1. Scope
This policy applies to plan0101.com, contact forms, business communications and services directly operated by PLAN0101. Independent products, third-party integrations and contracted projects may include additional notices or agreements that govern their specific processing.
2. Information we may receive
- Contact data voluntarily submitted, such as name, email, company, role, country and message.
- Project, process, technical or business information a person chooses to share.
- Basic technical information generated when using the site, such as IP address, browser type, visited pages, timestamps and security or diagnostic data.
- Preferences stored locally in the browser, including language and appearance settings.
3. Purposes
- Respond to inquiries and prepare proposals.
- Provide and improve contracted services.
- Operate, protect, diagnose and maintain the website and systems.
- Prevent fraud, abuse, unauthorized access and security incidents.
- Comply with applicable legal, regulatory, accounting and contractual requirements.
- Produce aggregate site or product analytics when enabled and legally permitted.
4. Legal bases and processing criteria
We process information when needed to respond to a request, take pre-contractual or contractual steps, comply with legal obligations, protect legitimate interests related to security and operations, or rely on consent where applicable law requires it.
5. Vendors and subprocessors
We may use hosting, infrastructure, email, analytics, storage, monitoring, AI, communications and other providers needed to operate a website or service. We aim to limit access to what is necessary and select providers with reasonable controls. Third-party services are also governed by their own terms and policies.
6. International transfers
Some providers may process data in other countries. Where required by applicable law, we seek to use appropriate contractual, technical or organizational safeguards for those transfers.
7. Retention
We retain information for as long as reasonably needed for the purpose for which it was received, the business relationship, security, dispute resolution and legal obligations. When no longer needed, we seek to delete or anonymize it, unless legitimate retention is required.
8. Rights and requests
Depending on applicable law, individuals may have rights to access, correct, update, delete, object, restrict, port or withdraw consent. We may reasonably verify requests to protect information from unauthorized disclosure.
9. Security
We apply reasonable technical and organizational measures designed to protect confidentiality, integrity and availability. No system can guarantee absolute security; we maintain an ongoing process of reducing exposure and responding to incidents. See our Security page for more information.
10. Children
The website and B2B services are not intentionally directed to children. If we learn that a child's information was received without a valid basis, we will seek to remove it where appropriate.
11. Changes
We may update this policy to reflect operational, legal or technical changes. The revision date identifies the current version.