Plannit Studio ("Plannit", "we", "us", or "our"), accessible from plannit.shop (the "Site"), is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how it is used, and your rights in relation to it.
Plannit Studio is headquartered in the United Kingdom and operates as the data controller of your personal data. This policy is written in compliance with the UK Data Protection Act 2018, the UK GDPR, and the EU General Data Protection Regulation (GDPR). If you are located outside the UK or EU, additional rights and protections may apply under your local law. We will always endeavour to meet the highest applicable standard.
1. What Information We Collect & Why
We collect only the data necessary to operate and improve our services. The specific legal basis for each type of data is stated below:
- Account & Purchase Data (Legal Basis: Contract Performance): When you purchase a planner, register an account, or contact support, we collect your email address, first name, last name, and billing details. This data is necessary to fulfil your order and manage your account.
- License Verification Data (Legal Basis: Legitimate Interests): We log access code activation metrics (such as the number and location of devices activated under your email) to prevent unauthorised redistribution of our templates. Our legitimate interest is the protection of our intellectual property.
- Communication Data (Legal Basis: Contract Performance / Legitimate Interests): If you contact us for support, we retain records of that correspondence to resolve your issue and improve our services.
2. How Your Data Is Shared with Third Parties
We do not sell your personal data. We share your data only with the following trusted third-party service providers, and only to the extent necessary to operate our services:
- Stripe (Payment Processing): Your billing details and card information are processed directly and securely by Stripe. Plannit does not store or access raw card numbers. Stripe's use of your data is governed by their own Privacy Policy at stripe.com/gb/privacy.
- Supabase (Database & Authentication): Your account data (email, name, purchase records, and access key metadata) is stored in Supabase's secure cloud database. Supabase acts as a data processor on our behalf under a Data Processing Agreement.
- Vercel (Website Hosting & Analytics): Our website is hosted on Vercel's infrastructure. Vercel Analytics may collect anonymised traffic data (such as page views and general browser types) to help us understand how visitors use the site. No personally identifiable information is included in these analytics reports.
International Data Transfers: By purchasing or using our Site from outside the United Kingdom, you acknowledge that your data may be transferred to and stored on servers located in the UK and in countries where our third-party providers operate (including the United States). We ensure that any such transfers are subject to appropriate safeguards, including Standard Contractual Clauses or equivalent mechanisms where required.
3. Cookies & Local Browser Storage
We use cookies and browser-level local storage to provide core website functionality:
- Shopping Cart (Strictly Necessary): Your selected planner editions and basket contents are saved in your browser's local storage so they persist as you navigate the site. These are essential to the checkout process and cannot be opted out of while using the service.
- Authentication (Strictly Necessary): Session tokens and cookies are used to verify your logged-in status and show your purchased library items.
- Analytics (Non-Essential): We may use anonymised analytics cookies via Vercel to improve website performance. You may opt out of non-essential cookies by adjusting your browser settings.
4. Your Rights
Depending on where you are located, you have the following rights in relation to your personal data. We will respond to all valid requests within one calendar month:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data. Please note that exercising this right will simultaneously terminate any active Digital Product licence associated with your account, as the licence is contractually bound to verified account identity. No refund will be issued.
- Right to Restrict Processing: Request that we limit how we use your data under certain conditions.
- Right to Object: Object to processing carried out on the basis of legitimate interests.
- Right to Data Portability: Request that we transfer your data to another provider or directly to you in a machine-readable format.
- California Residents (CCPA): You have additional rights under the California Consumer Privacy Act, including the right to know what personal data is collected, the right to delete personal data, and the right to opt out of the sale of personal data. We do not sell personal data.
- Australian Residents (Privacy Act 1988): You have rights to access and correction of personal data under Australian privacy law. Contact us to exercise these rights.
To exercise any of these rights, please contact us at hello@plannit.shop.
5. Complaints — UK & EU Supervisory Authorities
If you are a UK resident and believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
If you are an EU resident, you may lodge a complaint with the data protection supervisory authority in your EU member state.
6. Data Retention
We retain your account data (name, email address, and purchase records) for as long as your account remains active, or as needed to provide you with continued service access. Financial transaction data and purchase records may be retained for up to 6 years to satisfy legal, tax, and accounting obligations under UK law (Companies Act 2006 and HMRC requirements). When data is no longer needed, it is securely deleted or anonymised.
7. Children's Privacy
Our Site and services are intended for users aged 13 and over. We do not knowingly collect personal data from children under the age of 13 without verifiable parental or guardian consent. If you believe a child under 13 has submitted personal data to our Site without consent, please contact us immediately at hello@plannit.shop and we will promptly investigate and remove such data.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date. For significant changes, we will endeavour to provide notice via email where possible.
9. Contact Us
For any privacy-related questions, data requests, or concerns, please contact us at: hello@plannit.shop