Privacy Policy

1. Introduction

At PH100 Ltd, trading as PLY ("we", "our", "us"), we are committed to protecting and respecting your privacy. This policy explains how we handle your personal information when you use our website, products, and services. It also outlines your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

2. At a Glance: Your Privacy Rights

  • Transparency: We tell you what data we collect and why.
  • Control: You can access, correct, delete, or move your data.
  • Choice: You decide how we use your data for marketing.
  • Security: We use industry-standard methods to protect your data.

3. What Information Do We Collect?

We collect personal data when you sign up for PLY, subscribe to our services or purchase products, provide feedback or contact us, or voluntarily share dietary requirements or special accessibility needs for events or services.

  • Identity Data: Name, username, date of birth
  • Contact Data: Email, phone number, address
  • Financial Data: Payment card details, bank account info
  • Transaction Data: Purchase history
  • Device Data: IP address, browser type
  • Content Data: Photos or files uploaded
  • Profile Data: Preferences, survey responses
  • Usage Data: Website/app usage
  • Marketing Data: Communication preferences
  • Location Data: GPS location (with consent)
  • Special Category Data: Dietary requirements, accessibility or special needs

4. How Do We Use Your Information?

We only use your personal data when allowed by law. Legal bases include contract performance, legal obligation, legitimate interest, and consent.

  • Register you as a user (Identity, Contact) — Legal basis: Performance of contract
  • Process purchases (Identity, Contact, Financial) — Legal basis: Performance of contract
  • Communicate service updates (Identity, Contact) — Legal basis: Legal obligation, Legitimate interest
  • Send marketing emails (Identity, Contact, Marketing) — Legal basis: Consent
  • Administer promotions (Identity, Contact, Profile) — Legal basis: Consent, Legitimate interest
  • Improve and secure services (Device, Usage) — Legal basis: Legitimate interest
  • Personalise content/ads (Usage, Profile, Location) — Legal basis: Consent
  • Accommodate special needs or dietary requirements (Special Category Data) — Legal basis: Explicit consent

5. Who Processes Your Data

Your personal data may be accessed or processed by PLY personnel, subcontractors and partners engaged in providing our services, our internal IT, marketing and admin teams, and external third parties including IT and payment service providers, legal and professional advisers, regulators and law enforcement (if required by law), and successors in a merger or acquisition.

Subcontractors and partners include: Customer.io, Respond.io, Meta, NocoDB, WhatsApp Business App, Paperform, Pipedream, Stripe, Google EU, and Hotjar.

6. International Transfers

If data is transferred outside the UK/EEA, we ensure an adequate level of protection through Standard Contractual Clauses (SCCs), transfers to countries with adequacy decisions, or other legally approved safeguards.

7. Data Retention

We retain data only as long as needed for the purposes collected.

  • Account Data: 6 years after last activity — Legal basis: Legitimate interest
  • Financial Records: 6 years — Legal basis: Legal obligation
  • Marketing Preferences: Until withdrawn — Legal basis: Consent
  • Special Category Data (e.g. dietary or accessibility needs): Until the event/service is delivered or consent is withdrawn — Legal basis: Explicit consent
  • Anonymised Data: Indefinitely — Legal basis: Not applicable

8. Your Legal Rights

Under GDPR and the UK DPA 2018 you have the following rights. To exercise any of these rights, email us at: hello@plysocial.com. We aim to respond within one month and may need to verify your identity.

  • Access and Rectification: Obtain and correct inaccurate or incomplete data
  • Erasure: Request deletion of your data
  • Processing Restrictions: Limit how your data is processed
  • Objection: Refuse certain data processing, including profiling for commercial purposes
  • Portability: Retrieve your data in a structured format
  • Withdraw Consent: Revoke consent for processing at any time (previous processing remains lawful)

9. Consent Management

We use clear and granular methods for obtaining consent. You can opt-in via forms and toggles, manage your preferences in your account or via unsubscribe links, and withdraw consent at any time.

We comply with the Privacy and Electronic Communications Regulations (PECR) when sending electronic marketing.

10. Data Protection Measures

Your data is stored on secure servers protected by firewalls, antivirus software, and restricted access. We use Single Sign-On (SSO), Multi-Factor Authentication (MFA), and organisational and technical measures to prevent unauthorised access, alteration, or disclosure.

User Responsibility: You are responsible for safeguarding your account password and ensuring you log out after each session.

11. Data Security and Breaches

We protect your data using encryption (e.g. SSL), secure servers, and access controls.

If a data breach occurs, we will notify affected individuals and regulators as required.

12. Cookies and Tracking

We use cookies to enhance your experience, remember preferences, and analyse site/app performance.

See our Cookies Policy for full details and how to manage preferences.

13. Changes to This Policy

We regularly review and update this policy. Changes will be posted on our website and, where appropriate, notified by email.

14. Contact Us

For questions or complaints about your data email: hello@plysocial.com

Last Reviewed: 25 February 2026