Privacy Policy

This Privacy Policy explains how Plodium ("we", "us", "our") collects, uses, and protects your personal information when using our services at plodium.com. We operate under the laws of England and Wales and comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

We collect the following data to provide high-performance infrastructure solutions:

1. Personal Data: This includes your legal name, email address, physical address, and phone number.This allows us to send important service updates, security alerts, and verify your identity if you need support.

2. Usage & Technical Data: We collect IP addresses, device identifiers, browser types, and activity logs within our control panel and billing portal. This is used for security monitoring and DDoS mitigation.

3. Billing Information: Payment data is processed exclusively through Stripe. Plodium does not store full credit card details on its servers.

We process data under the following legal grounds:

1. Contractual Necessity: Processing required to provide the services you subscribed to.

2. Legal Obligation: Processing required to comply with UK law, including the Online Safety Act.

3. Recognised Legitimate Interests: As defined by the 2025 Act, we process data for the purposes of network security, crime prevention, and safeguarding our infrastructure.

We use cookies to maintain your active session, secure our billing portal, and analyze site performance. Under the Data (Use and Access) Act 2025, explicit consent is not required for "low-risk" cookies necessary for security or basic site functionality. You may manage non-essential analytics cookies through your browser settings, though this may limit your access to certain features.

Plodium employs industry-standard encryption and access controls. We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to satisfy legal, accounting, or reporting requirements. Upon account termination, data is typically deleted within 30 days, unless a legal "litigation hold" or statutory requirement applies.

Under UK law, you have the right to access, rectify, or erase your data. You may also object to or restrict certain processing. Per the 2025 Act, we may "stop the clock" on Data Subject Access Requests (DSAR) if we reasonably require further information to verify your identity or clarify the scope of your request. Requests should be sent to support@plodium.com.

If you have concerns about our data practices, you have a right to complain. Under the Data (Use and Access) Act 2025, you are encouraged to contact us first at support@plodium.com to resolve the matter. If we cannot resolve it within 30 days, you may escalate your complaint to the Information Commissioner's Office (ICO).

In alignment with our ToS and UK online safety standards, we do not knowingly collect data from children under 13. Users between 13 and 18 are processed with higher protection standards. If you believe a child under 13 has provided us with data, contact us immediately for removal.