Privacy notice

Who we are. PlotLevels is operated by [Company name to be confirmed], [registered address], [company number]. We're the controller of the personal data described here. Contact: hello@plotlevels.com. [ICO registration number, if required.]

What we collect

• Order details: your email address, the site name you enter, the boundary you draw or upload, product chosen and options.
• Payment: handled by Stripe. We never see or store your full card number. We keep the Stripe payment reference and amount.
• Technical: IP address (for rate limiting and fraud prevention) and basic server logs.
• Search: postcode or address text you type is sent to postcodes.io or OpenStreetMap Nominatim to find the location.
• Account workspace: references, project names, tags and notes you add to your sites; your firm name and logo if you upload one for title blocks; a record of which files were downloaded and when (to show you your history and to measure use).
• Share links: if you create a share link we store a scrambled (hashed) copy of it, its expiry, how many times it was opened and what was downloaded through it.
• Free first-report codes: which code was used, by which email, and whether you later bought anything (to measure whether the free offer works). Optional feedback answers you choose to give.
• Usage statistics: cookie-free, aggregate page and event counts (no advertising, no cross-site tracking). You can opt out at any time from the link in the footer.

Why (lawful basis)

• To deliver the report you bought (contract).
• To keep records for tax and accounting (legal obligation).
• To prevent abuse and keep the service secure (legitimate interests).
• To improve the service: aggregate usage statistics, download counts and free-code conversion figures (legitimate interests).
• If you redeemed a free code: one follow-up email asking for feedback. It contains no offers and has an unsubscribe link (legitimate interests; you can object at any time).

We don't sell your data or use it for advertising. We'll only send marketing if you opt in [no marketing planned at launch].

Who we share it with (processors)

• Stripe (payments)
• [Email provider: Resend or Postmark] (delivering your files)
• [Hosting provider and storage provider, region: UK/EU]

How long we keep it

• Generated files and boundaries: deleted 30 days after the order.
• Free previews: deleted after 24 hours.
• Order and payment records: [6 years] for tax purposes.

Your rights

Under UK GDPR you can ask for access to, correction or deletion of your data, or object to processing. Email hello@plotlevels.com. You can complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use no tracking or advertising cookies. Stripe sets cookies on its own checkout page for security. [Confirm before launch.]