted to tell you that this has happened, we will.

If Planbrand is ever sold or merged, personal data would transfer to the buyer. You would be told before it happened, not after.

Planbrand's production systems run on Hetzner Online GmbH infrastructure in Germany (European Union). That is where the database, the file storage and the application servers are. Backups stay in the same region.

Some suppliers process data outside the UK/EEA — notably Stripe and Anthropic, both in the United States. Those transfers rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses. The Subprocessors page names each one and the safeguard used.

Under UK GDPR you can ask us to:

• give you a copy of the personal data we hold about you;
• correct it if it is wrong;
• delete it ("right to erasure");
• restrict or object to how we use it, including any use based on legitimate interests;
• port it — receive it in a structured, machine-readable format;
• withdraw consent where consent is what we relied on.

Email info@planbrand.com. We respond within one month, and we do not charge. We will ask you to confirm your identity first — otherwise the right to access becomes a way for someone else to read your data.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not have to come to us first, though we would rather you did.

When you load contacts, collect form submissions, or run a customer portal, you are the controller of that data and we are your processor. Practically, that means:

• You decide what to collect, why, and on what lawful basis. We do not.
• You are responsible for telling those people what you are doing with their data — your own privacy notice, not this one, covers them.
• We act only on your instructions, and we do not use that data for our own purposes.
• If one of your contacts asks us directly to access or delete their data, we will not action it ourselves. We will pass the request to you, because it is not ours to answer.
• The full, binding terms are in the Data Processing Agreement, which forms part of your contract with us automatically — you do not need to sign anything separately.

The Security Overview sets out what we actually do, in specifics rather than adjectives. In summary: encryption in transit and at rest, per-workspace data isolation enforced in the database, audit logging of significant actions, encrypted storage of credentials you connect, and least-privilege access for the small number of people who can reach production.

We are not currently ISO 27001 certified or SOC 2 audited, and we do not claim to be. If that changes, this page will say so and will name the auditor.

Planbrand is a business tool, sold to businesses. It is not directed at children and we do not knowingly collect data about anyone under 16. If you believe we have, email info@planbrand.com and we will delete it.

If we make a change that materially affects your rights, we will email you at least 30 days before it takes effect. Minor corrections are made as needed and the version number and date at the top always tell you what you are reading.

Previous versions are available on request.