Privacy policy

Plugmind Web is a brand of NeurodiverCity C.I.C., a community interest company registered in England and Wales (company number 13375108), at Initial Business Center, Wilson Business Park, Monsall Road, Manchester M40 8WN. We're the controller of the personal data described here, and we're registered with the Information Commissioner's Office (ZB389983).

Questions about privacy, or a request about your data, go to dpo@neurodiver.city.

This policy is about data about you as our customer or visitor. Data on your websites and in your email is yours, and we handle it for you under our Data processing agreement.

• Account and order details: your name, business, address, email, phone number, and what you order;
• Payments: invoices and payment records. Card details go straight to our payment provider: we don't see or keep them;
• Domain details: the registrant details each registry needs;
• Messages: what you tell us in quote requests, tickets, emails and calls;
• Technical data: server logs of visits to our site, client area and services: IP address, browser, pages and times;
• For MBA Launchpad: the She's In Business code you order with.

• to set up, run and support your services, and bill for them, as our agreement needs (contract);
• to register and renew your domains with their registries (contract);
• to keep invoices and tax records, and answer lawful requests (legal obligation);
• to keep our services secure, prevent fraud and abuse, and improve what we do (legitimate interests);
• to send you news about our services, only if you've agreed, and you can stop at any time (consent).

We don't sell your data, and we don't use it for advertising.

Only with companies that help us provide our services, under contracts that protect it:

• hosting partners, which run the servers, email, backups and domain registrations behind our services;
• domain registries and registrars, such as Nominet for .uk domains, for your domains;
• our payment provider, for card payments;
• email sending services, if you use our newsletter sending;
• our accountants and professional advisers, where they need it;
• She's In Business, only to confirm a Launchpad code is valid, if they ask.

We also share data when the law requires it, or to protect our services or other people from harm. Ask us at dpo@neurodiver.city for the names of the companies we use.

In the UK, Europe and the USA. Europe (the EEA) is recognised by UK law as protecting personal data properly. When data goes to the USA, or anywhere else outside the UK and the EEA, it's either to a company certified under the UK–US data bridge, or under safeguards UK law approves, such as the UK's international data transfer agreement or addendum.

• invoices and payment records: 6 years after the year they're from, as tax law requires;
• your account: while you're a customer, and up to 2 years after, in case of questions;
• tickets and messages: up to 2 years after they're closed;
• server logs: about 12 weeks;
• quote requests that don't go ahead: up to 1 year.

You can ask for a copy of your data, ask us to correct it, delete it, limit how we use it, or send it to you in a form you can reuse. You can object to us using it for our legitimate interests, and withdraw consent at any time. We reply within a month.

Most of your details can be changed yourself in the client area. If you're unhappy with how we handle your data, please tell us first; you can also complain to the Information Commissioner's Office at ico.org.uk.

Our site and client area use only the cookies they need to work. See our Cookie policy.

We'll update this policy when how we use data changes, and email customers about important changes.