Plistic
Privacy Policy
A trading name of Songplistic Ltd, a company registered in Scotland
Last updated: 3rd July 2026
1. Who We Are
This Privacy Policy explains how Plistic, the trading name of Songplistic Ltd ("we", "us", "our"), a company registered in Scotland under company number SC699049 with its registered office at 2 West Drive Cottage, Stracathro, Brechin, Scotland, DD9 7QF, collects, uses, and protects your personal data when you visit our website or get in touch with us.
We are the data controller for the personal data described in this policy. If you have any questions, you can contact us at hello@plisticmedia.com.
2. What Information We Collect
We only collect personal data that you choose to give us, through the following channels:
2.1 Contact and Enquiry Forms
If you fill in a contact form, brief form, or enquiry form on our website, we collect whatever information you provide - typically your name, email address, and details about your project. Phone number is collected if you choose to provide it.
2.2 Quote Calculator
If you use our quote estimator, we collect the selections you make (service type, scope, budget range, and similar) in order to generate an indicative price range. If you choose to proceed and leave your contact details, we collect those in the same way as Section 2.1.
2.3 Booking a Call
Our discovery calls are booked through Cal.com. When you book a call, Cal.com collects your name, email address, and any information you provide in the booking form on our behalf. Cal.com processes this data as a processor acting on our instructions - see Section 6 for more on third parties we work with.
2.4 Referral and Partnership Forms
If you submit a referral or a partnership enquiry, we collect your name and email address, along with the name and contact details of anyone you refer to us (with your confirmation that you are entitled to share this).
2.5 Email and Other Direct Correspondence
If you email us, call us, or speak with us directly, we collect and retain that correspondence and any personal data included in it, in order to respond and manage our relationship with you. This includes contacts we hold in our CRM - every person in our CRM is someone we have had a genuine prior conversation or working relationship with, such as a past client, event contact, or business connection.
2.6 Website Analytics
We use a privacy-first, cookieless analytics tool (Vercel Web Analytics) to understand how visitors use our website - for example, which pages are viewed, how people arrive, and which actions are taken (such as sending an enquiry or signing up). This data is aggregated, does not use tracking cookies, and does not identify you personally.
2.7 Cookies
Our website uses only strictly necessary cookies - those required for the site to function, such as keeping you signed in to your account and remembering site access during our pre-launch period. We do not use advertising or third-party tracking cookies, which is why you will not see a cookie consent banner. If we ever introduce non-essential cookies, we will ask for your consent first.
2.8 Partner Directory
If you create a Seller account in our partner directory, we collect the email address you sign in with and the profile and listing details you choose to publish (including any images or media you upload). If you submit an enquiry on a Seller's listing, we collect your name, email, and message - and share these with the relevant Seller so they can reply to you directly (see Sections 6 and 7).
If you book and pay for a Seller's package through the platform (a Marketplace Booking), we collect the information needed to process that payment and manage your order - such as your email address, the order details, and payment confirmation information. Card payments are handled by our payment provider, Stripe; we do not see or store your full card details. We share the order details with the relevant Seller so they can carry out the work, and Sellers who receive payouts provide their own details directly to Stripe.
3. How We Use Your Information
We use the personal data described above for the following purposes:
- To respond to your enquiry and provide you with a quote or information about our services.
- To manage bookings and discovery calls.
- To deliver a project you have commissioned, including all communication, scheduling, and administration involved.
- To process referrals and partnership enquiries.
- To stay in touch with past clients and contacts we have a genuine working relationship with, including by email through our CRM (currently managed via Mailchimp).
- To understand how people use our website, so we can improve it.
- To meet our own legal, accounting, and tax obligations.
We do not use your personal data for automated decision-making or profiling.
4. Our Legal Basis for Processing
We rely on the following lawful bases under UK GDPR, depending on the situation:
- Contract - where we need your information to provide a service you have asked for or agreed to pay for.
- Legitimate interests - where we need your information to respond to an enquiry, manage our business relationship with you, stay in touch with existing contacts, or improve our services, and this does not unfairly affect your rights.
- Legal obligation - where we are required to keep certain records, such as for tax and accounting purposes.
5. Payments and Invoicing
For our own production projects, we issue invoices directly by email once a project is confirmed, and payment is arranged separately between you and us. Details of how to pay are provided on the invoice itself.
For directory Marketplace Bookings - where you book and pay for a Seller's package through the platform - payment is taken through our payment provider, Stripe. Stripe processes your card payment and (for Sellers) makes payouts; it acts as an independent payment processor. We do not see or store your full card details. See Section 6 for more on Stripe as a third party.
6. Who We Share Your Information With
Your personal data is accessed by people working within Plistic who need it to do their job - for example to respond to your enquiry or deliver your project. We do not sell or rent your personal data to anyone. We share personal data only with the following organisations, where necessary to run our business:
- Cal.com - to manage bookings for discovery calls.
- Google - for website analytics (Google Analytics).
- Mailchimp - to manage our CRM and send email communications to existing contacts.
- Supabase - the database, sign-in, and file storage that power the partner directory and our website forms.
- Resend - to send transactional emails such as enquiry notifications, confirmations, and sign-in links.
- Stripe - to process marketplace payments securely and make payouts to Sellers. Where you make a booking, Stripe receives the payment information needed to take and process that payment.
- Vercel - website and application hosting.
- Our accountant - for invoicing, tax, and financial record-keeping.
- Any freelancer or third party we bring onto a specific project (for example, a guest researcher or specialist) - only where relevant to delivering that project, and only the information they need.
- Directory Sellers - when you submit an enquiry on a listing, your enquiry details are shared with that Seller so they can respond to you.
Several of these providers (including Cal.com, Google, Mailchimp, Resend, Stripe, and Vercel) are based in or transfer data to the United States, so using them involves transferring some personal data outside the UK. Each safeguards this under recognised UK data protection mechanisms - primarily the UK Extension to the EU-US Data Privacy Framework, backed up by Standard Contractual Clauses with the UK Addendum. These are the standard, legally recognised ways of protecting personal data when it is transferred to the US, and they are the same mechanisms used by the vast majority of UK businesses using these or similar tools.
7. How Long We Keep Your Information
We keep personal data only for as long as necessary for the purpose it was collected:
- Enquiries that do not become a project: retained for up to 12 months, then deleted, unless you ask us to delete it sooner.
- Client and project information: retained for the duration of our working relationship and for 6 years afterwards, in line with our legal obligations for tax and accounting records.
- CRM contacts: retained for as long as we have an active business relationship or reasonable basis to stay in touch, and removed on request at any time.
- Referral and partnership enquiries: retained for as long as relevant to the referral or partnership, then deleted.
8. Your Rights
Under UK GDPR, you have the right to:
- Ask us what personal data we hold about you and request a copy of it.
- Ask us to correct any inaccurate or incomplete data.
- Ask us to delete your data, where there is no legal reason for us to keep it.
- Ask us to restrict or object to how we use your data in certain circumstances, including being removed from our CRM at any time.
- Complain to the Information Commissioner's Office (ICO) if you believe we have not handled your data properly.
To exercise any of these rights, contact us at hello@plisticmedia.com. We will respond within one month, as required by law.
The Information Commissioner's Office can be contacted at ico.org.uk or on 0303 123 1113 if you wish to raise a concern directly with the regulator.
9. Keeping Your Information Secure
We take reasonable technical and organisational steps to protect the personal data we hold, including restricting access to those who need it to do their job and using reputable, secure third-party tools (such as Cal.com, Google Analytics, and Mailchimp) for the services described in this policy.
10. Changes to This Policy
We may update this policy from time to time as our business and website evolve. The version in effect is dated at the top of this document. We encourage you to check this page periodically.
11. Contact Us
If you have any questions about this policy or how we handle your personal data, please contact us at hello@plisticmedia.com.
Plistic is the trading name of Songplistic Ltd, a company registered in Scotland under company number SC699049. Registered office: 2 West Drive Cottage, Stracathro, Brechin, Scotland, DD9 7QF.