Privacy Policy — Plantruly

1. Who we are

Plantruly is operated by Lifeline Digitals Ltd, a company registered in England and Wales. Our registered address and contact details are available on request at hello@plantruly.com.

Lifeline Digitals Ltd is the data controller for personal information processed through plantruly.com. We are subject to UK GDPR and the Data Protection Act 2018.

2. What data we collect

We collect the following categories of personal data:

Account data: your name, email address, and role (Event Owner, Planner, or Vendor) when you register.
Event data: event name, date, venue, budget, and any details you enter while planning your event.
Guest data: names, email addresses, and dietary or accessibility information you add for your guests.
Payment data: billing details processed securely by Stripe. We do not store full card numbers. Stripe is PCI-DSS compliant.
Communications: messages you send us via email or support channels.
Usage data: pages visited, features used, and device/browser information collected via analytics.

3. Legal basis for processing

We process your personal data on the following bases:

Contract performance: to provide the Plantruly service you have signed up for.
Legitimate interests: to improve the platform, prevent fraud, and send service updates.
Consent: for marketing emails. You can withdraw consent at any time.
Legal obligation: to comply with financial regulations and UK law.

4. How we use your data

To create and manage your account and events.
To process payments and issue receipts via Stripe.
To send transactional emails (booking confirmations, RSVP notifications, payment receipts) via Resend.
To send product updates and marketing emails where you have consented.
To analyse platform usage and improve our features.
To detect and prevent fraud, abuse, or security incidents.
To comply with our legal and regulatory obligations.

5. Who we share your data with

We share data only where necessary, with:

Supabase — database and authentication infrastructure (EU region).
Stripe — payment processing. Stripe may process data outside the UK under standard contractual clauses.
Resend — transactional email delivery.
Vercel — hosting and edge infrastructure.
Vendors and planners — limited event details shared only when you explicitly book or invite them.

We do not sell your personal data to third parties.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it (for example, financial transaction records which we retain for 7 years).

7. Your rights under UK GDPR

You have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate data.
Erasure — request deletion of your data (subject to legal obligations).
Restriction — ask us to limit processing in certain circumstances.
Portability — receive your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests.
Withdraw consent — for any processing based on consent, at any time.

To exercise any of these rights, email us at privacy@plantruly.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use strictly necessary cookies to keep you logged in and maintain your session. We do not use advertising or tracking cookies. Analytics cookies may be used to understand how the platform is used; these do not identify you personally.

9. Security

We use industry-standard security measures including encrypted connections (TLS), row-level security on our database, and access controls. No method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password.

10. Changes to this policy

We may update this policy from time to time. We will notify you by email and update the "Last updated" date above. Continued use of Plantruly after changes means you accept the updated policy.

11. Contact us

For any privacy-related questions, contact us at: privacy@plantruly.com
Lifeline Digitals Ltd, England and Wales.