Privacy Policy

1. Overview & Scope

PLEXA Global Agency ("PLEXA", "we", "us", or "our"), headquartered in London, United Kingdom, is committed to safeguarding the privacy of visitors, prospective clients, and enterprise partners interacting with our digital product services and website at plexa-one.com.

This Privacy Policy explains what information we collect, how it is processed under the UK General Data Protection Regulation (UK GDPR) and EU GDPR, and your statutory rights regarding your personal data.

2. Information We Collect

We collect and process personal data strictly necessary to respond to client project inquiries and provide software engineering services:

• Inquiry & Contact Data: Name, business email address, project requirements, budget brackets, and message content submitted through our inquiry dispatcher.
• Telemetry & Performance Data: Anonymous session metrics, browser type, device resolution, country/city origin (derived from IP headers without storing raw personal identifiers), and section dwell times to ensure optimal site rendering.
• Communications: Email correspondence and discovery session notes required for client scoping and project delivery.

3. Legal Basis for Processing

We process personal data based on the following legal grounds under Article 6 of the UK GDPR:

• Contractual Necessity: To prepare technical proposals, master services agreements (MSAs), and deliver requested software design and development contracts.
• Legitimate Interests: To optimize website performance, maintain server infrastructure security, and prevent fraudulent inquiries.
• Consent: Where explicitly provided when submitting contact forms or subscribing to agency communications.

4. Data Storage & Security

All client data is stored on encrypted, access-controlled cloud infrastructure located within secure UK/EU data centers with TLS 1.3 encryption in transit and AES-256 encryption at rest. We never sell, rent, or trade client or visitor data to third parties.

5. Your Data Rights

Under UK and EU data protection laws, you possess the right to:

• Request access to the personal data we hold about you.
• Request the correction of inaccurate or incomplete information.
• Request the erasure of your personal data ("Right to be Forgotten").
• Object to or restrict the processing of your personal information.

To exercise any of these rights, please contact our data governance team at info [at] plexa-one.com.

6. Contact Information

For data protection inquiries or formal requests, reach our London headquarters: