Privacy Policy
Plots & Leads
Last updated: December 2025
Your privacy matters to us. This Privacy Policy explains how We Do Brand-ish Ltd, trading as Plots & Leads ("we", "us", "our"), collects, uses, stores, and protects your personal data when you use our website design, development, hosting, and maintenance services ("Services").
We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our Services, you acknowledge that you have read and understood this Privacy Policy.
Contents
1.Who We Are
We Do Brand-ish Ltd, trading as Plots & Leads, is the data controller responsible for your personal data.
Our Details
Company: We Do Brand-ish Ltd
Trading as: Plots & Leads
Email: hello@plotsandleads.com
Website: plotsandleads.com
If you have any questions about this Privacy Policy or how we handle your data, please contact us using the details above.
2.Data We Collect
We collect different types of personal data depending on how you interact with us:
2.1 Information You Provide Directly
| Category | Data Collected | When Collected |
|---|---|---|
| Contact Information | Name, email address, phone number, business address | When you enquire, book a consultation, or become a client |
| Business Information | Company name, business type, website URL, social media handles | During consultation and onboarding |
| Payment Information | Billing address, payment card details (processed by Stripe) | When you make a payment |
| Content | Text, images, logos, and other materials you provide for your website | During the website build process |
| Communications | Emails, messages, consultation notes, feedback | Throughout our relationship |
2.2 Information Collected Automatically
| Category | Data Collected | Purpose |
|---|---|---|
| Device Information | IP address, browser type, operating system, device type | Website functionality and security |
| Usage Data | Pages visited, time spent, referring website, click patterns | Improving our website and services |
| Cookies | Session identifiers, preferences, analytics data | See Section 7 (Cookies) |
2.3 Information from Third Parties
We may receive information about you from:
- Partner organisations: If you were referred to us through a partner (e.g., property training academies), we may receive your name and contact details
- Calendly: Booking information when you schedule a consultation
- Stripe: Payment confirmation and billing details
- Social media: If you contact us via social media platforms
3.Call Recording and Transcription
When you book a consultation with us, we may record the video call for quality and training purposes. We use Fathom (fathom.video) to record and transcribe our consultations.
3.1 What We Record
- Video and audio of the consultation
- Automatic transcription of the conversation
3.2 How We Use Recordings
- To accurately capture your requirements
- To create your project brief
- For quality assurance and training
- To refer back to discussed details
3.3 Your Rights Regarding Recordings
- Opt out: You can request we don't record — just let us know before the call
- Deletion: You can request deletion of your recording at any time
- Access: You can request a copy of your transcript
3.4 Recording Retention
Recordings are stored securely and deleted after 90 days unless you become an active customer, in which case they are retained for the duration of your subscription plus 30 days.
4.How We Use Your Data
We use your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Providing our Services | Designing, building, hosting, and maintaining your website; processing payments; providing technical support |
| Communication | Responding to enquiries; sending project updates; providing support; sending service-related emails |
| Account Management | Managing your subscription; processing renewals; handling cancellations |
| Improvement | Analysing how our services are used; identifying areas for improvement; developing new features |
| Marketing | Sending newsletters and promotional content (only with your consent); informing you of new services |
| Legal and Compliance | Complying with legal obligations; protecting our rights; preventing fraud |
5.Legal Basis for Processing
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
| Legal Basis | When We Use It |
|---|---|
| Contract | Processing necessary to fulfil our contract with you (e.g., building your website, processing payments, providing support) |
| Legitimate Interests | Processing necessary for our legitimate business interests, where these don't override your rights (e.g., improving our services, preventing fraud, business administration) |
| Consent | Where you have given clear consent (e.g., marketing communications, non-essential cookies) |
| Legal Obligation | Processing necessary to comply with the law (e.g., tax records, responding to legal requests) |
6.Who We Share Data With
We do not sell your personal data. We may share your data with:
5.1 Service Providers
Third parties who help us deliver our services:
- Stripe: Payment processing
- Hosting providers: Website hosting and infrastructure
- Calendly: Appointment scheduling
- Email service providers: Transactional and marketing emails
- Analytics providers: Website analytics (e.g., Google Analytics)
- CRM systems: Customer relationship management
These providers only process data on our behalf and under our instructions.
5.2 Professional Advisers
We may share data with our accountants, lawyers, or other professional advisers where necessary for business purposes.
5.3 Legal Requirements
We may disclose your data if required by law, court order, or government request, or to protect our rights, property, or safety.
5.4 Business Transfers
If we sell, merge, or transfer our business, your data may be transferred to the new owner. We will notify you of any such change.
7.Third-Party Services
Our website and services integrate with various third-party services. Each has its own privacy policy:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing | stripe.com/privacy |
| Calendly | Appointment booking | calendly.com/privacy |
| Google Analytics | Website analytics | policies.google.com/privacy |
| HubSpot | CRM and email | legal.hubspot.com/privacy-policy |
| Fathom | Call recording and transcription | fathom.video/privacy |
We encourage you to review the privacy policies of any third-party services you interact with.
9.Data Retention
We retain your personal data only for as long as necessary:
| Data Type | Retention Period |
|---|---|
| Client records | Duration of relationship plus 6 years (for legal and accounting purposes) |
| Website backups | 30 days after subscription termination |
| Enquiries (non-clients) | 2 years from last contact |
| Marketing consent | Until you unsubscribe, then 1 year for compliance records |
| Website analytics | 26 months (Google Analytics default) |
| Payment records | 7 years (HMRC requirements) |
| Call recordings | 90 days, or duration of subscription plus 30 days for active customers |
When data is no longer needed, we securely delete or anonymise it.
10.Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Your Data Protection Rights
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your data in certain circumstances
- Right to Restrict Processing: Request that we limit how we use your data
- Right to Data Portability: Request your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests or for marketing
- Rights Related to Automated Decision-Making: Not be subject to decisions based solely on automated processing
9.1 Exercising Your Rights
To exercise any of these rights, please contact us at hello@plotsandleads.com. We will respond within one month. We may need to verify your identity before processing your request.
9.2 Complaints
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.
11.Data Security
We take the security of your data seriously and implement appropriate measures to protect it:
- Encryption: Data transmitted to and from our website is encrypted using SSL/TLS
- Secure hosting: Our websites are hosted on secure, managed infrastructure
- Access controls: Only authorised personnel have access to personal data
- Payment security: Card payments are processed by Stripe (PCI-DSS compliant); we do not store full card details
- Regular backups: Data is backed up regularly and stored securely
- Monitoring: We monitor for security threats and vulnerabilities
While we implement robust security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you and relevant authorities of any data breach as required by law.
12.International Transfers
Your data is primarily stored and processed in the United Kingdom. However, some of our third-party service providers may process data outside the UK (e.g., in the USA or EU).
When data is transferred internationally, we ensure appropriate safeguards are in place:
- Transfers to countries with adequate data protection laws (as recognised by the UK)
- Standard Contractual Clauses approved by the UK Information Commissioner
- Binding Corporate Rules where applicable
- Certification schemes (e.g., EU-US Data Privacy Framework)
You can contact us for more information about the safeguards in place for specific transfers.
13.Children's Privacy
Our Services are designed for businesses and are not intended for children under 18 years of age. We do not knowingly collect personal data from children.
If you believe we have collected data from a child, please contact us immediately at hello@plotsandleads.com, and we will take steps to delete it.
14.Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
When we make changes:
- We will update the "Last updated" date at the top of this policy
- For significant changes, we will notify you by email or prominent notice on our website
- We encourage you to review this policy periodically
Your continued use of our Services after changes are posted constitutes acceptance of the updated policy.
15.Contact Us
If you have any questions about this Privacy Policy, want to exercise your rights, or have concerns about how we handle your data, please contact us:
We're Here to Help
We take your privacy seriously and are committed to being transparent about how we use your data. If you have any questions or concerns, please don't hesitate to get in touch.