Privacy, plainly

Plainly Innovate Ltd (company no. 17317719, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ) is the data controller for personal information collected through this site, under the UK GDPR and the Data Protection Act 2018. Questions and requests: hello@plainlyinnovate.com.

The discovery form collects your name, email, phone number (if you give it), preferred contact time and what you tell us about your project. We use this to reply to you and, if we work together, to prepare and deliver the work. The lawful basis is taking steps at your request before entering a contract, and our legitimate interest in responding to enquiries. With your consent via the cookie banner, we also collect anonymised analytics (pages visited, rough location, device type) to understand what's working.

Nobody buys or borrows your data. It is processed by the tools this business runs on, acting under contract: website hosting, our CRM, email, scheduling and, for clients, invoicing and payments (for example Stripe or GoCardless). Some providers process data outside the UK; where they do, transfers are covered by UK adequacy decisions or the standard safeguards (IDTA / standard contractual clauses).

Enquiries that don't become projects: up to 24 months, then deleted. Client records: six years after the engagement ends, because tax law requires it. Analytics data is retained per the periods set in the analytics tool, and is not tied to your identity.

You can ask for a copy of your data, ask us to correct it, delete it, restrict how it's used, object to our use of it, or ask for it in a portable format. Email hello@plainlyinnovate.com and it will be handled within a month. If you're unhappy with how we've dealt with your data, you can complain to the Information Commissioner's Office at ico.org.uk.