Privacy policy

Plan 9 Ltd is the data controller for this website. You can reach us at Unit Z, Vincent’s Yard, 23 Alphabet Mews, London SW9 0FN, or by email at [email protected].

• When you contact us: your name, email address, company, the services you’re interested in and your message. We use this to reply and, if we work together, to run the project.
• When you message us on WhatsApp: your phone number, name and messages, handled by WhatsApp (Meta) under their own privacy policy.
• When you browse: if you accept analytics cookies, anonymous information about the pages you visit, how long you stay and roughly where you came from.

Our popup shows details your browser shares with every website, such as your browser, screen size and timezone. To show your approximate location and network, your IP address is sent to a lookup service (ipwho.is, with geojs.io, freeipapi.com and ipify.org as backups). These details are shown to you only. We don’t save them or send them to our servers.

We only set non-essential cookies if you click Accept. If you do, Google Analytics, loaded through Google Tag Manager, uses cookies to measure how the site is used. If you click Reject, those cookies are not set.

We also save a few small settings in your browser so the site works as you expect: your cookie choice, light or dark mode, and, only if you accept, a visit counter. These never leave your device.

You can change your choice at any time using Cookie settings, or by clearing cookies in your browser.

• Replying to enquiries: our legitimate interest in responding to people who contact us, or taking steps at your request before entering a contract.
• Client work: performing our contract with you.
• Analytics cookies: your consent, which you can withdraw at any time.

We don’t sell your data. We only share it with services that help us run the business, under contract and only for that purpose: our email and website hosting providers, Google (analytics, only with your consent) and WhatsApp (if you message us there).

Some of these providers, and our partner teams in Greece, India and California, may process data outside the UK. When that happens we use approved safeguards such as UK adequacy regulations or the International Data Transfer Agreement.

• Enquiries that don’t become projects: up to 2 years, then deleted.
• Client records: for the length of our relationship and up to 6 years after, for legal and accounting reasons.
• Analytics data: up to 14 months.

Under UK data protection law you can ask to see, correct or delete your data, object to or restrict how we use it, ask for a copy to take elsewhere, and withdraw consent at any time. Email [email protected] and we’ll respond within one month.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

We’ll update this page if anything changes. The date at the top shows when it was last revised.