Data controller and compliance
PLACINTA LTD acts as a data controller for corporate contact information and may act as a data processor when handling information on a Client’s behalf to configure CRM, AI and other systems. We process data in accordance with applicable privacy law, including the UK GDPR and Data Protection Act 2018, and support Clients with other relevant frameworks such as the EU GDPR and CCPA where contractually required.
Information we collect
- Information you provide: Names, corporate emails, phone numbers, messenger IDs, company details, billing records and technical specifications.
- Client operational data: Databases, customer information, chat histories, credentials and system data shared for delivery of agreed services.
- Technical data: IP address, browser type, device information, cookies and basic session or security logs generated when using our website.
AI data processing and LLM safety
- No public-model training: We do not intentionally use Client proprietary content, knowledge bases or end-user conversations to train public foundation models.
- Enterprise API isolation: Where available and appropriate, integrations use enterprise-grade API channels with provider model-training use disabled.
- Data minimisation: We design AI pipelines to limit unnecessary personal information sent to external services and apply redaction or access controls where appropriate.
Legal bases for processing
- Contract: To prepare, perform and manage our Service Agreements and onboarding requests.
- Legitimate interests: To protect infrastructure, operate the website, improve services and manage B2B relationships.
- Legal obligation: To comply with tax, accounting, fraud-prevention and lawful reporting requirements.
- Consent: Where consent is the appropriate legal basis and can be withdrawn.
Sharing and international transfers
We do not sell or rent personal or corporate data. We may share the minimum necessary information with vetted subprocessors, cloud providers, payment services and communication tools required to deliver our services, or with public authorities where required by a binding legal request.
Website enquiries are transmitted through FormSubmit for email delivery. FormSubmit may retain form submissions for up to 30 days to provide its delivery and submission-archive service.
Where information is transferred internationally, we use appropriate contractual and organisational safeguards required by applicable law.
Security measures
Depending on the system and engagement, controls may include encryption in transit and at rest, least-privilege access, multi-factor authentication, access logging, signed confidentiality agreements, protected credential management and monitoring of integration endpoints. No method of storage or transmission is completely risk-free, but we apply controls proportionate to the information and service.
Data retention
- Account and billing data: Retained while the relationship is active and generally for up to seven years where required for financial and legal records.
- Project data: Repositories, system snapshots and credentials are transferred or securely deleted within 30 days after completion and sign-off unless ongoing maintenance or another contractual retention period applies.
- Enquiries: Contact records are retained only as long as reasonably needed to manage the enquiry and any resulting relationship. The form-delivery provider’s submission archive is limited to 30 days.
Your rights and contact
Depending on your jurisdiction, you may have rights to access, correct, erase, restrict or receive a portable copy of personal information, and to object to certain processing. You may also complain to the UK Information Commissioner’s Office or another relevant supervisory authority.
To exercise a privacy right, email placintaltd@gmail.com. We may need to verify your identity before completing the request.