Privacy Notice
Last updated: 10 October 2026
Who we are
Pluribus Omnia Ltd ("we", "us") is the controller of the personal data described in this notice. We are a company registered in England and Wales, company number 12963828, registered office: Westwood House, Annie Med Lane, South Cave, East Yorkshire, HU15 2HG. Contact us about privacy at info@pluribusomnia.co.uk.
What we collect and why
| Source | Data | Purpose | Lawful basis |
|---|---|---|---|
| Contact form | Name, email, company, your message | Replying to your enquiry and discussing potential production work | Legitimate interests (responding to business enquiries); steps prior to a contract |
| Catalogue access request | Name, email, company | Assessing whether to grant access to our private catalogue and contacting you about it | Legitimate interests; steps prior to a contract |
| Client portal | Name, email, company, a hashed access code, brands you can view, favourited products, sign-in session data | Providing secure access to the catalogue and managing our client relationship | Legitimate interests; performance of a contract where one exists |
| Technical data | IP address, browser and request logs held by our hosting provider | Security, preventing abuse and keeping the site running | Legitimate interests |
We do not use analytics or advertising cookies, we do not sell personal data and we do not carry out automated decision-making.
Where we create a portal account for you at your or your company's request, we may obtain your name and business email from your employer or colleague who made the request.
Providing your details is voluntary, but we can't respond or grant access without them.
We do not currently use your details for marketing. If that changes, we will only contact you where the law allows and you will always be able to opt out.
How long we keep it
- Contact enquiries: 12 months from receipt, unless they lead to an ongoing business relationship.
- Pending or rejected catalogue access requests: 12 months, after which they are deleted automatically.
- Active client portal accounts: for as long as the business relationship lasts; deleted or anonymised once access is revoked and no longer needed.
- Hosting logs: kept by our providers for their standard short retention periods.
Who we share it with
We use the following service providers (processors), who act on our instructions under data processing terms:
- Vercel Inc. – website hosting and file storage (Vercel Blob, stored in London).
- Neon (Databricks) – database hosting.
- Resend – sending notification emails.
- Microsoft – our business email (Microsoft 365).
We may also disclose data where required by law or to protect our legal rights.
International transfers
Some providers are based in, or may access data from, the United States. Where personal data is transferred outside the UK we rely on the UK-US Data Bridge (where the recipient is certified) or the UK International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses, together with appropriate security measures.
Your rights
Under UK data protection law you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing (including where we rely on legitimate interests), and to data portability. To exercise any right, email info@pluribusomnia.co.uk. We will respond within one month.
You can also complain to the Information Commissioner's Office (ICO), ico.org.uk/make-a-complaint, telephone 0303 123 1113, though we would appreciate the chance to resolve your concern first.
Security
Data is encrypted in transit, passwords and access codes are stored only in hashed form, and access to admin tools is restricted.
Changes
We may update this notice from time to time; the date above shows the latest version. See also our Cookie Policy.