Who we are
PLUTO TECHNOLOGIES LTD ("we", "our", or "us") is a UK-based technology company providing website development, mobile app development, design services and IT resource staffing solutions.
We are the data controller for the personal information we hold about you. Our registered office is located at Flat, Post Office, Cryers Hill Road, Cryers Hill, High Wycombe, Buckinghamshire, England, HP15 6JP and we are subject to UK GDPR and the Data Protection Act 2018.
Information we collect
We collect the following categories of personal information:
Personal Information
- Identity Data: Name, title, date of birth, gender
- Contact Data: Email address, telephone numbers, postal address
- Professional Data: Job title, company name, industry, work experience
- Technical Data: IP address, browser type, device information, website usage data
- Communication Data: Messages, enquiries and correspondence
- Financial Data: Bank account details, payment information (for customers only)
- Marketing Data: Preferences for receiving marketing communications
Special Categories of Personal Data
We may collect limited special category data such as:
- Health information (for workplace adjustments)
- Criminal conviction data (for security clearance requirements)
Legal justifications
We process your personal data based on the following legal grounds under UK GDPR:
- Contract (Article 6(1)(b)): To perform our contract with you or take steps at your request
- Legitimate Interests (Article 6(1)(f)): To improve our services, prevent fraud and ensure security
- Consent (Article 6(1)(a)): For marketing communications and non-essential cookies
- Legal Obligation (Article 6(1)(c)): To comply with applicable laws and regulations
- Vital Interests (Article 6(1)(d)): To protect your safety or the safety of others
- Public Task (Article 6(1)(e)): When carrying out tasks in the public interest
Customer data usage
If you are a customer, we use your data to:
- Provide website development, mobile app development, design services, or IT resource staffing
- Manage project delivery, timelines and quality assurance
- Process payments and manage billing
- Provide customer support and technical assistance
- Send project updates and important service communications
- Maintain records for accounting and legal compliance
- Improve our services based on your feedback
Lead data usage
If you are a potential customer (lead), we use your data to:
- Respond to your enquiries and provide information about our services
- Send relevant marketing communications (with your consent)
- Schedule consultations and meetings
- Prepare proposals and quotes
- Follow up on your interest in our services
- Maintain records of our business development activities
Staff data usage
If you are our employee, we use your data to:
- Manage your employment relationship and payroll
- Provide training and professional development
- Ensure workplace health and safety
- Comply with employment law and HMRC requirements
- Manage performance and conduct reviews
- Provide employee benefits and support
- Maintain personnel records and HR administration
Temporary staff data
If you are a temporary member of staff or a contractor, we use your data to:
- Manage your contract and project assignments
- Process payments and manage invoicing
- Ensure compliance with IR35 regulations
- Provide project briefings and technical requirements
- Monitor project progress and quality
- Maintain records for tax and legal compliance
- Facilitate communication with client teams
Visitor data usage
If you visit our premises, we use your data to:
- Register your visit for security purposes
- Issue visitor badges and access control
- Ensure health and safety compliance
- Maintain visitor logs for security and emergency purposes
- Provide directions and assistance during your visit
- Comply with health and safety regulations
Website visitor data
If you visit our website, we use your data to:
- Provide and improve website functionality
- Analyse website usage and performance
- Personalise your browsing experience
- Respond to your enquiries and contact requests
- Provide relevant content and service information
- Ensure website security and prevent fraud
- Comply with legal obligations and regulations
Data collection methods
We collect personal data through various methods:
Direct Collection
- Contact forms on our website
- Email communications and correspondence
- Phone calls and video meetings
- Contract negotiations and project discussions
- Job applications and recruitment processes
- Client onboarding and project setup
Automatic Collection
- Website analytics and usage tracking
- Cookies and similar technologies
- Server logs and technical data
- Social media interactions
- Third-party integrations and APIs
Third-Party Sources
- Client referrals and recommendations
- Professional networks and directories
- Public records and databases
- Social media platforms
- Industry events and conferences
Third parties
We may share your personal data with trusted third parties who assist in our operations:
Service Providers
- Cloud Hosting: AWS, Google Cloud, Microsoft Azure
- Email Services: SendGrid, Mailchimp
- Analytics: Google Analytics, Hotjar
- Project Management: Asana, Trello, Monday.com
- Communication: Slack, Microsoft Teams, Zoom
- Accounting: Xero, QuickBooks
- CRM: HubSpot, Salesforce
Legal and Regulatory
- Legal advisors and solicitors
- Regulatory authorities and government bodies
- Auditors and compliance consultants
- Insurance providers
International transfers
Some of our service providers may be located outside the UK. When we transfer personal data internationally, we ensure appropriate safeguards are in place:
- Adequacy Decisions: Countries with adequate data protection
- Standard Contractual Clauses (SCCs): EU-approved contractual safeguards
- Binding Corporate Rules: Internal data protection policies
- Certification Schemes: Industry-recognised data protection standards
- Explicit Consent: Where other safeguards are not available
Data security
We implement comprehensive technical and organisational measures to protect your personal data:
Technical Measures
- End-to-end encryption for data in transit and at rest
- Multi-factor authentication and access controls
- Regular security updates and patch management
- Intrusion detection and prevention systems
- Secure backup and disaster recovery procedures
- Network segmentation and firewall protection
Organisational Measures
- Data protection training for all staff
- Access controls on a need-to-know basis
- Regular security audits and assessments
- Incident response and breach notification procedures
- Vendor security assessments and contracts
- Data minimisation and retention policies
Data retention
We retain personal data for the following periods:
Business Records
- Customer Data: 7 years after project completion
- Financial Records: 7 years for HMRC compliance
- Contract Data: 7 years after contract termination
- Employee Records: 6 years after employment ends
Marketing and Communications
- Marketing Data: Until consent withdrawn or 3 years inactive
- Website Analytics: 26 months (Google Analytics default)
- Email Communications: 2 years after last interaction
- Chatbot Data: 1 year for learning purposes
Legal Requirements
- As required by applicable laws and regulations
- Until legal proceedings are concluded
- As required by regulatory authorities
Automated decision making
We may use automated decision-making in the following limited circumstances:
AI Chatbot
- Automated responses to common enquiries
- Learning from user interactions to improve responses
- Escalation to human agents when needed
- You have the right to request human review of automated decisions
Website Analytics
- Personalised content recommendations
- Website performance optimisation
- User behaviour analysis for service improvement
Your Rights: You have the right not to be subject to automated decision-making that produces legal effects or significantly affects you. You can request human intervention, express your point of view and contest the decision.
Your legal rights
Under UK GDPR, you have the following rights regarding your personal data:
Core Rights
- Right of Access: Request copies of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing based on legitimate interests
Additional Rights
- Right to Withdraw Consent: Withdraw consent at any time
- Rights Related to Automated Decision Making: Human review of automated decisions
- Right to Complain: Lodge a complaint with the ICO
How to Exercise Your Rights: Contact us at contact@
Third-party links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.
This privacy policy applies only to our website and services. When you click on external links, you will be subject to the privacy policies of those third-party websites.
Cookie policy
We use cookies and similar technologies to enhance your experience on our website:
Essential Cookies
- Required for website functionality and security
- Session management and user authentication
- Load balancing and performance optimisation
Analytics Cookies
- Google Analytics for website performance insights
- User behaviour analysis and website optimisation
- Traffic source and conversion tracking
Preference Cookies
- Remember your settings and preferences
- Theme selection and display preferences
- Language and regional settings
Marketing Cookies
- Track marketing campaign effectiveness (with consent)
- Personalised advertising and content
- Social media integration and sharing
Cookie Controls: You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect website functionality.
Contact information
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
- Phone:
- +44 7900430455
- Address:
- Flat, Post Office, Cryers Hill Road, Cryers Hill, High Wycombe, Buckinghamshire, England, HP15 6JP
Data Protection Officer: For data protection matters, please contact us at the above address or email with "Data Protection" in the subject line.
Supervisory Authority: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with data protection law.