Privacy, plainly

Plainly Innovate Ltd (company no. 17317719, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ) is the data controller for personal information collected through this site, under the UK GDPR and the Data Protection Act 2018. It is registered with the Information Commissioner's Office, registration reference ZC202529. Questions and requests: hello@plainlyinnovate.com.

The discovery form collects your name, email, phone number (if you give it), preferred contact time and what you tell us about your project. We use this to reply to you and, if we work together, to prepare and deliver the work. The lawful basis is taking steps at your request before entering a contract, and our legitimate interest in responding to enquiries. We do not currently run analytics. If that changes, it will only be with your consent via the cookie banner, and limited to anonymised data (pages visited, rough location, device type).

Nobody buys or borrows your data. It is processed by the tools this business runs on, acting under contract: website hosting, our CRM, email, scheduling and, for clients, invoicing and payments (for example Stripe or GoCardless). Some providers process data outside the UK; where they do, transfers are covered by UK adequacy decisions or the standard safeguards (IDTA / standard contractual clauses).

Enquiries that don't become projects: up to 24 months, then deleted. Client records: six years after the engagement ends, because tax law requires it. Should analytics be added later, that data would be kept per the periods set in that tool, and would not be tied to your identity.

You can ask for a copy of your data, ask us to correct it, delete it, restrict how it's used, object to our use of it, or ask for it in a portable format. Email hello@plainlyinnovate.com and it will be handled within a month. If you're unhappy with how we've dealt with your data, you can complain to the Information Commissioner's Office at ico.org.uk.