Privacy policy.

What information do we collect about you and why?

PlotPoint collects and uses personal data on the basis that it is in its legitimate interests to do so and your right to privacy is not overridden. We need to do so as part of the performance of our contract with you or where we have a legal obligation to do so.

From our clients and intermediaries

We collect information through the PlotPoint app, website, and during our interactions with you throughout our relationship to comply with regulations and perform our contract with you. The provision of your personal data is required in order to enter into a contract with us; however, the provision of information for marketing purposes is voluntary. We may record and monitor telephone calls made to or by us in order to comply with regulatory obligations and training purposes. Automated decision-making may be used in order to comply with our KYC/AML checks or to evidence that PlotPoint is providing a suitable and appropriate service to its clients.

From our website

When you visit our website, we may collect information about your visit such as your IP address and the pages you visited, and when you use our service, we may collect information on how you use our service.

How do we process your information?

All information is processed both manually and electronically in compliance with current data protection regulations. We allow only authorised PlotPoint employees and carefully selected Third-Party Affiliates to have access to your information. Such employees and Third-Party Affiliates are appropriately designated and trained to process data only according to the instructions we provide them.

Please note that our offices will have CCTV and record your image upon any in-person meeting at our London office.

How do we store your information?

PlotPoint will retain personal data for a reasonable period, considering legitimate business needs to capture and retain such information. Information will also be retained for a period necessary to comply with local regulations, or country-specific regulations and requirements, and in accordance with PlotPoint’s Document Retention Schedule.

How long do we keep this information?

Non-clients

If you are not a client of PlotPoint, we will retain your information for one year after our last interaction with you. If you ask us to remove you from our marketing list, we may keep your name and communication details on an “opt-out” list in order to ensure that we do not market to you again.

Clients

If you are or were a PlotPoint client, we keep most of your information for five (5) years after the closure of your account and the redemption of any funding arrangements held under it. Where required by law or regulation, we may keep documents longer than the designated five (5) years.

Who do we share your information with?

• Our IT providers, and all other service providers and Third-Party Affiliates in order to provide and maintain the provision of our services.
• Our solicitors and SEC PP Limited, our security trustee, in connection with the loans you have chosen to fund, to support due diligence, loan administration, security and enforcement.
• Companies affiliated with our company for operational or administrative purposes.
• With your explicit consent, we may also share your information with companies within our group for cross-marketing purposes.
• Our appointed auditors, accountants, lawyers, and other professional advisers, to the extent that they require access to the information to provide advice.
• Fraud prevention agencies and other organisations to allow us to undertake relevant checks.
• If required to do so to meet applicable law, the order of a court of rules and codes of practice applicable to the circumstances at the time.
• Relevant authorities to investigate or prevent fraud or activities believed to be illegal or otherwise in breach of applicable law.
• If tax regulations require us to collect information about tax residency, then in certain circumstances (including if we do not receive a valid self-certification from you), we may be obliged to share information about your passion product and collectible profile with the relevant tax, payments, and customs authority, who may pass this onto tax authorities in other jurisdictions.
• In the event that we sell or buy any business or assets, in which case we will disclose your personal information to the prospective seller or buyer of such business or assets.
• If assets, including personal information held by our Third-Party Affiliates, are acquired by a third party, personal information may be transferred as part of the acquisition.

We will not lend or sell your information to undisclosed Third-Party Affiliates. Your personal information may need to be shared with our service providers, which may involve transferring it to countries outside the European Economic Area (EEA). Where we do so, we will ensure that we do this in accordance with current data protection legislation by only transferring your data to jurisdictions in respect of which there is a European Commission adequacy decision or, where this is not the case, by using model clauses which have been approved by the European Commission.

Lawful basis for processing

We process your personal data based on the following lawful bases:

Consent

Where you have given explicit consent for processing your data for specific purposes.

Contract

Where processing is necessary for the performance of a contract with you.

Legal obligation

Where processing is necessary to comply with a legal obligation.

Legitimate interests

Where processing is necessary for the purposes of legitimate interests pursued by us or a third party, provided that such interests are not overridden by your interests or fundamental rights and freedoms.

Your rights

You have certain rights in respect of the data we hold. These include:

Right to access

You have the right to request a copy of the information we hold about you.

Right to rectification

You have the right to request correction of inaccurate or incomplete information.

Right to erasure

You have the right to request the deletion of your personal data.

Right to restrict processing

You have the right to request restriction of processing your data.

Right to data portability

You have the right to request the transfer of your data to another data controller.

Right to object

You have the right to object to the processing of your personal data.

Rights related to automated decision making and profiling

Where processing is necessary for the purposes of legitimate interests pursued by us or a third party, provided that such interests are not overridden by your interests or fundamental rights and freedoms.

Please note that the application of these rights varies according to the legal basis used to process your data. In certain circumstances, we are required to retain copies of information we hold about you by other regulations. In this instance, we will not be able to erase or modify the data.

To exercise these rights or if you have any concerns about our use of your personal information, please contact the Data Protection Officer using the information at the end of this notice.

Security

Internet communications, including emails, are not entirely secure. We employ encryption methods to protect data during transmission, provided that current protocols are used and correct procedures are followed for encryption and decryption. We cannot accept any responsibility for unauthorised access by a third party or for the loss, theft, or modification of data while it is being sent to us. For security purposes, we may monitor emails received or issued by us.

Other websites

This privacy notice only applies to our website and application. When you use a link to another website, you should read the privacy policy of that site.

Complaints process

If you believe your data protection rights have been violated, we encourage you to contact us first to resolve any concerns. You can reach us at compliance@plotpoint.co.uk. If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO).

Changes to our privacy notice

We keep our privacy notice under regular review. We reserve the right to update this privacy notice at any time and we will advise you when we make any substantial changes to it.

How to contact us

If you have any questions about our privacy notice or the information we hold about you, please contact us at info@plotpoint.co.uk or by post at the address below:

Last updated

This Privacy Notice was last updated on the 11th of March 2026.