Who we are
Plendor (Plendor Ltd, company number 17231274, registered in England and Wales) takes your privacy seriously. This notice sets out how we use and protect personal data when you visit this website or correspond with us.
As the data controller, we are responsible for your personal data. For any privacy question or request, contact hello@plendor.co.uk.
What personal data is
Personal data is any information about a person which identifies them, directly or together with other information we hold.
What we collect
When you send an enquiry we collect the name, work email address, organisation and role you give us, the enquiry type you select, and the building or portfolio context you choose to write.
If a conversation continues, we keep ordinary business correspondence and information you send about commercial property, energy projects, investment context or delivery requirements.
If — and only if — you accept the analytics tool described in the cookies notice, we also collect how the pages of this site were used during your visit: what was clicked, how far pages were read, and a replay of those interactions. That is behavioural data about a browsing session rather than information you have typed to us, and it is not joined up with an enquiry you send.
We do not ask for or collect payment details, dates of birth, postal addresses or telephone numbers through this website. We do not collect special category data, and we do not direct this website at children or knowingly collect data about them.
How we collect it
We collect personal data only when you give it to us: through the enquiry form, or by writing to us directly.
This website runs no advertising trackers and no cross-site tracking, and we do not build a marketing profile of your visit. Traffic is measured in aggregate — on our own servers, and by a cookieless Cloudflare measurement script in the browser — without identifiers stored on your device.
Two further tools, Contentsquare and Google Analytics, measure how the pages themselves are used, and both set cookies to do it. Neither is necessary for the site to work, and neither sets a cookie unless you accept: you are asked before anything of theirs is placed on your device, and our lawful basis for that is your consent, which you can withdraw at any time. Contentsquare is not loaded at all beforehand; Google Analytics is loaded on every page but instructed not to store or read anything until you agree, and the cookies notice sets out exactly what it sends to Google in the meantime. The site behaves identically either way.
How and why we use it, and our lawful basis
Data protection law allows us to use personal data only where we have a lawful basis. We use it to review and answer enquiries, to judge whether Plendor is a relevant fit for an estate, a capital position or a delivery requirement, to arrange meetings and prepare follow-up material, to keep proportionate business records, and to keep the website secure and working.
Our lawful basis for answering business enquiries and developing commercial relationships is legitimate interests, ours or a third party’s. Where the work is a step towards a contract, or the performance of one, our basis is contract. Where we must keep records or answer a lawful request, it is legal obligation. Where we ask for consent, you can withdraw it at any time.
Marketing
We do not run a marketing list, and we do not add enquiry contacts to one. We reply to the enquiry you sent.
If we ever send promotional communications, every message will carry a way to opt out, and opting out will not stop essential correspondence about an enquiry or engagement already under way.
We would not share your data with a third party for that third party’s own marketing without asking your express consent first.
Who we share it with
We share personal data with service providers only where it is necessary: website hosting and the edge network that serves it, email delivery, business and record-keeping systems, and professional advisers.
Where you have accepted them, Contentsquare and Google process the interaction data described above on our behalf and on our instructions, as our processors. They are measurement providers to us, not advertising networks: we do not sell what they record, we do not link it to any advertising account, and we do not share it for anyone else’s marketing.
Where an enquiry or project discussion calls for it, we may share relevant context with delivery, EPC, PPA or finance partners. We tell you when a conversation reaches that point.
We share only where we are satisfied the recipient protects the data, uses it on our instructions, and is under confidentiality obligations. We may also disclose data to legal or regulatory bodies where the law requires it.
Where your data is processed
We keep processing within the UK and Europe wherever we can, and we do not sell or move personal data for its own sake.
Some of the infrastructure this site depends on is global: the website is served from an edge network, email is delivered by providers who may process data outside the UK, and the two analytics tools you are asked about in the cookies notice process what they record on their own systems, which for Google includes servers in the United States. Where a transfer happens, we rely on the safeguards data protection law requires, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.
Third party links
This website links to third party sites and content we do not control. Their privacy practices are their own, so read the privacy notice of any site you follow a link to.
Security
We take the security of personal data seriously and have appropriate measures in place to protect it.
Access is limited to the people and providers who need it for a business purpose, and they are under confidentiality obligations.
How long we keep it
We keep personal data only as long as is reasonably necessary for the purpose we collected it for.
Enquiry correspondence is kept while a commercial relationship or an active conversation continues, and then for a reasonable period afterwards in case the discussion resumes. Where consent is our basis, we stop when you withdraw it.
Records we are required to keep by law, including anything needed for tax or accounting, we keep for six years after the relationship ends.
Your rights
You have the following rights over your personal data:
- to be given a copy of the personal data we hold about you
- to have inaccurate data corrected
- to have your data deleted, in certain circumstances
- to have our processing restricted, in certain circumstances
- to have your data transferred to you or to a third party, in certain circumstances
- to withdraw consent, where consent is the basis we rely on
- to object to processing for direct marketing
- to object to processing, in certain circumstances, where we rely on legitimate interests
The Information Commissioner’s Office publishes fuller guidance on each of these at ico.org.uk.
How to exercise them
Write to hello@plendor.co.uk. There is no fee, though we may need to confirm who you are before we act.
We answer valid requests within one month. If a request is complex and will take longer, we will tell you within that month.
Keeping us up to date
Please tell us if anything we hold about you is wrong or has changed, so that we can correct it.
Changes to this notice
We review this notice regularly and it may change. This version is dated 17 August 2026.
Complaints
If something about how we handle your data concerns you, tell us first at hello@plendor.co.uk and we will try to put it right.
You also have the right to complain to the Information Commissioner’s Office at any time, at ico.org.uk. Complaining to us does not affect that right.