Privacy Policy

This Privacy Policy applies between you, the User of this Website, and Plumir, the owner and provider of this Website. 

Plumir takes the privacy of your information very seriously. This Privacy Policy applies to our use of any and all Data collected by us or provided by you in relation to your use of the Website.​

​Please read this Privacy Policy carefully.

Definitions and Interpretation

(1) In this Privacy Policy, the following definitions are used:

(2) In this Privacy Policy, unless the context requires a different interpretation:

a. the singular includes the plural and vice versa;

b. references to sub-clauses, clauses, schedules or appendices are to sub-clauses, clauses, schedules or appendices of this Privacy Policy;

c. a reference to a person includes firms, companies, government entities, trusts and partnerships;

d. "including" is understood to mean "including without limitation";

e. reference to any statutory provision includes any modification or amendment of it;

f. the headings and sub-headings do not form part of this Privacy Policy.

​Scope of this Privacy Policy

(3) This Privacy Policy applies only to the actions of Plumir and Users with respect to this Website. It does not extend to any websites that can be accessed from this Website including, but not limited to, any links we may provide to social media websites.

(4) For the purposes of Data Protection Laws, Plumir is the “data controller” in relation to personal data processed through the Website, except where third-party providers (such as Stripe) act as independent data controllers for payment and financial processing activities.    

​Data Collected

(5) We may collect the following Data, which includes personal Data, from you:

a. identity information, including your name and username;

b. contact information, including your email address and telephone number;

c. account information, including login credentials and profile details;

d. transaction information, including details of purchases, seller subscriptions, listings, and marketplace activity;

e. payment information relating to subscription status and transaction history (payment card and bank details are processed directly by Stripe and are not stored by Plumir);

f. technical information, including IP address, browser type, device information, and usage data;

g. communications data, including messages sent through the marketplace or customer support enquiries.

​How We Collect Data

(6) We collect personal data in the following ways:

a. data provided directly by you; and

b. data collected automatically when you use the Website.

Data That is Given to Us by You

(7) You may provide personal data when you:

a. create an account as a buyer or seller;

b. subscribe to a seller membership;

c. complete Stripe onboarding to receive payments;

d. list products or services on the marketplace;

e. contact us via email or through the Website;

f. subscribe to marketing communications (where applicable).

Data That is Collected Automatically

(8) To the extent that you access the Website, we will collect your Data automatically, for example:

a. IP address;

b. browser type and device information;

c. date and time of access;

d. pages visited and actions taken within the marketplace.

This information is collected to ensure the secure operation of the Website and improve functionality. We do not use analytics or advertising tracking technologies.

​Our Use of Data

(9) We use personal data to:

a. create and manage user accounts;

b. provide and operate our online marketplace services;

c. process seller subscriptions and facilitate marketplace transactions;

d. communicate with you regarding your account or transactions;

e. provide customer support;

f. improve and maintain the security of the Website;

g. comply with legal and regulatory obligations.

(10) Our legal bases for processing personal data include:

a. performance of a contract (for example, when providing marketplace services or processing seller subscriptions);

b. compliance with legal obligations;

c. legitimate interests, including maintaining platform security and preventing fraud;

d. consent, where required (for example, for marketing communications).

(11) Seller subscriptions operate on a recurring billing basis. Subscription payments are processed securely by Stripe. Sellers may cancel their subscription at any time in accordance with our Terms of Service.

(12) You may withdraw consent to marketing communications at any time by following the unsubscribe instructions provided or by contacting us directly.

​Who We Share Data With

(13) We may share your personal data with the following categories of recipients:

a. platform and hosting providers – We use Sharetribe to operate and host our online marketplace. Sharetribe processes certain personal data on our behalf in order to provide hosting, infrastructure, security, and marketplace functionality.

b. payment service providers – We use Stripe to process subscription payments and to facilitate seller payouts through Stripe Connect. Stripe may collect and process payment and identity verification information directly from you in accordance with its own Privacy Policy. Plumir does not store full payment card details.

c. professional advisers – including legal, accounting, and regulatory advisers where necessary.

d. regulatory authorities, law enforcement, or government bodies – where required to comply with legal obligations, prevent fraud, or enforce our Terms of Service.

All third parties are required to respect the security of your personal data and to process it in accordance with applicable data protection laws.

​Keeping Data Secure

(14) We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.

(15) Security measures include:

a. secure password-protected user accounts;

b. encrypted connections (HTTPS/SSL) for data transmission;

c. secure hosting infrastructure provided by Sharetribe;

d. secure payment processing through Stripe.

(16) While we take reasonable steps to protect your data, no system can be guaranteed to be completely secure. If you believe your data has been compromised, please contact us immediately at business@plumir.com.

(17) In the event of a personal data breach, we will comply with our legal obligations under applicable data protection laws, including notifying the Information Commissioner’s Office where required.

​Data Retention

(18) We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, tax, accounting, or regulatory requirements.

(19) Account information will generally be retained for the duration of your account and for a reasonable period thereafter to comply with legal obligations and resolve disputes.

(20) Transaction and subscription records may be retained for up to six years to comply with UK tax and accounting requirements.

(21) Where data is no longer required, it will be securely deleted or anonymised. Certain information may remain in backup systems for a limited period.

​Your Rights

(22) Under UK GDPR, you have the following rights:

a. the right to access the personal data we hold about you;.

b. the right to request correction of inaccurate or incomplete data;

c. the right to request erasure of your data (in certain circumstances);

d. the right to restrict processing of your data;

e. the right to data portability;

f. the right to object to processing based on legitimate interests;

g. the right to withdraw consent at any time where processing is based on consent.

​(23) To exercise any of your rights, please contact us at business@plumir.com.

(24) If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): https://ico.org.uk

(25) We may request proof of identity before responding to a data protection request.

​Links to Other Websites

(26) This Website may contain links to third-party websites or services. We have no control over such websites and are not responsible for their content, privacy practices, or policies. You should review their privacy policies before providing any personal data.

​Changes of Business Ownership and Control

(27) Plumir may transfer personal data to a new owner or controlling entity in the event of a merger, sale, restructuring, or acquisition of all or part of the business.

(28) Any such transfer will be subject to appropriate safeguards to protect your personal data.

Cookies

(29) Our Website uses only strictly necessary cookies required for the operation of the marketplace, including:

• Authentication and login sessions;
• Security and fraud prevention;
• Maintaining seller and buyer sessions;
• Essential marketplace functionality.

(30) We do not use analytics, advertising, or tracking cookies.

(31) When you are redirected to Stripe to complete subscription payments or onboarding, Stripe may place its own cookies in accordance with its Privacy Policy. Plumir does not control these cookies.

(32) Because we use only strictly necessary cookies, a cookie consent banner is not required under current UK regulations.

(33) You can control or delete cookies through your browser settings. However, disabling essential cookies may prevent the Website from functioning properly. ​

(34) As our Website uses only strictly necessary cookies required for its operation, we do not provide a cookie preference management tool.

(35) You can control or delete cookies through your browser settings. Most browsers automatically accept cookies, but you can modify your settings to decline cookies if you prefer.

(36) Please note that disabling strictly necessary cookies may prevent the Website from functioning properly, including login, subscription management, and payment processing features.

(37) For more information about managing cookies, please refer to your browser’s help documentation.

​​General

(38) You may not transfer any of your rights under this Privacy Policy to another person. We may transfer our rights where your data protection rights are not affected.

(39) If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.

(40) No delay or failure to exercise any right shall constitute a waiver of that right.

(41) This Privacy Policy is governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.

​Changes to This Privacy Policy

(42) We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or business practices.

(43) Any updates will be posted on this page, and where appropriate, we will notify users by email or through the Website.

(44) Continued use of the Website after changes are posted constitutes acceptance of the updated Privacy Policy.

Last updated: 15 February 2026