Your data,
your rules.
Plain English, no legalese. How Pladius collects, uses, shares and safeguards your information and the rights you have under the UK GDPR and the Data Protection Act 2018.
Why this exists.
Pladius ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share and safeguard information when you use the Pladius service, mobile apps and website.
It also sets out the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We have written it in plain English; if any of it is unclear, write to us and we will explain.
Pladius Ltd.
Pladius is a trading name of Pladius Ltd, a company registered in England and Wales. Our registered office is Unit E4 Arena Business Centre, Holyrood Close, Poole, BH17 7FP, United Kingdom.
We are the data controller for the personal data we process through the Pladius service. You can reach our data protection team at hello@pladius.co.
Only what is necessary.
Information you provide directly, your name, email address, phone number, property details, tenancy records, compliance documents and payment information.
Information collected automatically, device identifiers, IP address, browser type, time-zone, app version, usage patterns and diagnostic data. Used to keep the service running, detect abuse and debug issues.
Information about your portfolio, addresses, tenancy terms, rent records, property manager statements, maintenance tickets and any documents you upload. Provided by you or ingested on your behalf from sources you authorise.
With your permission.
When you connect a bank account through our open-banking integration, or link a property manager's portal, or authorise a third-party service, we receive information from those providers under your explicit authorisation.
We only receive data necessary to deliver the service you requested. We never store your bank credentials, and we revoke access immediately when you ask us to.
To run the service.
We use your information to operate the service, to reconcile rent payments against bank transactions, deliver compliance alerts, generate your morning briefs, personalise AI recommendations, prevent fraud, comply with legal obligations and communicate with you about the product.
We do not sell your personal data. We do not use your portfolio data to train general-purpose AI models. We do not share it with advertisers. Your portfolio data is used exclusively to serve you.
Why we are allowed.
We rely on the following legal bases for processing your personal data:
Performance of a contract, to deliver the service you have signed up for. Legitimate interests, to improve and secure the service, prevent fraud and grow the business. Consent, for optional features such as marketing communications and analytics cookies. Legal obligation, to meet regulatory, accounting and tax requirements.
Trusted processors only.
We share personal data only with trusted processors that operate under contract: cloud infrastructure providers, payment providers, transactional email, customer support tooling and analytics. Only where strictly necessary to deliver the service.
All processors are bound by data protection terms equivalent to ours. We maintain a register of subprocessors and notify you of material changes.
We may also disclose data where required by law, court order or to protect the rights, property or safety of our users, ourselves or others.
A minimal set.
We use a deliberately minimal set of cookies and similar technologies. We do not use advertising cookies, tracking pixels or third-party analytics that identify you personally.
See our Cookie Policy for the full list and how to manage your preferences.
Only as long as needed.
We retain personal data only as long as necessary to deliver the service and meet regulatory obligations. When your account is closed, we delete or anonymise your data within 90 days, except where we are legally required to retain certain records (financial transactions, for example, are retained for six years under HMRC rules).
You can export all your data in standard formats (CSV, PDF) at any time and request early deletion by emailing hello@pladius.co.
Secure cloud infrastructure.
Pladius runs on secure, modern cloud infrastructure. Our AI capabilities and backend services are serverless, auto-scaling, encrypted in transit and at rest, with regional data hosting that keeps customer data under UK and EU jurisdiction.
We apply bank-level encryption in transit (TLS 1.3) and at rest (AES-256), strict role-based access controls, continuous monitoring and regular penetration testing. All data is stored in UK and EU regions. SOC 2 Type II certification is underway.
No system is perfectly secure, but we invest continuously to protect your data. In the unlikely event of a breach affecting your personal data, we will notify you and the ICO without undue delay.
Not for children.
Pladius is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has provided us with personal data, contact us at hello@pladius.co and we will delete it.
Full control, always.
Under the UK GDPR you have the following rights, exercisable at any time by emailing hello@pladius.co:
Right to access, a copy of the personal data we hold about you. Right to rectify, correct inaccurate or incomplete data. Right to erasure, request deletion (the "right to be forgotten"). Right to restrict, limit how we process your data. Right to portability, receive your data in a portable format (CSV/JSON). Right to object, object to processing based on legitimate interests. Right to withdraw consent, at any time, where consent is the legal basis.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you are not happy with how we have handled your data.
Explicit controls instead.
The "Do Not Track" browser signal has been deprecated and we do not currently respond to it. We provide explicit cookie preferences you can set directly through our cookie banner, see the Cookie Policy for details.
We will tell you.
We may update this policy to reflect changes to the service or to regulation. We will notify you of material changes by email and in-app notification at least 14 days before they take effect, and we always display the "Last updated" date at the top of this page.
Real humans reply.
For any privacy question, contact our data protection team at hello@pladius.co. We typically respond within two working days.
Pladius Ltd · Unit E4 Arena Business Centre, Holyrood Close, Poole, BH17 7FP, United Kingdom.