What happens to the details you send us.

PLDrop is a product of Pyramid Ledger Ltd, a company registered in England and Wales. Pyramid Ledger Ltd is the controller of the personal data described in this notice — referred to here as “we” or “us”.

For anything about your personal data, including the requests described in section 09, write to info@pldrop.com. We have not appointed a data protection officer; requests sent to that address are handled by the company directly.

This notice covers pldrop.com and its demo and order form. Personal data processed while delivering a unit or running an engagement is governed by the data-processing terms in the signed agreement, as set out in our terms of use.

When you send a demo request: your name, work email address, company (optional), the plan you picked (if any), and your message.

When you send an order or quote request: the same details, plus a VAT or company registration number and the number of units, if you choose to give them.

With every request we also record the version of the terms of use you accepted and the time you accepted it, the IP address the request came from, and the country our hosting provider associates with that address.

A form field hidden from people catches automated submissions. If it is filled in, the submission is discarded and nothing is sent to us.

Giving us these details is voluntary, but without a name, a valid email address and a message we cannot reply, so the form will not send.

Demo requests and general enquiries: to reply, arrange a demonstration and follow up on that conversation. The lawful basis is our legitimate interest in responding to people who contact us about our products (UK GDPR Article 6(1)(f)).

Order and quote requests: to prepare a quotation or invoice and take the steps you have asked for before entering into a contract (Article 6(1)(b)). If an order goes ahead, the records needed for accounting and tax are kept because the law requires it (Article 6(1)(c)).

The IP address, country and bot check: to keep the form from being abused and to judge whether a request is genuine. The lawful basis is our legitimate interest in protecting the form and our inboxes (Article 6(1)(f)).

The terms version and acceptance time: to keep an accurate record of what you confirmed when you contacted us, which is a legitimate interest of both sides (Article 6(1)(f)).

We do not use the form’s contents for marketing lists, profiling or automated decision-making, and we do not sell personal data.

Your submission is delivered as an email to one of two internal inboxes: demo requests to our enquiries inbox, and order requests to our accounts inbox. The message is addressed to nobody else, and it is not shared with any other organisation for its own purposes.

To get it there we use service providers acting on our instructions. Our hosting and security provider, Cloudflare, runs the website and the form, provides the bot check (Turnstile), and carries the email to our inbox through its Email Routing service. The mailboxes themselves are held by our email provider.

Google receives the anonymous lead count described in section 06. It contains no personal details about you.

We may disclose personal data where the law requires it, or to professional advisers bound by confidentiality, such as our accountants when an order is invoiced.

The site sets no analytics or advertising cookies and loads no third-party analytics in your browser. That is enforced in the site’s security policy, which allows the page to contact only one outside service.

That one service is Cloudflare Turnstile, which runs on the form to check that a person, not a script, is sending it. To do that it processes technical signals from your browser and your IP address. It is used for security only.

Your browser’s local storage holds two preferences: whether you chose the light or dark theme, and whether you dismissed the pre-order notice. They stay on your device, are never sent to us, and you can clear them from your browser settings at any time.

After a request has been sent successfully, our server — not your browser — sends one event to Google Analytics 4. It says only whether the request was a demo or an order, and the campaign values (utm_source, utm_medium, utm_campaign) of the page you sent it from, if the link you arrived by carried them.

It never includes your name, email address, company, IP address or message. It is sent with a random one-time identifier, so it cannot be linked to you, your device or any other visit, and no cookie is involved.

We use it to count how many requests each campaign produces.

Demo requests and enquiries that do not lead to an order are kept for up to 24 months from our last contact with you, so that a conversation can be picked up again, and then deleted.

Where an order follows, the request becomes part of the customer and accounting record and is kept for as long as the contract runs and then for the period UK company and tax law requires — currently six years after the end of the financial year it relates to.

Our hosting provider keeps short-lived operational logs of requests to the site, which can include IP addresses, for a matter of days, for security and troubleshooting.

Our service providers operate internationally, so your personal data may be processed outside the United Kingdom, including in the United States.

Where that happens, the transfer relies on UK adequacy regulations — including the UK Extension to the EU–US Data Privacy Framework where the recipient is certified under it — or on the International Data Transfer Addendum to the EU standard contractual clauses approved for use in the UK. You can ask us for details of the safeguard that applies.

Under UK data protection law you have the right to ask for a copy of the personal data we hold about you, to have it corrected, to have it erased, to restrict how we use it, and to receive the data you gave us in a portable format where the law allows.

You have the right to object at any time to processing based on our legitimate interests. If you object, we stop unless we have compelling grounds to continue or need the data to establish, exercise or defend legal claims.

To use any of these rights, write to info@pldrop.com. We will reply within one month, and we will not charge you for a reasonable request. We may need to confirm your identity first.

If you are unhappy with how we have handled your personal data, please tell us first at info@pldrop.com, so we can try to put it right.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority: ico.org.uk/make-a-complaint.

This notice was last updated on 27 October 2026. When what the site collects or who receives it changes, this page changes with it and the date above moves.