Privacy Policy

Plottr is a UK-based online marketplace connecting landowners with people looking to hire private outdoor space. We operate at plottr.uk and can be contacted at contact@plottr.uk.

Plottr acts as the data controller for personal data collected through this platform. We take your privacy seriously and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We collect the following categories of personal data:

• Account information: name, email address, and password when you register.
• Profile information: phone number, profile photo, and bio if you choose to add them.
• Listing information: property address, photos, description, and pricing submitted by hosts.
• Booking information: dates, guest count, payment amounts, and booking status.
• Payment data: processed securely by Stripe. We do not store your full card details.
• Messages: communications sent between hosts and guests through the platform.
• Usage data: pages visited, searches made, and how you interact with the site (collected via server logs and analytics).

We use your personal data to:

• Create and manage your account
• Process and manage bookings and payments
• Enable communication between hosts and guests
• Send booking confirmations, reminders, and support emails
• Improve the platform through usage analysis
• Comply with legal obligations

Our legal basis for processing is primarily contract performance (to provide the service you've signed up for) and legitimate interests (platform improvement and fraud prevention).

We use essential cookies required for the platform to function (authentication sessions). We do not currently use advertising cookies or third-party tracking cookies beyond what is necessary for analytics.

You can control cookies through your browser settings. Disabling essential cookies may affect your ability to log in.

We do not sell your personal data. We share data only with:

• Stripe — payment processing
• Supabase — secure database and authentication hosting
• Resend — transactional email delivery
• Other users — hosts see guest names and booking details; guests see host name and listing address after booking confirmation

All third-party processors are contractually bound to protect your data in line with UK GDPR.

We retain your account data for as long as your account is active. Booking records are retained for 7 years to comply with financial record-keeping requirements. You can request deletion of your account and associated data at any time (see Your Rights below), subject to legal retention obligations.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data (right to be forgotten), subject to legal obligations
• Restrict or object to processing
• Data portability — receive your data in a machine-readable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, email us at contact@plottr.uk. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure authentication, and access controls. No system is completely secure, and we cannot guarantee absolute security.

We may update this policy from time to time. Material changes will be communicated by email or a notice on the platform. Continued use of Plottr after changes constitutes acceptance.

For any privacy questions or to exercise your rights, contact us at contact@plottr.uk.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.