1. Data controller

PlanBuildCo (trading as PlanBuild3D) is the data controller for the personal data collected through this website. We are based in Poole, Dorset, United Kingdom.

Contact: hello@planbuild.co · 0800 056 7069

2. What we collect

We collect the following categories of personal data:

• Identity data: Name, email address, phone number
• Address data: Property address, postcode
• Project data: Project type, photos, Rightmove links, sketches, measurements
• Payment data: Processed by Stripe — we do not store card details
• Technical data: IP address, browser type, pages visited, referral source
• Communication data: Messages sent through the portal or by email

3. How we collect it

• Booking wizards and contact forms on this website
• Your customer portal and project communications
• Stripe and GoCardless payment processing
• Google Tag Manager, Google Analytics 4, and advertising pixels
• Phone calls and emails with your coordinator

4. Why we process it

We process your personal data for the following purposes:

• Contract performance: To deliver the design, planning, and build coordination services you have ordered
• Legitimate interest: To communicate project updates, recommend relevant next steps, and improve our services
• Consent: To send marketing communications (you can opt out at any time)
• Legal obligation: To comply with UK tax, accounting, and regulatory requirements

5. Third-party processors

We share personal data with the following trusted processors:

• Stripe: Payment processing (PCI DSS Level 1 certified)
• GoHighLevel: CRM, email, and SMS communications
• Google (Analytics, Tag Manager, Ads): Website analytics and advertising measurement
• Meta (Facebook, Instagram): Advertising measurement and retargeting
• Vercel: Website hosting

We do not sell your personal data to any third party.

6. Data retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Project data is retained for 7 years after project completion for warranty, insurance, and regulatory purposes. Marketing data is retained until you withdraw consent.

7. Your rights under UK GDPR

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct inaccurate or incomplete data
• Erasure: Ask us to delete your personal data (subject to legal retention requirements)
• Restriction: Ask us to limit how we use your data
• Portability: Request your data in a machine-readable format
• Objection: Object to processing based on legitimate interest or for direct marketing

To exercise any of these rights, email hello@planbuild.co. We will respond within 30 days.

8. Data security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (TLS/SSL), secure hosting with Vercel, and PCI-compliant payment processing through Stripe.

9. International transfers

Some of our processors (Stripe, Google, Vercel) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses and adequacy decisions.

10. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to address your concerns first — please contact us at hello@planbuild.co.